enricobuehler b5fc017b19 ci(audit): ignore quick-xml build-time DoS advisories (RUSTSEC-2026-0194/0195) ...

quick-xml 0.39.4 enters only via wayland-scanner, a build-time proc-macro
that parses trusted crate-shipped protocol XML at compile time — never a
shipped binary, never runtime/attacker-controlled input, so neither DoS is
reachable. wayland-scanner 0.31.10 (latest) pins quick-xml ^0.39; the fixes
land only in >=0.41, so there is nothing to bump to.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-02 10:18:37 +00:00

..

audit.toml

ci(audit): ignore quick-xml build-time DoS advisories (RUSTSEC-2026-0194/0195)

2026-07-02 10:18:37 +00:00