One pass of cargo-audit

Upgrade some yanked dependencies to non-yanked (windows-core) and ignore
the other two warnings.
This commit is contained in:
Markus Unterwaditzer
2025-10-30 13:17:37 +01:00
committed by Markus Unterwaditzer
parent 3f3b6168b3
commit 04efe7bb75
2 changed files with 37 additions and 26 deletions

11
.cargo/audit.toml Normal file
View File

@@ -0,0 +1,11 @@
[advisories]
ignore = [
# RSA Marvin Attack in `rsa`, dragged in through rustcrypto (dev builds)
# and adb_client (USB signing only, unrelated to marvin attack which
# targets decryption).
"RUSTSEC-2023-0071",
# paste crate being unmaintained is not important. it's not dealing with
# user-input. we could get rid of this warning by disabling the image
# dependency in adb-client.
"RUSTSEC-2024-0436",
]