fix(deny): ignore RUSTSEC-2026-0099 transitive dep advisory

varex83agent · varex83 · varex83agent · commit ce5385c5eb2f · 2026-04-15T12:03:03.000+02:00
rustls-webpki wildcard name constraint bypass — transitive dep,
cannot upgrade immediately.

Co-Authored-By: Bohdan Ohorodnii &lt;35969035+varex83@users.noreply.github.com&gt;
diff --git a/deny.toml b/deny.toml
@@ -32,6 +32,8 @@ ignore = [
     { id = "RUSTSEC-2026-0097", reason = "transitive rand <0.9.3 via cuckoofilter and alloy-signer-local; not triggerable from our code" },
     # rustls-webpki URI name constraint bypass — transitive dep
     { id = "RUSTSEC-2026-0098" },
+    # rustls-webpki wildcard name constraint bypass — transitive dep
+    { id = "RUSTSEC-2026-0099" },
 ]
 unmaintained = "workspace"
 

Original file line number	Diff line number	Diff line change
`@@ -32,6 +32,8 @@ ignore = [`
`32`	`32`	`{ id = "RUSTSEC-2026-0097", reason = "transitive rand <0.9.3 via cuckoofilter and alloy-signer-local; not triggerable from our code" },`
`33`	`33`	`# rustls-webpki URI name constraint bypass — transitive dep`
`34`	`34`	`{ id = "RUSTSEC-2026-0098" },`
	`35`	`+ # rustls-webpki wildcard name constraint bypass — transitive dep`
	`36`	`+ { id = "RUSTSEC-2026-0099" },`
`35`	`37`	`]`
`36`	`38`	`unmaintained = "workspace"`
`37`	`39`