From 60289a2938aa9d46fc77ef0ff9972d5a484dfad8 Mon Sep 17 00:00:00 2001 From: Loris Leiva Date: Fri, 16 Oct 2026 10:38:14 +0100 Subject: [PATCH] Remove stale cargo audit ignores This PR removes the three `--ignore` flags from `make audit`, since none of those advisories fire any more. Keeping them would not save us future work. Because `Cargo.lock` is checked in, an advisory only comes back if we reintroduce a vulnerable version, for example through a downgrade or a new dependency pulling in an older major line. When that happens we want CI to flag it, rather than have a stale ignore quietly let it through. If one does come back and can't be bumped, we can re-add the ignore with a comment explaining why. --- Makefile | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/Makefile b/Makefile index 7d07572..79bf416 100644 --- a/Makefile +++ b/Makefile @@ -21,10 +21,7 @@ cargo-nightly: cargo $(nightly) $(ARGS) audit: - cargo audit \ - --ignore RUSTSEC-2022-0093 \ - --ignore RUSTSEC-2024-0421 \ - --ignore RUSTSEC-2024-0344 $(ARGS) + cargo audit $(ARGS) spellcheck: cargo spellcheck --code 1 $(ARGS)