Skip to content

Commit 11e0ef5

Browse files
Ignore unmaintained security advisory about paste for now (bevyengine#18209)
# Objective The `paste` crate is giving us [warnings in CI](https://github.com/bevyengine/bevy/actions/runs/13751490200/job/38452998990?pr=18099) via `cargo-deny` about being unmaintained. This warning is quite noisy: making unrelated PRs seem like they have a problem due to a job failing. ## Solution Ignore the warning for now. There are multiple crates (accesskit, metal, macro_rules_attribute, rmp) which are using this, and there's no clear migration advice, even if we want to poke upstream to swap off. Strategy for ignoring was taken from https://github.com/EmbarkStudios/cargo-deny/blob/main/deny.template.toml ## Testing Let's see if CI works! --------- Co-authored-by: andriyDev <[email protected]>
1 parent 09ff7ce commit 11e0ef5

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

deny.toml

+6-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,12 @@ all-features = true
33

44
[advisories]
55
version = 2
6-
ignore = []
6+
ignore = [
7+
# paste was announced as unmaintained with no explanation or replacement
8+
# See: https://rustsec.org/advisories/RUSTSEC-2024-0436
9+
# Bevy relies on this in multiple indirect ways, so ignoring it is the only feasible current solution
10+
"RUSTSEC-2024-0436",
11+
]
712

813
[licenses]
914
version = 2

0 commit comments

Comments
 (0)