v2.3: Ignore security advisory from tracing-subscriber dep (backport of #7846)

[mergify]

Problem

Crate:     tracing-subscriber
Version:   0.3.7
Title:     Logging user input may result in poisoning logs with ANSI escape sequences
Date:      2025-08-29
ID:        RUSTSEC-2025-0055
URL:       https://rustsec.org/advisories/RUSTSEC-2025-0055
Solution:  Upgrade to >=0.3.20
Dependency tree:
tracing-subscriber 0.3.7

Summary of Changes

Ignore the advisory given the callers of this dependency are not production code:

cargo tree --invert tracing-subscriber --depth 3
tracing-subscriber v0.3.20
└── tracing-opentelemetry v0.17.2
    └── tarpc v0.29.0
        ├── solana-banks-client v3.1.0 (/Users/steviez/src/solana/banks-client)
        ├── solana-banks-interface v3.1.0 (/Users/steviez/src/solana/banks-interface)
        └── solana-banks-server v3.1.0 (/Users/steviez/src/solana/banks-server)
```<hr>This is an automatic backport of pull request #7846 done by [Mergify](https://mergify.com).

[t-nelson]

can we drop the 3.0 from the commit title as well?

[steviez]

can we drop the 3.0 from the commit title as well?

I was going to do it on merge through the GUI; I can git commit --amend if you'd prefer

[t-nelson]

not sure how ci managed to break here

[steviez]

not sure how ci managed to break here

I see you already retried a handful of times too ... always something

[t-nelson]

pr is obviously correct and unrelated to ci failure. gonna merge on red

[steviez]

pr is obviously correct and unrelated to ci failure. gonna merge on red

Works for me but guess I should have done the git commit --amend after all 😆