Skip to content

Commit

Permalink
fix(CI): address warnings of cargo deny
Browse files Browse the repository at this point in the history
Address the warnings produced by cargo deny

Signed-off-by: Flavio Castelli <[email protected]>
  • Loading branch information
flavio committed Jun 5, 2023
1 parent d7fd05b commit 9c7c472
Showing 1 changed file with 1 addition and 53 deletions.
54 changes: 1 addition & 53 deletions deny.toml
Original file line number Diff line number Diff line change
@@ -1,14 +1,10 @@
[advisories]
ignore = [
# We are using some deprecated versions to support Windows
"RUSTSEC-2020-0016",

# a chrono issue, this is just a test dependency
"RUSTSEC-2020-0071",
]

[licenses]

confidence-threshold = 1.0
copyleft = "deny"
unlicensed = "deny"
Expand All @@ -19,12 +15,8 @@ default = "deny"
# See https://spdx.org/licenses/ for list of possible licenses
# [possible values: any SPDX 3.11 short identifier (+ optional exception)].
allow = [
"BSD-2-Clause",
"LicenseRef-krator",
"LicenseRef-krator-derive",
"LicenseRef-ring",
"LicenseRef-webpki",
"LicenseRef-webpki-roots",
"MPL-2.0",
"Unicode-DFS-2016",
]
Expand Down Expand Up @@ -57,53 +49,9 @@ license-files = [
]

[bans]
multiple-versions = "allow"
skip = [
# Pretty much all of these are for duplicate versions

# Clap is using a lower version, so we can ignore it for now
{ name = "ansi_term", version = "=0.11.0" },
# Currently there is an upper bound on later versions of hyperx that make it impossible to
# resolve dependencies. We need https://github.com/dekellum/hyperx/pull/34 merged in order to
# update the dependencies here
{ name = "base64", version = "=0.10.1" },
{ name = "bytes", version = "=0.4.12" },
{ name = "http", version = "=0.1.21" },
{ name = "percent-encoding", version = "=1.0.1" },

# Old bitflags comes from old dependency needed for Windows
{ name = "bitflags", version = "=0.9.1" },
# Windows testing dep
{ name = "bytes", version = "=0.3.0" },
# Windows dep
{ name = "bytes", version = "=0.5.6" },

# Duplicate deps from kube dependencies
{ name = "pin-project", version = "=0.4.28"},
{ name = "pin-project-internal", version = "=0.4.28"},

# Used by tempfile in our tests
{ name = "remove_dir_all", version = "=0.5.3"},

# We depend on www-authenticate, which depends on these older versions
{ name = "unicase", version = "=1.4.2"},
{ name = "version_check", version = "=0.1.5"},

# There appear to be several wasmtime-wasi dependencies that are out of sync. This skips those
# specific ones
{ name = "wast", version = "=35.0.2" },
]

skip-tree = [
# Skip these windows specific crates that we know are using old versions, which trigger duplicates
{ name = "mio", version = "^0.6" },
{ name = "miow", version = "^0.2" },
{ name = "tokio-compat-02", version = "=0.2.0"},
{ name = "env_logger", version = "=0.4.3"},
{ name = "version-sync", version = "^0.5"},

# Warp uses an older version of rand, we can ignore that version here
{ name = "rand", version = "=0.7.3" },

# Earlier version used by some of the WASI stuff
{ name = "rustc_version", version = "=0.3.3"},
]

0 comments on commit 9c7c472

Please sign in to comment.