ci: ignore RUSTSEC-2024-0402. (#16998)

youngsofun · web-flow · commit 2b4782dc352e · 2024-12-04T09:36:12.000-08:00
ci: fix RUSTSEC-2024-0402. https://rustsec.org/advisories/RUSTSEC-2024-0402
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -47,4 +47,6 @@ ignore = [
     "RUSTSEC-2024-0351",
     # gix-path: improperly resolves configuration path reported by Git
     "RUSTSEC-2024-0371",
+    # Borsh serialization of HashMap is non-canonical
+    "RUSTSEC-2024-0402",
 ]
diff --git a/Cargo.toml b/Cargo.toml
@@ -294,7 +294,7 @@ gimli = "0.31.0"
 globiter = "0.1"
 goldenfile = "1.4"
 h3o = "0.4.0"
-hashbrown = { version = "0.15.0", default-features = false }
+hashbrown = { version = "0.15.2", default-features = false }
 hashbrown_v0_14 = { package = "hashbrown", version = "0.14.0", default-features = false, features = ["ahash"] }
 hashlink = "0.8"
 headers = "0.4.0"

Original file line number	Diff line number	Diff line change
`@@ -47,4 +47,6 @@ ignore = [`
`47`	`47`	`"RUSTSEC-2024-0351",`
`48`	`48`	`# gix-path: improperly resolves configuration path reported by Git`
`49`	`49`	`"RUSTSEC-2024-0371",`
	`50`	`+ # Borsh serialization of HashMap is non-canonical`
	`51`	`+ "RUSTSEC-2024-0402",`
`50`	`52`	`]`