# cargo-audit configuration
# https://rustsec.org/

[advisories]
ignore = [
    # wasmtime 41.0.4 advisories — transitive via extism 1.21.0, which pins
    # `wasmtime = "41"`. Fixes land in 42.0.2+ / 43.0.1+, so no 41.x upgrade
    # clears them. Extism upstream has not moved to 42+ yet. Plugin subsystem
    # is feature-gated (`extism` cargo feature) and off by default in prod
    # builds; revisit when extism bumps its wasmtime floor.
    "RUSTSEC-2026-0085",
    "RUSTSEC-2026-0086",
    "RUSTSEC-2026-0087",
    "RUSTSEC-2026-0088",
    "RUSTSEC-2026-0089",
    "RUSTSEC-2026-0091",
    "RUSTSEC-2026-0092",
    "RUSTSEC-2026-0093",
    "RUSTSEC-2026-0094",
    "RUSTSEC-2026-0095",
    "RUSTSEC-2026-0096",
    "RUSTSEC-2026-0114",
    # instant crate unmaintained — transitive dep via nostr; no upstream fix
    "RUSTSEC-2024-0384",
]
