Merge pull request #3404 from autonomys/resolve-some-advisories

Selectively update a few dependencies to remove some RUSTSEC advisory supressions
autonomys · Feb 24, 2025 · be7b65d · be7b65d
2 parents c8eba37 + 7c0a5b1
commit be7b65d
Show file tree

Hide file tree

Showing 2 changed files with 246 additions and 28 deletions.
diff --git a/.github/workflows/rustsec-audit.yml b/.github/workflows/rustsec-audit.yml
@@ -21,6 +21,4 @@ jobs:
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           # TODO: Remove first once Substrate upgrades litep2p and we no longer have rustls 0.20.9 in our dependencies
-          # TODO: Remove second once Substrate upgrades libp2p and we no longer have old idna in our dependencies
-          # TODO: Remove third once Substrate upgrades libp2p and we no longer have old hickory-proto in our dependencies
-          ignore: RUSTSEC-2024-0336,RUSTSEC-2024-0421,RUSTSEC-2025-0006
+          ignore: RUSTSEC-2024-0336