Skip to content

build(deps): document temporary zstd advisory exceptions - #442

Merged
hexfusion merged 2 commits into
praxis-proxy:mainfrom
evacchi:fix-deps
Oct 26, 2026
Merged

hexfusion merged 2 commits into
praxis-proxy:mainfrom
evacchi:fix-deps

Conversation

@evacchi

@evacchi evacchi commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

temporarily ignore the following to unblock the builds:

# zstd 0.13.3 / zstd-safe 7.3.0 are pinned through the gateway's
# upstream Pingora header-serde dependency, which has no release with
# compatible requirements for the fixed zstd 0.14 / zstd-safe 8 APIs.
"RUSTSEC-2026-0391",
"RUSTSEC-2026-0398",
"RUSTSEC-2026-0403",
# The allocator-shim issue applies only to wasm32; grid-gateway is a native
# binary and does not build for WebAssembly.
"RUSTSEC-2026-0410",

(feel free to close if there is a better approach)

Signed-off-by: Edoardo Vacchi <evacchi@users.noreply.github.com>
@evacchi
evacchi requested a review from a team October 26, 2026 17:15
@evacchi
evacchi requested a review from a team as a code owner October 26, 2026 17:15
@coderabbitai

coderabbitai Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 42 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Central YAML; Path: .coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: f5453967-f3aa-4e62-a3c5-c71ffe5b78b8
Commits

Reviewing files that changed from the base of the PR and between 0633868 and 2ca549b.

Files selected for processing: 2
  • .cargo/audit.toml
  • crates/gateway/deny.toml
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Comment thread .cargo/audit.toml Resolved
@hexfusion
hexfusion merged commit 9e345a4 into praxis-proxy:main Oct 26, 2026
66 of 68 checks passed
@evacchi
evacchi deleted the fix-deps branch October 27, 2026 08:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants