From f14ad6be79e039308d5b42c574ae741493217b8a Mon Sep 17 00:00:00 2001
From: Yang Xiufeng <yangxiufeng.c@gmail.com>
Date: Wed, 4 Dec 2024 22:53:46 +0800
Subject: [PATCH] ci: fix RUSTSEC-2024-0402.

 https://rustsec.org/advisories/RUSTSEC-2024-0402
---
 .cargo/audit.toml | 2 ++
 Cargo.toml        | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.cargo/audit.toml b/.cargo/audit.toml
index e676c61a92a9..91cd644f49a6 100644
--- a/.cargo/audit.toml
+++ b/.cargo/audit.toml
@@ -47,4 +47,6 @@ ignore = [
     "RUSTSEC-2024-0351",
     # gix-path: improperly resolves configuration path reported by Git
     "RUSTSEC-2024-0371",
+    # Borsh serialization of HashMap is non-canonical
+    "RUSTSEC-2024-0402",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 87be2fb47c36..2feae4bef7b2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -294,7 +294,7 @@ gimli = "0.31.0"
 globiter = "0.1"
 goldenfile = "1.4"
 h3o = "0.4.0"
-hashbrown = { version = "0.15.0", default-features = false }
+hashbrown = { version = "0.15.2", default-features = false }
 hashbrown_v0_14 = { package = "hashbrown", version = "0.14.0", default-features = false, features = ["ahash"] }
 hashlink = "0.8"
 headers = "0.4.0"