Skip to content

Remove "RUSTSEC-2026-0097" from deny.toml when rand is upgraded #2045

@ok-nick

Description

@ok-nick

Our dependency rand is reporting an "unsound error" with cargo-deny on all branches. We can't update it because our dependency ed25519-dalek still depends on an older version of rand_core, at least until they cut a new release (dalek-cryptography/curve25519-dalek#876). Luckily, this error doesn't apply to us because we don't enable the log features of rand, so we can add an entry to ignore it in the deny.toml.

This issue tracks removing the ignore when rand is upgraded.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions