Upgrade deny.toml to version 2 (#704)
1[advisories]
2version = 2
3db-path = "~/.cargo/advisory-db"
4db-urls = ["https://github.com/rustsec/advisory-db"]
5yanked = "deny"
6ignore = [
7 "RUSTSEC-2021-0145" # from criterion, used only for benchmarking
8]
9
10[licenses]
11version = 2
12allow = [
13 "MIT",
14 "Unicode-DFS-2016",
15 "Apache-2.0",
16 "Zlib",
17 "ISC",
18 "BSD-3-Clause"
19]
20
21[bans]
22multiple-versions = "deny"
23wildcards = "deny"
24highlight = "all"
25# Certain crates/versions that will be skipped when doing duplicate detection.
26skip = [
27 # Bypass problems with wildcard dependencies for dev-dependencies.
28 # Proper fix requires https://github.com/EmbarkStudios/cargo-deny/issues/448
29 { name = "taffy" },
30
31 # This dependency won't actually end up in the final binary anyway as it a sub-dependency
32 # of num-cpus and atty only when targeting the hermit unikernel OS
33 # (https://github.com/hermitcore/rusty-hermit)
34 { name = "hermit-abi" },
35
36 # Long-term we'll want to re-ban this. However it's going to take a while for the ecosystem to
37 # transition over to syn 2 and we don't want to block Taffy releases in the meantime.
38 { name = "syn" },
39]
40
41[sources]
42unknown-registry = "deny"
43unknown-git = "deny"
44allow-registry = ["https://github.com/rust-lang/crates.io-index"]
45allow-git = []