Skip to content

chore: ignore RUSTSEC-2026-0097 rand 0.8.5 advisory in cargo-deny#355

Merged
kilianglas merged 2 commits intomainfrom
kilianglas/ignore-rand-advisory
Apr 15, 2026
Merged

chore: ignore RUSTSEC-2026-0097 rand 0.8.5 advisory in cargo-deny#355
kilianglas merged 2 commits intomainfrom
kilianglas/ignore-rand-advisory

Conversation

@kilianglas
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown

@alessandromazza98 alessandromazza98 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cannot we just update it to a new version instead of ignoring this problem? using cargo update -p rand?

If there is a reason I'd write it down both here in the PR description and in the comment in the code as well

@kilianglas
Copy link
Copy Markdown
Contributor Author

The patch is only available for 0.9.x. We have 0.8.x as a dep. Updating requires a version migration in multiple crates.

@kilianglas kilianglas merged commit 50134b6 into main Apr 15, 2026
16 checks passed
@kilianglas kilianglas deleted the kilianglas/ignore-rand-advisory branch April 15, 2026 14:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants