mirror of
https://github.com/anthonyoteri/dredge.git
synced 2026-06-05 15:26:53 -04:00
Anthony Oteri
d37ca2de44
- cargo deny: add MPL-2.0 and BSD-3-Clause to allow list (colored via simple_logger/mockito; encoding_rs via reqwest) - conventional commits: use explicit SHA of last pre-conventional commit instead of from_latest_tag (no tags exist yet in the repo) - MSRV: raise rust-version 1.80 -> 1.88 to match the actual minimum required by the dependency tree (simple_logger -> time 0.3 -> 1.88) - MSRV CI: update toolchain pin to 1.88 to match - macOS test: remove Swatinem/rust-cache from test matrix job to avoid stale cache corrupting the cargo binary path on arm64 runners
47 lines
1.4 KiB
TOML
47 lines
1.4 KiB
TOML
# cargo-deny configuration
|
||
# https://embarkstudios.github.io/cargo-deny/
|
||
|
||
[graph]
|
||
# Check all targets, not just the host.
|
||
all-features = true
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Licenses
|
||
# ---------------------------------------------------------------------------
|
||
[licenses]
|
||
# Minimum confidence threshold for license detection (0.0 – 1.0).
|
||
confidence-threshold = 0.8
|
||
|
||
# Licenses we explicitly permit across the entire dependency tree.
|
||
allow = [
|
||
"MIT",
|
||
"Apache-2.0",
|
||
"Unicode-3.0",
|
||
"MPL-2.0",
|
||
"BSD-3-Clause",
|
||
]
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Security advisories
|
||
# ---------------------------------------------------------------------------
|
||
[advisories]
|
||
# Deny crates with known security vulnerabilities.
|
||
version = 2
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Crate bans
|
||
# ---------------------------------------------------------------------------
|
||
[bans]
|
||
# Deny multiple versions of the same crate (can cause bloat and confusion).
|
||
multiple-versions = "warn"
|
||
# Deny wildcard dependencies.
|
||
wildcards = "deny"
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Crate sources
|
||
# ---------------------------------------------------------------------------
|
||
[sources]
|
||
# Only allow crates from crates.io.
|
||
unknown-registry = "deny"
|
||
unknown-git = "deny"
|