Pull request overview

Summary of changes

This PR updates the cargo-deny advisories configuration to keep cargo deny check advisories passing in the presence of new RustSec advisories. It adds an explicit ignore entry for RUSTSEC-2026-0173 and updates the rationale text for the existing RUSTSEC-2026-0110 ignore. The intent is to document that the affected crates are deprecated/unmaintained and that remediation depends on upstream dependency migration.

Changes:

• Update the ignore rationale for RUSTSEC-2026-0110 to clarify the dependency chain (via cortex-m).
• Add an ignore entry for RUSTSEC-2026-0173 with a short justification.

Step-by-step review guide

1. Advisory allowlisting update (RustSec ignores)

   • What changed: The [advisories].ignore list now includes RUSTSEC-2026-0173, and the reason for RUSTSEC-2026-0110 was rewritten.
   • Why it matters: These entries control whether CI/tooling will block on advisory findings. Keeping reasons accurate helps future maintainers understand the risk acceptance and what needs to change upstream to remove the exception.

2. Reason text refinement for existing ignore

   • What changed: The RUSTSEC-2026-0110 reason now explicitly notes bare-metal is deprecated/archived and that cortex-m depends on it.
   • Why it matters: This improves traceability for why the repo is accepting the advisory and what upstream needs to change to resolve it.

Potential issues

No issues identified in the proposed change.