fix(audit): update advisories to ignore known vulnerabilities in dependencies

Author: lxsaah

.cargo/audit.toml

@@ -2,5 +2,11 @@
 # See: https://github.com/rustsec/rustsec/blob/main/cargo-audit/audit.toml.example
 
 [advisories]
-# Advisories to ignore (transitive dependencies we can't fix)
-ignore = []
+# Advisories to ignore (transitive dependencies we can't fix in the current
+# embedded and CLI dependency graph). These are tracked upstream and have no
+# viable replacement in the workspace today.
+ignore = [
+    "RUSTSEC-2023-0071", # rsa timing sidechannel via embedded-tls; no fixed upgrade available
+    "RUSTSEC-2026-0110", # bare-metal deprecated via cortex-m (embedded-only transitive)
+    "RUSTSEC-2026-0173", # proc-macro-error2 unmaintained (transitive via defmt/tabled_derive)
+]

deny.toml

@@ -22,9 +22,10 @@ wildcards = "allow"
 [advisories]
 version = 2
 yanked = "warn"
-# bare-metal is archived/deprecated and pulled transitively by cortex-m in the
-# embedded stack; there is currently no drop-in replacement at this depth.
+# These transitive advisories are accepted for the current workspace because the
+# upstream dependency chain has no viable replacement path at the moment.
 ignore = [
+    "RUSTSEC-2023-0071", # rsa timing sidechannel via embedded-tls; no fixed upgrade available
     "RUSTSEC-2026-0110", # bare-metal deprecated via cortex-m (embedded-only transitive)
     "RUSTSEC-2026-0173", # TEMP: proc-macro-error2 unmaintained (transitive via defmt-macros/tabled_derive)
 ]