Skip to content

fix: cargo deny#20627

Merged
jif-oai merged 2 commits into
mainfrom
jif/fix-deny-2
May 1, 2026
Merged

fix: cargo deny#20627
jif-oai merged 2 commits into
mainfrom
jif/fix-deny-2

Conversation

@jif-oai

@jif-oai jif-oai commented May 1, 2026

Copy link
Copy Markdown
Collaborator

Fix cargo deny by ack the RUSTSEC while a fix land

  RUSTSEC-2026-0118
  NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

  RUSTSEC-2026-0119
  CPU exhaustion during message encoding due to O(n²) name compression

  Dependency path:

  hickory-proto 0.25.2
  └── hickory-resolver 0.25.2
      └── rama-dns 0.3.0-alpha.4
          └── rama-tcp 0.3.0-alpha.4
              └── codex-network-proxy

Also upgrade some workers version to prevent this:

warning[license-not-encountered]: license was not encountered
    ┌─ ./codex-rs/deny.toml:131:6
    │
131 │     "OpenSSL",
    │      ━━━━━━━ unmatched license allowance

warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /github/workspace/codex-rs/Cargo.lock:79:1
   │
79 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
80 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 62b43f0537

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread codex-rs/deny.toml
@bolinfest bolinfest self-requested a review May 1, 2026 16:09
@jif-oai jif-oai enabled auto-merge (squash) May 1, 2026 16:10
@jif-oai jif-oai disabled auto-merge May 1, 2026 16:15
@jif-oai jif-oai merged commit 5744b85 into main May 1, 2026
25 checks passed
@jif-oai jif-oai deleted the jif/fix-deny-2 branch May 1, 2026 16:15
@github-actions github-actions Bot locked and limited conversation to collaborators May 1, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants