From e080d9335ae6e83808af582ebe9f4f313e88ebbb Mon Sep 17 00:00:00 2001
From: link2xt <link2xt@testrun.org>
Date: Thu, 5 Nov 2026 12:53:23 +0000
Subject: [PATCH] chore: add cargo-deny exceptions for unmaintained crates

pin-utils is a transitive dependency of async-imap, it should be removed there first.

astral-tokio-tar is deprecated in favor of a completely new tar-codec announced at <https://astral.sh/blog/tar-codec>,
which as of version 0.0.16 has a warning on the README:
"This crate is in a very early state of development and is not considered ready for production use."
---
 deny.toml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/deny.toml b/deny.toml
index c5b8b82635..5df62af0b5 100644
--- a/deny.toml
+++ b/deny.toml
@@ -13,6 +13,14 @@ ignore = [
     # Unmaintained paste
     "RUSTSEC-2024-0436",
 
+    # Unmaintained pin-utils
+    # <https://rustsec.org/advisories/RUSTSEC-2026-0441>
+    "RUSTSEC-2026-0441",
+
+    # Unmaintained astral-tokio-tar
+    # <https://rustsec.org/advisories/RUSTSEC-2026-0440>
+    "RUSTSEC-2026-0440",
+
     # Unmaintained rustls-pemfile
     # It is a transitive dependency of iroh 0.35.0,
     # this should be fixed by upgrading to iroh 1.0 once it is released.