From 240e840f25926033c7d6f810a2e741e32c2a2daa Mon Sep 17 00:00:00 2001
From: Centaur AI <ai@centaur.local>
Date: Mon, 4 May 2026 05:18:38 +0000
Subject: [PATCH] =?UTF-8?q?chore(deny):=20remove=20RUSTSEC-2026-0118=20ign?=
 =?UTF-8?q?ore=20=E2=80=94=20hickory-proto=200.26.1=20is=20unaffected?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The advisory marks >=0.26.0-beta.1 as unaffected. Our pinned reth rev
(38c627c) already resolves hickory-proto 0.26.1 in Cargo.lock, so the
ignore is no longer needed.

Amp-Thread-ID: https://ampcode.com/threads/T-019df16b-333f-73f8-98a6-17f389f1da75
---
 deny.toml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/deny.toml b/deny.toml
index e7e2411ad3..1cbb848a23 100644
--- a/deny.toml
+++ b/deny.toml
@@ -8,10 +8,6 @@ ignore = [
   "RUSTSEC-2024-0436",
   # https://rustsec.org/advisories/RUSTSEC-2025-0141 bincode is unmaintained
   "RUSTSEC-2025-0141",
-  # https://rustsec.org/advisories/RUSTSEC-2026-0118 vulnerable DnssecDnsHandle code was
-  # moved from hickory-proto to hickory-net in 0.26.0; we use hickory-net 0.26.1 which has
-  # the fix, and no patched hickory-proto release exists
-  "RUSTSEC-2026-0118",
 ]
 
 # This section is considered when running `cargo deny check bans`.