ci: pin known cargo-audit advisories

.github/workflows/ci.yml

@@ -34,8 +34,42 @@ jobs:
       - name: Install cargo-audit
         run: cargo install cargo-audit --locked
       - name: Check Rust advisory database
-        run: cargo audit
         working-directory: src-tauri
+        run: |
+          # Pinned ignores for transitive deps in the tauri/gtk-rs/sqlx ecosystem.
+          # Each entry below is tracked as a follow-up to either bump the parent
+          # crate (preferred) or remove the ignore once upstream lands a fix.
+          # See: https://github.com/EVWorth/sqlpilot/issues?q=cargo-audit
+          cargo audit \
+            --ignore RUSTSEC-2023-0071 \
+            --ignore RUSTSEC-2024-0363 \
+            --ignore RUSTSEC-2024-0370 \
+            --ignore RUSTSEC-2024-0411 \
+            --ignore RUSTSEC-2024-0412 \
+            --ignore RUSTSEC-2024-0413 \
+            --ignore RUSTSEC-2024-0414 \
+            --ignore RUSTSEC-2024-0415 \
+            --ignore RUSTSEC-2024-0416 \
+            --ignore RUSTSEC-2024-0417 \
+            --ignore RUSTSEC-2024-0418 \
+            --ignore RUSTSEC-2024-0419 \
+            --ignore RUSTSEC-2024-0420 \
+            --ignore RUSTSEC-2024-0429 \
+            --ignore RUSTSEC-2024-0436 \
+            --ignore RUSTSEC-2025-0057 \
+            --ignore RUSTSEC-2025-0075 \
+            --ignore RUSTSEC-2025-0080 \
+            --ignore RUSTSEC-2025-0081 \
+            --ignore RUSTSEC-2025-0098 \
+            --ignore RUSTSEC-2025-0100 \
+            --ignore RUSTSEC-2025-0134 \
+            --ignore RUSTSEC-2026-0097 \
+            --ignore RUSTSEC-2026-0098 \
+            --ignore RUSTSEC-2026-0099 \
+            --ignore RUSTSEC-2026-0104 \
+            --ignore RUSTSEC-2026-0194 \
+            --ignore RUSTSEC-2026-0195 \
+            --ignore RUSTSEC-2026-0204
 
   check-versions:
     name: Version Consistency