chore: Update comment in deny.toml

Techassi · Techassi · commit d860bc37a61a · 2026-06-12T11:04:23.000+02:00
diff --git a/deny.toml b/deny.toml
@@ -20,12 +20,18 @@ ignore = [
   # that the crate is no longer maintained and recommends that users migrate away from it.
   #
   # There currently is no way for us to negate this advisory, because that crate is not used
-  # directly by us. We need to wait for new versions of oci-spec and getset.
+  # directly by us. We need to wait for new versions of oci-spec and getset. See the following
+  # issue which tracks moving to a newer getset version: https://github.com/youki-dev/oci-spec-rs/issues/340
   #
   # proc-macro-error2 v2.0.1
   #  └── getset v0.1.6
   #      └── oci-spec v0.9.0
   #          └── boil v0.2.1
+  #
+  # Alternate crates are:
+  #
+  # - https://crates.io/crates/manyhow
+  # - https://github.com/SergioBenitez/proc-macro2-diagnostics
   "RUSTSEC-2026-0173",
 ]
 

Original file line number	Diff line number	Diff line change
`@@ -20,12 +20,18 @@ ignore = [`
`20`	`20`	`# that the crate is no longer maintained and recommends that users migrate away from it.`
`21`	`21`	`#`
`22`	`22`	`# There currently is no way for us to negate this advisory, because that crate is not used`
`23`		`- # directly by us. We need to wait for new versions of oci-spec and getset.`
	`23`	`+ # directly by us. We need to wait for new versions of oci-spec and getset. See the following`
	`24`	`+ # issue which tracks moving to a newer getset version: https://github.com/youki-dev/oci-spec-rs/issues/340`
`24`	`25`	`#`
`25`	`26`	`# proc-macro-error2 v2.0.1`
`26`	`27`	`# └── getset v0.1.6`
`27`	`28`	`# └── oci-spec v0.9.0`
`28`	`29`	`# └── boil v0.2.1`
	`30`	`+ #`
	`31`	`+ # Alternate crates are:`
	`32`	`+ #`
	`33`	`+ # - https://crates.io/crates/manyhow`
	`34`	`+ # - https://github.com/SergioBenitez/proc-macro2-diagnostics`
`29`	`35`	`"RUSTSEC-2026-0173",`
`30`	`36`	`]`
`31`	`37`