From 5b3e3f598a57fe657d6759d41c30d337e05ea366 Mon Sep 17 00:00:00 2001 From: LGUG2Z Date: Thu, 5 Nov 2026 13:14:03 -0800 Subject: [PATCH] build(deny): ignore RUSTSEC-2025-0059, servo-fontconfig is unmaintained It is reached only through font-loader, which komorebi-bar looks up system fonts with; it was already in the lock before the recorder and schemars-nixgen merged. --- deny.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/deny.toml b/deny.toml index 1ff6d50f..4e065b1a 100644 --- a/deny.toml +++ b/deny.toml @@ -24,6 +24,7 @@ ignore = [ { id = "RUSTSEC-2026-0370", reason = "zvariant is maintained inside zbus from zbus 6; komorebi talks to KWin with zbus 5" }, { id = "RUSTSEC-2026-0371", reason = "zbus_names is maintained inside zbus from zbus 6; komorebi talks to KWin with zbus 5" }, { id = "RUSTSEC-2026-0372", reason = "zvariant_derive is maintained inside zbus from zbus 6; komorebi talks to KWin with zbus 5" }, + { id = "RUSTSEC-2025-0059", reason = "servo-fontconfig is unmaintained and has no safe upgrade; it is reached only through font-loader, which komorebi-bar looks up system fonts with" }, { id = "RUSTSEC-2026-0183", reason = "git2 is only used by shadow-rs at build time to read version info from our own repository" }, { id = "RUSTSEC-2026-0184", reason = "git2 is only used by shadow-rs at build time to read version info from our own repository" }, { id = "RUSTSEC-2026-0194", reason = "quick-xml is only used to parse local, trusted XML (config conversion and plist files), not untrusted input" },