Kobi Hikri ed060166ff chore(deny): drop stale RUSTSEC-2026-0049 suppression (patched in resolved 0.103.13) (#24509) ...

## What this does

`deny.toml` suppresses `RUSTSEC-2026-0049` (rustls-webpki) with the
comment *"No fix in stable rustls-webpki yet."* That's no longer true,
so this drops the stale suppression.

## Why it's safe

- The advisory is patched: `patched = [">= 0.103.10"]`
([RUSTSEC-2026-0049](https://rustsec.org/advisories/RUSTSEC-2026-0049),
dated 2026-03-20).
- `Cargo.lock` already resolves `rustls-webpki` to `0.103.13`, which is
`>= 0.103.10`.

So `cargo deny` won't flag the advisory anymore, and keeping the ignore
just hides future regressions in that crate. `RUSTSEC-2026-0049` was the
only entry, so the list becomes `ignore = []`.

## Verification

```
grep -A1 'name = "rustls-webpki"' Cargo.lock            # version = "0.103.13"
# advisory: patched = [">= 0.103.10"]  → 0.103.13 satisfies it
```

One-line config change.

---

*Disclosure: I used an AI tool to help spot this and prepare the change;
I verified the resolved version and the advisory's patched range myself
and take responsibility for it.*

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

2026-07-14 23:13:58 +08:00

11 KiB

Raw Permalink Blame History

View Raw