fix: ignore cargo audit for unmaintained crate bincode (#27101)

philjb · web-flow · commit e30c17eb5c3a · 2026-01-08T08:56:36.000-07:00
Ignores RUSTSEC-2025-0141 until we can migrate away. We have previously accepted unmaintained crates in the past via * #27009 * #26112
diff --git a/deny.toml b/deny.toml
@@ -13,6 +13,9 @@ ignore = [
     # from object_store. We've removed our direct dependency and migrated to
     # rustls-pki-types. Remove once object_store updates.
     "RUSTSEC-2025-0134",
+    # bincode is considered complete at 1.3.3 and no longer maintained. It is
+    # past 1.0. Pulled into monolith via deps from iox.
+    "RUSTSEC-2025-0141",
 ]
 git-fetch-with-cli = true
 

Original file line number	Diff line number	Diff line change
`@@ -13,6 +13,9 @@ ignore = [`
`13`	`13`	`# from object_store. We've removed our direct dependency and migrated to`
`14`	`14`	`# rustls-pki-types. Remove once object_store updates.`
`15`	`15`	`"RUSTSEC-2025-0134",`
	`16`	`+ # bincode is considered complete at 1.3.3 and no longer maintained. It is`
	`17`	`+ # past 1.0. Pulled into monolith via deps from iox.`
	`18`	`+ "RUSTSEC-2025-0141",`
`16`	`19`	`]`
`17`	`20`	`git-fetch-with-cli = true`
`18`	`21`