Update dependencies to resolve advisories (#3933)

* Update Rust dependencies to resolve cargo-deny advisories

* Update minor/patch npm dependencies, too
This commit is contained in:
Keavon Chambers
2026-03-21 18:25:05 -07:00
committed by GitHub
parent 17da9ec099
commit 96418e8f5d
7 changed files with 1700 additions and 1267 deletions

View File

@@ -39,7 +39,10 @@ db-urls = ["https://github.com/rustsec/advisory-db"]
# A list of advisory IDs to ignore. Note that ignored advisories will still
# output a note when they are encountered.
ignore = [
"RUSTSEC-2024-0436", # Unmaintained but still fully functional crate `paste`
"RUSTSEC-2024-0388", # Unmaintained `derivative`, used directly by graphite-editor and graphite-desktop
"RUSTSEC-2024-0436", # Unmaintained `paste`, pulled in by dependencies `metal` and `wgpu-hal`
"RUSTSEC-2025-0134", # Unmaintained `rustls-pemfile`, pulled in by build dependency `download-cef`
"RUSTSEC-2025-0141", # Unmaintained `bincode`, pulled in by dev dependency `iai-callgrind`
]
# Threshold for security vulnerabilities, any vulnerability with a CVSS score
# lower than the range specified will be ignored. Note that ignored advisories