From 32699a0be91c66c907e93c61eb2969d3c52dfee2 Mon Sep 17 00:00:00 2001
From: "devin-ai-integration[bot]"
 <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Sun, 13 Sep 2026 21:46:25 -0700
Subject: [PATCH] build(deps): re-suppress GHSA-h7x2-h6g9-p789 in osv-scan,
 mlflow still has no fixed release (#41036)

Co-authored-by: mateo <mateo@berri.ai>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 osv-scanner.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/osv-scanner.toml b/osv-scanner.toml
index 3e070fc8cf7..482254d4da6 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -5,5 +5,5 @@ reason = "diskcache has no fixed release published; remove this entry once one e
 
 [[IgnoredVulns]]
 id = "GHSA-h7x2-h6g9-p789"
-ignoreUntil = 2026-09-14
-reason = "mlflow has no fixed release published; remove this entry once one exists"
+ignoreUntil = 2026-10-14
+reason = "mlflow has no fixed release published (3.16.0, 2026-09-04, and master still store gateway secret api_base unvalidated); remove this entry once one exists"