forestia/bevy
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ignore RUSTSEC-2023-0089 until postcard is updated (#19038)

Browse Source 
# Objective

- CI fails due to `atomic-polyfill` being unmaintained

## Solution

- Dependency chain of `postcard -> heapless -> atomic-polyfill` .
`heapless` is updated. `postcard` has not yet.
- See https://github.com/jamesmunns/postcard/issues/223
- Ignore the advisory for now

## Testing

- CI with this PR

---------

Co-authored-by: MichiRecRoom <1008889+LikeLakers2@users.noreply.github.com>
This commit is contained in:
Daniel Skates 2025-05-05 13:50:03 +08:00 committed by GitHub
parent c286e4f5f3
commit 65f7b05841
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
deny.toml
View File

@ -8,6 +8,9 @@ ignore = [
# See: https://rustsec.org/advisories/RUSTSEC-2024-0436
# Bevy relies on this in multiple indirect ways, so ignoring it is the only feasible current solution
"RUSTSEC-2024-0436",
# unmaintained: postcard -> heapless -> atomic-polyfill
# See https://github.com/jamesmunns/postcard/issues/223
"RUSTSEC-2023-0089",
]
[licenses]