chore: ignore RUSTSEC-2025-0140 gix-date vulnerability

The gix-date 0.11.0 vulnerability (TimeBuf::as_str can create non-UTF8
strings) is introduced via tame-index 0.25.0 which pins gix 0.75.0.

Cannot update gix directly as it would conflict with tame-index's
gix dependency. Ignoring until tame-index releases an update with
gix 0.77+.

Author: cosmir17

deny.toml

@@ -13,6 +13,9 @@ all-features = true
 [advisories]
 unmaintained = "workspace"
 ignore = [
+    # gix-date 0.11.0 vulnerability via tame-index 0.25.0 -> gix 0.75.0
+    # Waiting for tame-index to update to gix 0.77+
+    { id = "RUSTSEC-2025-0140", reason = "tame-index 0.25.0 pins gix 0.75.0; no updated version available yet" },
 ]
 
 [bans]

src/cargo-deny/check.rs

@@ -548,9 +548,7 @@ fn print_diagnostics(
     use cargo_deny::diag::Check;
 
     if log_ctx.format == crate::Format::Sarif {
-        let workspace_root = krates
-            .map(|k| k.workspace_root().as_str())
-            .unwrap_or("");
+        let workspace_root = krates.map_or("", |k| k.workspace_root().as_str());
         let mut sc = cargo_deny::sarif::SarifCollector::new(workspace_root);
 
         for pack in rx {