ci(deny): ignore RUSTSEC-2024-0449 (unsafe-libyaml unmaintained)

[lxsaah]

Description

Fixes the red License and Dependency Check on #316. cargo deny fails on the newly published advisory RUSTSEC-2024-0449 (unsafe-libyaml is unmaintained):

unsafe-libyaml 0.2.11
└── serde_yaml 0.9.34+deprecated
    └── zenoh-config 1.10.1
        └── zenoh 1.10.1 → aimdb-zenoh-connector

zenoh-config depends on serde_yaml unconditionally, so no feature flag or in-range upgrade removes it. The connector builds its zenoh::Config in code and never parses YAML, so it never runs the unmaintained parser. aimdb-cli also depends on serde_yaml, but only behind its optional yaml feature, which is off by default.

This adds the advisory to the ignore lists in deny.toml and .cargo/audit.toml, the same way the other transitive zenoh advisories (paste, lz4_flex, rustls-pemfile) are handled. Drop it once zenoh moves off serde_yaml.

Verified locally with cargo-deny 0.20.2: the zenoh-feature cargo deny check reproduces the CI failure without the change. With the change, both CI invocations (cargo deny check and the zenoh --features std,transport-tls,transport-quic,transport-ws,auth-usrpwd run) report advisories ok, bans ok, licenses ok, sources ok.

Related Issue

• Unblocks Zenoh connector and ROS 2 topics through rmw_zenoh (design 053, native backend) #316

Checklist

• I have read the CONTRIBUTING.md document.
• My code follows the project's coding standards.
• I have added tests to cover my changes. (config-only)
• All new and existing tests passed (make check). (ran cargo deny check only)
• I have updated the documentation accordingly.

🤖 Generated with Claude Code

https://claude.ai/code/session_01J2QULimKpNCt2w5JwQ5V6w

---

Generated by Claude Code