From faffc7e1d6535b603782ad1f86468ca5913da3d3 Mon Sep 17 00:00:00 2001 From: Josh Rotenberg Date: Mon, 22 Dec 2025 09:44:50 -0800 Subject: [PATCH] fix(ci): update cargo-deny to 0.18.9 for CVSS 4.0 support The RustSec advisory database now includes advisories with CVSS 4.0 scores. cargo-deny 0.16.2 doesn't support parsing CVSS 4.0, causing the advisories check to fail. Update to 0.18.9 which includes rustsec 0.31 with CVSS 4.0 support. --- .github/workflows/cargo-deny.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cargo-deny.yml b/.github/workflows/cargo-deny.yml index 98271ce9..1b1f5490 100644 --- a/.github/workflows/cargo-deny.yml +++ b/.github/workflows/cargo-deny.yml @@ -47,7 +47,7 @@ jobs: - name: Install cargo-deny uses: taiki-e/install-action@v2 with: - tool: cargo-deny@0.16.2 + tool: cargo-deny@0.18.9 - name: Run cargo-deny run: cargo deny --all-features check ${{ matrix.checks }}