[librsvg: 2/5] Note about cargo-audit in RELEASING.md

[Federico Mena Quintero <federico src gnome org>]

commit 893200f9c234b956f4dae091dc5ec331abb23bbd
Author: Federico Mena Quintero <federico gnome org>
Date:   Thu Mar 18 10:27:17 2021 -0600

    Note about cargo-audit in RELEASING.md

 RELEASING.md | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)
---
diff --git a/RELEASING.md b/RELEASING.md
index 9002738b..fed3bfe0 100644
--- a/RELEASING.md
+++ b/RELEASING.md
@@ -18,9 +18,14 @@ off items while making a release.
 - [ ] `git push` the signed tag to gitlab.gnome.org/GNOME/librsvg
 - [ ] `scp librsvg-x.y.z.tar.xz master.gnome.org:`
 - [ ] `ssh master.gnome.org` and then `ftpadmin install librsvg-x.y.z.tar.xz`
-- [ ] If this is a `x.y.0` release, [notify the release
-      team][release-team] on whether to use it for the next GNOME
-      version via an issue on their `GNOME/releng` project.
+      
+For `x.y.0` releases, at least, do the following:
+
+- [ ] [Notify the release team][release-team] on whether to use this
+      `librsvg-x.y.0` for the next GNOME version via an issue on their
+      `GNOME/releng` project.
+      
+- [ ] `cargo-audit audit` and ensure we don't have vulnerable dependencies.
 
 ## Version numbers