v2.1: fix audit (backport of #4014) (#4022)

fix audit (#4014) (cherry picked from commit 6c86ce5) Co-authored-by: Yihau Chen <[email protected]>
anza-xyz · Dec 11, 2024 · aca7bbe · aca7bbe
1 parent 9e4dd59
commit aca7bbe
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/ci/do-audit.sh b/ci/do-audit.sh
@@ -29,6 +29,17 @@ cargo_audit_ignores=(
   # Solution:  Upgrade to >=2
   --ignore RUSTSEC-2022-0093
 
+  # Crate:     idna
+  # Version:   0.1.5
+  # Title:     `idna` accepts Punycode labels that do not produce any non-ASCII when decoded
+  # Date:      2024-12-09
+  # ID:        RUSTSEC-2024-0421
+  # URL:       https://rustsec.org/advisories/RUSTSEC-2024-0421
+  # Solution:  Upgrade to >=1.0.0
+  # need to solve this depentant tree:
+  # jsonrpc-core-client v18.0.0 -> jsonrpc-client-transports v18.0.0 -> url v1.7.2 -> idna v0.1.5
+  --ignore RUSTSEC-2024-0421
+
   # === programs/sbf ===
   #
   # Crate:     curve25519-dalek