Skip to content

chore(deny): remove dead RUSTSEC-2024-0370 / RUSTSEC-2026-0002 ignores (Refs #1740) - #6476

Merged
noahgift merged 5 commits into
mainfrom
chore/hold-lift-zstd-ignores
Oct 27, 2026
Merged

noahgift merged 5 commits into
mainfrom
chore/hold-lift-zstd-ignores

Conversation

@noahgift

@noahgift noahgift commented Oct 27, 2026 •

Copy link
Copy Markdown
Member

Refs paiml/rmedia#1740 (paiml/rmedia), #1744. Removes the dead RUSTSEC-2024-0370 and RUSTSEC-2026-0002 ignores from the deny.toml / audit.toml files that carried them (17 files, 18 deletions, nothing added). Both advisories no longer match anything in the lockfile, so the ignores were dead. No new ignore, waiver or allowlist.

RUSTSEC-2024-0436 (paste) is NOT addressed by this PR. It stays open under paiml/rmedia#1740. An earlier revision tried a vendor/paste-shim [patch.crates-io] override; that is struck: there is no shim in this PR, root Cargo.toml has no paste patch, and the 0436 ignore is not removed.

Head 107ee70. Fresh runs at that head (logs in /mnt/nvme-raid0/cop-inbox/handoff/rmedia-cop/):

  • cargo deny check advisories: EXIT 0 (hlift3-r7-deny.log)
  • monorepo_invariants: 19 passed, 0 failed, EXIT 0 (hlift3-r7-invariants.log), including test_no_patch_in_root_cargo_toml
  • CI at this head: ci / gate, gate and workspace-test pass (run 40571873354)

Evidence logged for earlier heads (da6633b, hlift3-r3-* .. hlift3-r6-*) is superseded by the above. Not armed; #6438 must merge first.

🤖 Generated with Claude Code

t and others added 2 commits October 27, 2026 16:06
, #1744)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
…TSEC-2024-0436, Refs #1740, #1744)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=6476 head=107ee70d35226ffdb131ee584de2405eba8c7b3d verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

… stale RUSTSEC-2026-0002 comment (Refs #1740, #1744)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@noahgift noahgift changed the title chore(deny): remove zstd-hold ignores 0370/0436/2026-0002 (Refs #1740) chore(deny): remove advisory ignores 0370/0436/2026-0002, patch paste to pastey shim (Refs #1740) Oct 27, 2026
@noahgift
noahgift added this pull request to the merge queue Oct 27, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Oct 27, 2026
noahgift and others added 2 commits October 27, 2026 20:41
…0436 ignore as on main

FALSIFY-BUILD-004 (test_no_patch_in_root_cargo_toml) forbids an active
[patch.crates-io] in the root Cargo.toml, and .cargo/config.toml is gitignored,
so a committed paste override has no legal home. Remove the shim and restore the
pre-existing 0436 ignore lines; the lru/proc-macro-error ignore removals stay.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@noahgift noahgift changed the title chore(deny): remove advisory ignores 0370/0436/2026-0002, patch paste to pastey shim (Refs #1740) chore(deny): remove dead RUSTSEC-2024-0370 / RUSTSEC-2026-0002 ignores (Refs #1740) Oct 27, 2026
@noahgift
noahgift added this pull request to the merge queue Oct 27, 2026
Merged via the queue into main with commit b610136 Oct 27, 2026
13 checks passed
@noahgift
noahgift deleted the chore/hold-lift-zstd-ignores branch October 27, 2026 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant