@@ -77,7 +77,8 @@ ignore = [
7777 { id = " RUSTSEC-2024-0370" , reason = " Temporary ignore until the ouroboros branch gets updated" },
7878 # paste (via aws-lc-rs) is unmaintained
7979 # https://github.com/aws/aws-lc-rs/issues/722
80- { id = " RUSTSEC-2024-0436" , reason = " Temporary ignore until aws-lc-rs and rustls-webpki get updated" }
80+ { id = " RUSTSEC-2024-0436" , reason = " Temporary ignore until aws-lc-rs and rustls-webpki get updated" },
81+ { id = " RUSTSEC-2025-0141" , reason = " Temporary ignore until heed migrates to wincode" },
8182]
8283# If this is true, then cargo deny will use the git executable to fetch advisory database.
8384# If this is false, then it uses a built-in git library.
@@ -115,15 +116,16 @@ confidence-threshold = 0.8
115116exceptions = [
116117 # Each entry is the crate and version constraint, and its specific allow
117118 # list
118- { allow = [" LicenseRef-UFL-1.0" , " OFL-1.1" ], name = " epaint_default_fonts" , version = " 0.30.0" },
119+ { allow = [" CDLA-Permissive-2.0" ], name = " webpki-root-certs" , version = " 0.26.11" },
120+ { allow = [" CDLA-Permissive-2.0" ], name = " webpki-root-certs" , version = " 1.0.5" },
121+ { allow = [" CDLA-Permissive-2.0" ], name = " webpki-roots" , version = " 1.0.5" },
122+ { allow = [" LicenseRef-UFL-1.0" , " OFL-1.1" , " Ubuntu-font-1.0" ], name = " epaint_default_fonts" , version = " 0.31.0" },
119123 { allow = [" MPL-2.0" ], name = " bitmaps" , version = " 3.2.1" },
120124 { allow = [" MPL-2.0" ], name = " imbl" , version = " 3.0.0" },
121125 { allow = [" MPL-2.0" ], name = " imbl-sized-chunks" , version = " 0.1.3" },
122126 { allow = [" MPL-2.0" ], name = " option-ext" , version = " 0.2.0" },
123- { allow = [" MPL-2.0" ], name = " webpki-root-certs" , version = " 0.26.7" },
124127 { allow = [" MPL-2.0" ], name = " webpki-roots" , version = " 0.25.4" },
125- { allow = [" MPL-2.0" ], name = " webpki-roots" , version = " 0.26.7" },
126- { allow = [" Zlib" ], name = " foldhash" },
128+ { allow = [" Zlib" ], crate = " foldhash" },
127129 { allow = [" Zlib" ], name = " slotmap" , version = " 1.0.7" },
128130 { allow = [" Zlib" ], name = " typewit" , version = " 1.11.0" },
129131 { allow = [" Zlib" ], name = " typewit_proc_macros" , version = " 1.8.1" },
0 commit comments