swaits 54d73d9cb1 ci: ignore transitive hickory CVEs blocked by iroh's hard-pin ...

RUSTSEC-2026-0119 (hickory-proto O(n²) name-compression DoS) and
RUSTSEC-2026-0120 (hickory-net NSEC3 unbounded loop / OOM) both fire
against hickory 0.26.0-beta.4. Fixed upstream in hickory 0.26.1, but
iroh 0.98.2 hard-pins hickory-resolver = "=0.26.0-beta.4" so we
can't bump transitively. Unblock once iroh releases a version that
relaxes the pin.

2026-05-10 14:27:06 -06:00

..

ISSUE_TEMPLATE

Initial release: v0.1.0

2026-04-22 22:52:46 -06:00

workflows

ci: ignore transitive hickory CVEs blocked by iroh's hard-pin

2026-05-10 14:27:06 -06:00

PULL_REQUEST_TEMPLATE.md

Initial release: v0.1.0

2026-04-22 22:52:46 -06:00