From e1dd777991fd6a97ebcd42e0a2b19d912119e2ea Mon Sep 17 00:00:00 2001 From: Antonio Antonino Date: Mon, 11 Nov 2024 15:11:27 +0100 Subject: [PATCH 1/2] Update cargo-deny file --- .cargo-deny.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/.cargo-deny.toml b/.cargo-deny.toml index 929caab8d0..c7eb03a47d 100644 --- a/.cargo-deny.toml +++ b/.cargo-deny.toml @@ -15,6 +15,7 @@ ignore = [ { id = "RUSTSEC-2024-0336", reason = "`rustls` vulnerability. Re-verify upon next polkadot-sdk updates." }, { id = "RUSTSEC-2024-0344", reason = "`curve25519-dalek` vulnerability. Re-verify upon next polkadot-sdk updates." }, { id = "RUSTSEC-2024-0370", reason = "`proc-macro-error` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." }, + { id = "RUSTSEC-2024-0388", reason = "`derivative` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." }, ] yanked = "deny" From b1b7032b1c33755c57e981df3b39cfb5728559fa Mon Sep 17 00:00:00 2001 From: Antonio Antonino Date: Tue, 12 Nov 2024 08:12:41 +0100 Subject: [PATCH 2/2] Add instant to ignored deny crates --- .cargo-deny.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/.cargo-deny.toml b/.cargo-deny.toml index c7eb03a47d..ac67638e17 100644 --- a/.cargo-deny.toml +++ b/.cargo-deny.toml @@ -15,6 +15,7 @@ ignore = [ { id = "RUSTSEC-2024-0336", reason = "`rustls` vulnerability. Re-verify upon next polkadot-sdk updates." }, { id = "RUSTSEC-2024-0344", reason = "`curve25519-dalek` vulnerability. Re-verify upon next polkadot-sdk updates." }, { id = "RUSTSEC-2024-0370", reason = "`proc-macro-error` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." }, + { id = "RUSTSEC-2024-0384", reason = "`instant` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." }, { id = "RUSTSEC-2024-0388", reason = "`derivative` is unmaintained but a Substrate dependency. Re-verify upon next polkadot-sdk updates." }, ] yanked = "deny"