# cargo-deny configuration.
#
# Run with `cargo deny check` (install: `cargo install cargo-deny --locked`).
# Currently used for advisory triage; CI integration is not wired up yet.

[advisories]
version = 2
yanked = "warn"
ignore = [
    # RUSTSEC-2024-0429 — glib `VariantStrIter::impl_get` unsoundness.
    #
    # Affected: glib >=0.15.0, <0.20.0  |  Patched: >=0.20.0
    # We are on glib 0.18.5, transitively via tauri 2.10.3 -> gtk 0.18.2.
    # No workspace crate uses VariantStrIter directly; the unsound code path
    # is only reachable through gtk-rs internals (e.g. GSettings/DBus Variant
    # iteration). Tauri 2.x has not bumped its gtk-rs pin, and no 0.18.x
    # backport of the fix exists on crates.io. Re-evaluate when Tauri moves
    # to gtk-rs >= 0.19 (which pulls glib >= 0.20).
    { id = "RUSTSEC-2024-0429", reason = "transitive via tauri->gtk 0.18; no workspace use of VariantStrIter; no upstream fix available without forking" },
]
