[Security] Bump quinn crate version, exception for lexical-core (#1965)

* Bump quinn crate version * Ignore advisory on lexical-core (#1966)
restatedev · Sep 17, 2024 · edd4657 · edd4657
1 parent b4da8a4
commit edd4657
Show file tree

Hide file tree

Showing 2 changed files with 79 additions and 50 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/deny.toml b/deny.toml
@@ -5,7 +5,8 @@ db-urls = ["https://github.com/rustsec/advisory-db"]
 version = 2
 yanked = "deny"
 ignore = [
-    { id = "RUSTSEC-2024-0370", reason = "crate is unmaintained. This needs `arrow_convert` to use an alternative to `err-derive`" }
+    { id = "RUSTSEC-2024-0370", reason = "crate is unmaintained. This needs `arrow_convert` to use an alternative to `err-derive`" },
+    { id = "RUSTSEC-2023-0086", reason = "lexical-core pending Arrow update https://github.com/restatedev/restate/issues/1966" }
 ]