Files
openidea/deny.toml
T
l0ng-ai 6700f57f79 fix(database): connect to MySQL servers that advertise DEPRECATE_EOF but send EOF packets (#3030)
Some servers and proxies (Aliyun RDS for MySQL 5.6) advertise CLIENT_DEPRECATE_EOF but still end result sets with legacy EOF packets; sqlx requested every advertised capability, so every query failed with "OK_Packet too short". sqlx now comes from l0ng-ai/sqlx at a rev adding MySqlConnectOptions::deprecate_eof (proposed upstream as transact-rs/sqlx#4524), and opening a MySQL pool retries once without the capability when the first connection fails with that error.

Fixes #1053
2026-11-13 09:27:41 +08:00

31 lines
1.1 KiB
TOML

[advisories]
version = 2
unmaintained = "workspace"
yanked = "warn"
ignore = [
# SQLx MySQL uses RSA public-key encryption; russh/ssh-key use signatures.
# No RSA private-key decryption is exposed to attacker-controlled ciphertext.
{ id = "RUSTSEC-2023-0071", reason = "RSA is used for MySQL password encryption and SSH signatures, not RSA decryption" },
]
[licenses]
allow = [
"MIT", "Apache-2.0", "Apache-2.0 WITH LLVM-exception", "BSD-2-Clause",
"BSD-3-Clause", "ISC", "Zlib", "0BSD", "CC0-1.0", "Unlicense", "MIT-0",
# File-level copyleft, used unmodified as dependencies.
"MPL-2.0",
"Unicode-3.0", "Unicode-DFS-2016", "CDLA-Permissive-2.0", "OpenSSL",
]
[bans]
multiple-versions = "warn"
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
# SQLx at a pinned rev: upstream's unreleased SQLite dependency ceiling fix plus the MySQL
# `deprecate_eof` option (transact-rs/sqlx#4507), until a release carries both.
allow-git = ["https://github.com/l0ng-ai/sqlx"]
required-git-spec = "rev"