Prune the paste ignore from deny.toml, and stop mirroring the one that cannot match
Both entries warned `advisory-not-detected` on build 60, and the file's own
convention says that is the signal to prune. Only one of them had left the
graph, though, so they get different treatment.
paste is gone: the dependency trim in 2a53c900 took the last path to it and it
is no longer in Cargo.lock. Dropped from deny.toml and from .cargo/audit.toml.
proc-macro-error2 2.0.1 is still in the graph, and removing its ignore from
.cargo/audit.toml makes `cargo audit` report it again — measured, not assumed.
It reads as not-detected only to cargo-deny, whose `[advisories] version = 2`
does not report an informational unmaintained advisory for a transitive crate.
So the ignore stays where it is load-bearing and comes out of the mirror, which
is the one place the two files now diverge, with a note saying why.
Co-Authored-By
Claude Opus 5 (1M context) <noreply@anthropic.com>
Author: Max Johnson <me@maxj.phd> · 2026-08-20 02:10 UTC