mirror of
https://seed.radicle.dev/rad:z6cFWeWpnZNHh9rUW8phgA3b5yGt.git
synced 2026-10-24 13:50:36 +08:00
The deny tooling removed many of the keys that were in the `deny.toml`. The auditing of the repository reported that `proc-macro-error` is unmaintained ([RUSTSEC-2024-0370]). This is replaced with the fork, `proc-macro-error2`, which is a drop-in replacement. It also produced a vulnerability report ([RUSTSEC-2024-0421]) for the `idna` crate, a transitive dependency of `url`. This is fixed by pinning `url` to `>= 2.5.4` [RUSTSEC-2024-0370]: https://rustsec.org/advisories/RUSTSEC-2024-0370 [RUSTSEC-2024-0421]: https://rustsec.org/advisories/RUSTSEC-2024-0421 It also pins `url` to be `>= 2.5.4`, since