From ee61aee659b82432fc111d4fae5c9fe1af4938a0 Mon Sep 17 00:00:00 2001 From: Mac L Date: Sun, 3 May 2026 15:10:19 +0400 Subject: [PATCH] Unblock CI by temporarily ignoring `hickory-proto` audit failures (#9257) Two audit failures for `hickory-proto` which is used upstream in `libp2p-dns` and `libp2p-mdns` - https://rustsec.org/advisories/RUSTSEC-2026-0118.html - https://rustsec.org/advisories/RUSTSEC-2026-0119.html Tracking Issue: https://github.com/sigp/lighthouse/issues/9258 Since RUSTSEC-2026-0118 does not even have any non-patched versions available and RUSTSEC-2026-0119 requires a major version bump I think we would need to wait on a release from libp2p in both cases. So for now, add an ignore for each so we can at least unblock CI Co-Authored-By: Mac L --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 04973193ec..dd57bb038e 100644 --- a/Makefile +++ b/Makefile @@ -330,7 +330,7 @@ install-audit: cargo install --force cargo-audit audit-CI: - cargo audit --ignore RUSTSEC-2026-0049 --ignore RUSTSEC-2026-0098 --ignore RUSTSEC-2026-0099 --ignore RUSTSEC-2026-0104 + cargo audit --ignore RUSTSEC-2026-0049 --ignore RUSTSEC-2026-0098 --ignore RUSTSEC-2026-0099 --ignore RUSTSEC-2026-0104 --ignore RUSTSEC-2026-0118 --ignore RUSTSEC-2026-0119 # Runs cargo deny (check for banned crates, duplicate versions, and source restrictions) deny: install-deny deny-CI