fix(deny.toml): correct serde_yml advisory comment to reflect direct dependency

Co-Authored-By: Claude Opus 4.6 <[email protected]>
This commit is contained in:
2026-03-10 11:15:11 -07:00
co-authored by Claude Opus 4.6
parent bbb5321f34
commit ce4dec73fc
+1 -1
View File
@@ -3,7 +3,7 @@ unmaintained = "workspace"
yanked = "deny"
ignore = [
# Pre-existing advisories — tracked for upgrade in separate PRs
# serde_yml unsound/unmaintained — transitive dep, no direct usage
# serde_yml unsound/unmaintained — direct dep, upgrade tracked separately
"RUSTSEC-2025-0068",
# tokio-tar PAX header parsing — sandbox containers only
"RUSTSEC-2025-0111",