From aca7bbe6aa89e0933d11216b922a59249acb50ba Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Wed, 11 Dec 2024 13:53:35 -0700 Subject: [PATCH] v2.1: fix audit (backport of #4014) (#4022) fix audit (#4014) (cherry picked from commit 6c86ce59aaa5564f2050b84a66993790c4fb9529) Co-authored-by: Yihau Chen --- ci/do-audit.sh | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/ci/do-audit.sh b/ci/do-audit.sh index 406129a97e5172..011359d2dbba3d 100755 --- a/ci/do-audit.sh +++ b/ci/do-audit.sh @@ -29,6 +29,17 @@ cargo_audit_ignores=( # Solution: Upgrade to >=2 --ignore RUSTSEC-2022-0093 + # Crate: idna + # Version: 0.1.5 + # Title: `idna` accepts Punycode labels that do not produce any non-ASCII when decoded + # Date: 2024-12-09 + # ID: RUSTSEC-2024-0421 + # URL: https://rustsec.org/advisories/RUSTSEC-2024-0421 + # Solution: Upgrade to >=1.0.0 + # need to solve this depentant tree: + # jsonrpc-core-client v18.0.0 -> jsonrpc-client-transports v18.0.0 -> url v1.7.2 -> idna v0.1.5 + --ignore RUSTSEC-2024-0421 + # === programs/sbf === # # Crate: curve25519-dalek