[advisories]
ignore = [
    # rsa timing sidechannel — transitive via sqlx-mysql, which pgmold doesn't use (postgres only)
    "RUSTSEC-2023-0071",
    # tokio-tar file smuggling — dev-only dependency via testcontainers
    "RUSTSEC-2025-0111",
    # rand unsound with custom global logger — pgmold does not register a custom logger
    "RUSTSEC-2026-0097",
]
