chore: update cargo deny to handle deprecated config entries (#6980)

Co-authored-by: DaniPopes <57450786+DaniPopes@users.noreply.github.com>
This commit is contained in:
Tom French
2024-03-06 01:34:02 +00:00
committed by GitHub
parent ff91824c17
commit e41b184d88

View File

@ -2,11 +2,8 @@
# More documentation for the advisories section can be found here: # More documentation for the advisories section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html # https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
[advisories] [advisories]
vulnerability = "deny" version = 2
unmaintained = "warn"
unsound = "warn"
yanked = "warn" yanked = "warn"
notice = "warn"
# This section is considered when running `cargo deny check bans`. # This section is considered when running `cargo deny check bans`.
# More documentation about the 'bans' section can be found here: # More documentation about the 'bans' section can be found here:
@ -28,9 +25,8 @@ skip = []
skip-tree = [] skip-tree = []
[licenses] [licenses]
unlicensed = "deny" version = 2
confidence-threshold = 0.8 confidence-threshold = 0.8
# copyleft = "deny"
# List of explicitly allowed licenses # List of explicitly allowed licenses
# See https://spdx.org/licenses/ for list of possible licenses # See https://spdx.org/licenses/ for list of possible licenses
@ -48,8 +44,6 @@ allow = [
"Unicode-3.0", "Unicode-3.0",
# https://github.com/briansmith/ring/issues/902 # https://github.com/briansmith/ring/issues/902
"LicenseRef-ring", "LicenseRef-ring",
# https://github.com/briansmith/webpki/issues/148
"LicenseRef-webpki",
# https://github.com/rustls/webpki/blob/main/LICENSE ISC Style # https://github.com/rustls/webpki/blob/main/LICENSE ISC Style
"LicenseRef-rustls-webpki", "LicenseRef-rustls-webpki",
] ]
@ -65,6 +59,11 @@ exceptions = [
{ allow = ["CC0-1.0"], name = "tiny-keccak" }, { allow = ["CC0-1.0"], name = "tiny-keccak" },
{ allow = ["CC0-1.0"], name = "more-asserts" }, { allow = ["CC0-1.0"], name = "more-asserts" },
{ allow = ["CC0-1.0"], name = "aurora-engine-modexp" }, { allow = ["CC0-1.0"], name = "aurora-engine-modexp" },
# TODO: decide on MPL-2.0 handling
# These dependencies are grandfathered in in https://github.com/paradigmxyz/reth/pull/6980
{ allow = ["MPL-2.0"], name = "attohttpc" },
{ allow = ["MPL-2.0"], name = "option-ext" },
{ allow = ["MPL-2.0"], name = "webpki-roots" },
] ]
[[licenses.clarify]] [[licenses.clarify]]
@ -72,11 +71,6 @@ name = "ring"
expression = "LicenseRef-ring" expression = "LicenseRef-ring"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }] license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
[[licenses.clarify]]
name = "webpki"
expression = "LicenseRef-webpki"
license-files = [{ path = "LICENSE", hash = 0x001c7e6c }]
[[licenses.clarify]] [[licenses.clarify]]
name = "rustls-webpki" name = "rustls-webpki"
expression = "LicenseRef-rustls-webpki" expression = "LicenseRef-rustls-webpki"