swastik-oai 0c7362d121 Ignore the unsafe-libyaml advisory in dependency audits (#53382) ...

## Why

`unsafe-libyaml` is unmaintained and has no patched release. It remains a transitive dependency through `serde_yaml`.

## What changed

Add `RUSTSEC-2024-0449` to the ignore lists in `codex-rs/.cargo/audit.toml` and `codex-rs/deny.toml`. Document the dependency path and require removing the exception when the affected users migrate off `serde_yaml`/`unsafe-libyaml`.

GitOrigin-RevId: 6f4cf32e55d2877d90bf00d2c12a1c85f18d229e

2026-10-12 13:39:54 +00:00

..

audit.toml

Ignore the unsafe-libyaml advisory in dependency audits (#53382)

2026-10-12 13:39:54 +00:00

config.toml

windows: link MSVC release binaries with static CRT (#22905)

2026-05-18 10:32:33 -07:00