Merge pull request #10 from Miyamura80/fix/cargo-deny-issues

⚙️ fix: resolve cargo-deny unmaintained advisory issues

Author: Miyamura80

src-tauri/Cargo.lock

@@ -23,7 +23,7 @@ tauri = { version = "2", features = [] }
 tauri-plugin-opener = "2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-serde_yaml = "0.9"
+# serde_yml = "0.0.12"  # Not needed - config crate uses yaml-rust2
 config = { version = "0.15", features = ["yaml"] }
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }

src-tauri/Cargo.toml

@@ -2,14 +2,32 @@
 
 [advisories]
 ignore = [
+    # UNMAINTAINED TRANSITIVES - Tauri v2 Dependencies (Linux/GTK3 stack)
+    # These are foundational to the current Tauri/Wry/Tao ecosystem on Linux.
+    # They can only be addressed by upstream framework migrations (e.g., to GTK4).
+    "RUSTSEC-2024-0411", # atk is unmaintained
+    "RUSTSEC-2024-0412", # pango is unmaintained
+    "RUSTSEC-2024-0413", # gtk is unmaintained
+    "RUSTSEC-2024-0414", # gdk-pixbuf is unmaintained
+    "RUSTSEC-2024-0415", # gio is unmaintained
+    "RUSTSEC-2024-0416", # gdk is unmaintained
+    "RUSTSEC-2024-0417", # soup3 is unmaintained
+    "RUSTSEC-2024-0418", # webkit2gtk is unmaintained
+    "RUSTSEC-2024-0419", # gdkx11 is unmaintained
+    "RUSTSEC-2024-0420", # javascriptcore-rs is unmaintained
+    "RUSTSEC-2024-0370", # proc-macro-error is unmaintained (used by GTK/Glib bindings)
+
+    # UNMAINTAINED TRANSITIVES - String/URL Utilities
+    # Pulled in by urlpattern, which is used for Tauri routing.
     "RUSTSEC-2025-0100", # unic-ucd-ident is unmaintained
     "RUSTSEC-2025-0098", # unic-ucd-version is unmaintained
     "RUSTSEC-2025-0080", # unic-common is unmaintained
-    "RUSTSEC-2025-0101", # unic-char-range is unmaintained
-    "RUSTSEC-2025-0102", # unic-char-property is unmaintained
-    "RUSTSEC-2025-0099", # unic-ucd-common is unmaintained
     "RUSTSEC-2025-0075", # unic-char-range is unmaintained
-    "RUSTSEC-2025-0076", # unic-char-property is unmaintained
+    "RUSTSEC-2025-0081", # unic-* crates are unmaintained
+
+    # UNMAINTAINED TRANSITIVES - CSS/Selectors
+    # Pulled in by kuchikiki -> selectors -> fxhash.
+    "RUSTSEC-2025-0057", # fxhash is unmaintained
 ]
 
 [licenses]
@@ -20,9 +38,7 @@ allow = [
     "BSD-2-Clause",
     "Zlib",
     "MPL-2.0",
-    "Unicode-DFS-2016",
     "ISC",
-    "OpenSSL",
     "Unicode-3.0",
     "0BSD",
     "Apache-2.0 WITH LLVM-exception",