chore(ci): fix deny advisories, nightly rustdoc lints, and stale forge-std pin

crates/anvil/src/eth/backend/db.rs

@@ -1,4 +1,4 @@
-//! Helper types for working with [revm](foundry_evm::revm)
+//! Helper types for working with [`revm`]
 
 use std::{
     collections::BTreeMap,

crates/anvil/src/eth/backend/mod.rs

@@ -1,6 +1,6 @@
 //! blockchain Backend
 
-/// [revm](foundry_evm::revm) related types
+/// [`revm`] related types
 pub mod db;
 /// In-memory Backend
 pub mod mem;

deny.toml

@@ -11,6 +11,12 @@ ignore = [
     "RUSTSEC-2025-0141",
     # proc-macro-error2 is currently still pulled in through alloy's proc-macro stack.
     "RUSTSEC-2026-0173",
+    # quick-xml <0.41 DoS advisories (quadratic dup-attr check / unbounded namespace
+    # allocation). Pulled in transitively; foundry's dep tree still pins quick-xml
+    # <0.41, so the fix (>=0.41.0) isn't reachable via `cargo update`. Not exploitable
+    # in normal CLI usage. Remove once the tree reaches quick-xml >=0.41.
+    "RUSTSEC-2026-0194",
+    "RUSTSEC-2026-0195",
 ]
 
 # This section is considered when running `cargo deny check bans`.

testdata/forge-std-rev

@@ -1 +1 @@
-620536fa5277db4e3fd46772d5cbc1ea0696fb43
+bf647bd6046f2f7da30d0c2bf435e5c76a780c1b