iotaledger / iota / 25470955398 / 1
67%
develop: 67%

DEFAULT BRANCH: develop
Ran
Files 1212
Run time 33s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 63.076% (-0.09%) from 63.167%
25470955398.1

push

github

web-flow 
fix: cargo deny (#11353)

## Summary

Brings the workspace back into compliance with `cargo deny` by removing
the AWS SDK's deprecated `rustls` feature, dropping `russh`'s `rsa`
feature in the AWS orchestrator to dodge a broken pre-release crate
chain, bumping `lru`, and cleaning up `deny.toml`.

## Changes

### `deny.toml` cleanup
Removed entries whose underlying dependencies no longer appear in the
graph:
- Dropped the `RUSTSEC-2025-0056` (adler unmaintained) advisory ignore.
- Dropped the `Unicode-DFS-2016` license allowance.
- Dropped the `owo-colors v3.5` `skip-tree` entry.
- Dropped the `github.com/bmwill/openapiv3.git` git source allowance.
- Added `Apache-2.0 WITH LLVM-exception` to the allowed licenses (newly
pulled in by the updated dependency graph).

Silenced the remaining duplicate-version warnings:
- `skip-tree`: `ml-kem` (russh pins old `hybrid-array`); `cynic-parser`
(old `logos`, `logos-codegen`, `logos-derive`).
- `skip`: `prost-build = 0.13.5` (build-only, via `iota-bigtable`'s
`tonic-build`); `toml = 0.7.8` (in-tree usage; deduplication would need
a workspace-wide bump).

### AWS SDK: drop deprecated `rustls` feature
The `rustls` feature on `aws-sdk-*` crates pulls in an outdated `rustls`
that trips cargo deny. Replaced it with an explicit
`aws-smithy-http-client` HTTPS client configured for `rustls-ring`,
wired in via `.http_client(...)` on the AWS config builder.

Workspace dependency updates:
- `aws-sdk-dynamodb`, `aws-sdk-ec2`, `aws-sdk-kms`: `rustls` feature
removed.
- `aws-smithy-http-client = "1.1"` added with `rustls-ring`.

### `iota-aws-orchestrator`: drop russh's `rsa` feature
The default russh feature set pulls in `rsa-0.10.0-rc.12`, which was
written against `pkcs8 = "0.11.0-rc.8"`. Cargo resolves the released
`pkcs8 0.11.0` to satisfy that and `pkcs8::Error::KeyMalformed` changed
shape between rc.8 and the release, breaking compilation.

Trade-off: russh's `rsa` feature gates RSA SSH key parsing (it pulls
`ssh-key/rsa... (continued)

155373 of 246325 relevant lines covered (63.08%)

442096.25 hits per line

Source Files on job nextest+simtest - 25470955398.1