mirror of
https://seed.radicle.dev/rad:z4V1sjrXqjvFdnCUbxPFqd5p4DtH5.git
synced 2026-11-14 02:50:51 +08:00
Rūdolfs Ošiņš
543a7a03f9
rustls-webpki 0.103.16 and webpki-roots 1.0.10 are the first releases with the fixes for RUSTSEC-2026-0382 and RUSTSEC-2026-0381, but are still in the cooldown. We reviewed their diffs against upstream and allow them until they're old enough.
18 lines
484 B
TOML
18 lines
484 B
TOML
[cooldown]
|
|
incompatible-publish-age = "deny"
|
|
# `floor` keeps initial Cargo.lock versions as the minimum; `ignore` allows
|
|
# lower versions.
|
|
lockfile-baseline = "floor"
|
|
|
|
[registry]
|
|
global-min-publish-age = "7 days"
|
|
# Taken before the cooldown to fix RUSTSEC-2026-0381 and RUSTSEC-2026-0382.
|
|
# Reviewed against upstream; remove once they are 7 days old (2026-10-27).
|
|
[[allow.exact]]
|
|
crate = "rustls-webpki"
|
|
version = "0.103.16"
|
|
|
|
[[allow.exact]]
|
|
crate = "webpki-roots"
|
|
version = "1.0.10"
|