diff --git a/deny.toml b/deny.toml
index 390dae922..a4a55acac 100644
--- a/deny.toml
+++ b/deny.toml
@@ -28,6 +28,9 @@ ignore = [
     # We have migrated from `rustls-pemfile` but not everything else has.
     # See <https://github.com/fussybeaver/bollard/issues/612>.
     "RUSTSEC-2025-0134",
+
+    # 'smartstring' is part of Trillium, and it's unmaintained.
+    "RUSTSEC-2026-0249",
 ]
 
 [bans]