From 4788d349856a024dce807e1012c4d08aab981fb0 Mon Sep 17 00:00:00 2001
From: Yuneng Jiang <yuneng@berri.ai>
Date: Sat, 8 Aug 2026 12:24:20 -0700
Subject: [PATCH] chore(deps): carry the pypdf scanner exceptions from staging

---
 osv-scanner.toml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/osv-scanner.toml b/osv-scanner.toml
index 7ab450945f5..4ef612e3a70 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -1,3 +1,13 @@
+[[IgnoredVulns]]
+id = "GHSA-fwg2-594c-jp42"
+ignoreUntil = 2026-08-12
+reason = "pypdf 6.15.0 (the fix) published 2026-08-06 and is still inside the P3D exclude-newer window, so uv cannot lock it yet; bump and drop this entry from 2026-08-09"
+
+[[IgnoredVulns]]
+id = "GHSA-fp3f-mc75-235c"
+ignoreUntil = 2026-08-12
+reason = "second pypdf advisory with the same 6.15.0 fix, published 2026-08-07 after the first; drop alongside GHSA-fwg2-594c-jp42 in the same bump"
+
 [[IgnoredVulns]]
 id = "GHSA-w8v5-vhqr-4h9v"
 ignoreUntil = 2026-09-09