Skip to content

Commit d77dcd4

Browse files
committed
ci: ignore RUSTSEC-2026-0049 in cargo audit
rustls-webpki 0.102.x CRL matching bug is a transitive dependency of async-nats 0.46.0 (latest). Cannot upgrade until async-nats releases a version that depends on rustls-webpki 0.103.x.
1 parent cff5e20 commit d77dcd4

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

.github/workflows/audit.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,4 +26,6 @@ jobs:
2626
persist-credentials: false
2727
- uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
2828
- run: cargo install cargo-audit --locked
29-
- run: cargo audit
29+
# RUSTSEC-2026-0049: rustls-webpki 0.102.x CRL bug, transitive dep of async-nats 0.46.0.
30+
# Remove --ignore when async-nats updates its rustls-webpki dependency.
31+
- run: cargo audit --ignore RUSTSEC-2026-0049

0 commit comments

Comments
 (0)