🐛 dependency lofty was yanked in yt-dlp v2.7.2

### 🔍 Bug description When I run cargo deny, I see the following output ```sh │ lofty 0.23.3 registry+https://github.com/rust-lang/crates.io-index │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ yanked version │ ├ lofty v0.23.3 └── yt-dlp v2.7.2 └── hof-core v0.1.12 ├── hof-api v0.1.12 │ └── hof-web v0.1.12 └── hof-web v0.1.12 (*) advisories ok, bans ok, licenses ok, sources ok ``` ### 📋 Steps to reproduce 1. Add latest yt-dlp@2.7.2 2. Run cargo-deny 3. See warning ### ✅ Expected behavior lofty@0.24.0 ### ❌ Actual behavior lofty@0.23.3 that was yanked ### 📦 Crate version 2.7.2 (latest) ### 📦 Crate version (if "Other") _No response_ ### 💻 Operating system Linux ### 🔌 Enabled features _No response_ ### 🧩 Minimal reproduction code ```rust ``` ### 📸 Additional context _No response_