Skip to content

chore(deny): remove RUSTSEC-2024-0370 and 2026-0002 ignores - #6473

Closed
noahgift wants to merge 1 commit into
mainfrom
chore/hold-lift-zstd-ignores-2
Closed

noahgift wants to merge 1 commit into
mainfrom
chore/hold-lift-zstd-ignores-2

Conversation

@noahgift

Copy link
Copy Markdown
Member

Refs #1740

Removed the two ignores from 17 toml files (.cargo/audit.toml, deny.toml, crates/*/deny.toml).

  • cargo deny check advisories after removal: EXIT=0
  • cargo audit: EXIT=1, from unrelated advisories (crypto-bigint, ctutils, lru 0.16.4, unsafe-libyaml), none from these ignores.
  • RUSTSEC-2024-0436 (paste) ignore is kept, not removed as the ruling asked: with all 3 removed deny fails on it (EXIT=1). paste comes via gemm, simba, metal, pulp, rav1e and tokenizers, all already at their latest versions. Quorum 3/3 chose to keep it openly. Receipt: cop-inbox/handoff/rmedia-cop/hlift2-quorum.md

Not armed.

🤖 Generated with Claude Code

cargo deny check advisories EXIT=0 with both removed. RUSTSEC-2024-0436 (paste)
ignore stays: no upstream fix, quorum 3/3 (handoff/rmedia-cop/hlift2-quorum.md).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=6473 head=33a79a0151aaedb2ed5384dab50dd87a7799d836 verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

@noahgift

Copy link
Copy Markdown
Member Author

EMG-004 §2.2 (U5): landed on main in b610136 (#6476, identical patch-id 9c062a8917eb80e6ef26a3e216fe3d4f403c4473).

@noahgift noahgift closed this Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant