From bc9578f71327a6544d6c63aef8ef8a8d0a5a49c3 Mon Sep 17 00:00:00 2001 From: "J.C. Jones" Date: Mon, 10 Aug 2026 14:56:40 -0700 Subject: [PATCH 1/2] Ignore smartstring RUSTSEC advisory. (release/0.7 backport) It's part of Trillium, which we'll soon be rid of. --- deny.toml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deny.toml b/deny.toml index 390dae922..4cdc8cc02 100644 --- a/deny.toml +++ b/deny.toml @@ -28,6 +28,10 @@ ignore = [ # We have migrated from `rustls-pemfile` but not everything else has. # See . "RUSTSEC-2025-0134", + + # 'smartstring' is part of Trillium. It goes away once divviup-client is migrated + # off Trillium. + "RUSTSEC-2026-0249", ] [bans] From ccb26af1b3b700ca5b87adfa3171fe5dd777cd07 Mon Sep 17 00:00:00 2001 From: "J.C. Jones" Date: Mon, 10 Aug 2026 15:37:06 -0700 Subject: [PATCH 2/2] Apply suggestion from @jcjones --- deny.toml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/deny.toml b/deny.toml index 4cdc8cc02..a4a55acac 100644 --- a/deny.toml +++ b/deny.toml @@ -29,8 +29,7 @@ ignore = [ # See . "RUSTSEC-2025-0134", - # 'smartstring' is part of Trillium. It goes away once divviup-client is migrated - # off Trillium. + # 'smartstring' is part of Trillium, and it's unmaintained. "RUSTSEC-2026-0249", ]