From 202425bc8d827172ce49b327ab4a2b74a3fe4d00 Mon Sep 17 00:00:00 2001
From: Yang Cen <bubble-cal@outlook.com>
Date: Wed, 12 Aug 2026 01:40:14 +0800
Subject: [PATCH] ci: accept unmaintained smartstring advisory

---
 deny.toml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/deny.toml b/deny.toml
index d94c9d536..f2bc8b78c 100644
--- a/deny.toml
+++ b/deny.toml
@@ -68,6 +68,12 @@ ignore = [
     # https://rustsec.org/advisories/RUSTSEC-2025-0119
     { id = "RUSTSEC-2025-0119", reason = "transitive via hf-hub/indicatif; cosmetic formatting crate" },
 
+    # smartstring: unmaintained. Transitive through the optional Polars
+    # integration. There is no patched release; replacing it requires Polars
+    # to migrate to compact_str, smol_str, or another maintained alternative.
+    # https://rustsec.org/advisories/RUSTSEC-2026-0249
+    { id = "RUSTSEC-2026-0249", reason = "transitive via optional polars integration; no patched release" },
+
     # rustls-webpki 0.101.7 (old major line): name-constraint checks for
     # URI / wildcard names. Pulled in only via the legacy rustls 0.21 chain
     # from aws-smithy-http-client. The 0.103 line we actively use is patched.