From db7eb641cbc0a81dcd640350501b357df53abf94 Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Mon, 31 Aug 2026 13:58:53 -0700
Subject: [PATCH] ci(osv): ignore GHSA-h7x2-h6g9-p789 until mlflow ships a fix

The advisory was modified 2026-08-31 and flags mlflow 3.13.0 through
3.15.2 with no fixed release published, so every osv-scan run fails
with nothing to bump. Same treatment as the existing diskcache entry.
---
 osv-scanner.toml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/osv-scanner.toml b/osv-scanner.toml
index 7ab450945f5..5b0339bdcd0 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -2,3 +2,8 @@
 id = "GHSA-w8v5-vhqr-4h9v"
 ignoreUntil = 2026-09-09
 reason = "diskcache has no fixed release published; remove this entry once one exists"
+
+[[IgnoredVulns]]
+id = "GHSA-h7x2-h6g9-p789"
+ignoreUntil = 2026-09-14
+reason = "mlflow has no fixed release published; remove this entry once one exists"