From 664ce9836a99f3039415942a8cfa32484d9ab88a Mon Sep 17 00:00:00 2001
From: Alice Cecile <alice.i.cecile@gmail.com>
Date: Thu, 24 Nov 2022 09:31:00 -0500
Subject: [PATCH] Don't specify explicit version for dev-dependencies (#258)

* Don't specify explicit version for dev-dependencies

alice@pop-os:~/Documents/Code/taffy$ cargo publish --dry-run
    Updating crates.io index
   Packaging taffy v0.2.0 (/home/alice/Documents/Code/taffy)
error: failed to prepare local package for uploading

Caused by:
  failed to select a version for the requirement `taffy = "^0.2.0"`
  candidate versions found which didn't match: 0.1.0
  location searched: crates.io index
  required by package `taffy v0.2.0 (/home/alice/Documents/Code/taffy)`

* Clean up cargo-deny warnings

* Bypass duplicate detection for taffy itself

* Remove stale duplicate allow
---
 Cargo.toml | 6 +++---
 deny.toml  | 6 ++++--
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index 0c2542343..7ed527866 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -33,9 +33,9 @@ criterion = "0.4"
 rstest = "0.15.0"
 rand = "0.8.5"
 rand_chacha = "0.3.1"
-# We need to explicitly set a version here so that cargo deny doesn't complain
-# Don't forget to update this when bumping the version of taffy!
-taffy = { path = ".", version = "0.2.0", features = ["random"] }
+
+# Enable example and test-specific features
+taffy = { path = ".", features = ["random"] }
 
 [profile.release]
 lto = true
diff --git a/deny.toml b/deny.toml
index b749bf864..6502e3bf5 100644
--- a/deny.toml
+++ b/deny.toml
@@ -6,7 +6,7 @@ unmaintained = "deny"
 yanked = "deny"
 notice = "deny"
 ignore = [
-    "RUSTSEC-2021-0127" # from serde_cbor
+    "RUSTSEC-2021-0145" # from criterion, used only for benchmarking
 ]
 
 [licenses]
@@ -26,7 +26,9 @@ wildcards = "deny"
 highlight = "all"
 # Certain crates/versions that will be skipped when doing duplicate detection.
 skip = [
-    { name = "itoa", version = "1.0.2" }
+    # Bypass problems with wildcard dependencies for dev-dependncies.
+    # Proper fix requires https://github.com/EmbarkStudios/cargo-deny/issues/448
+    { name = "taffy" }
 ]
 
 [sources]