From 3daff62a0173c09fc9d0c23baf9f9c8d762e4b21 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Sep 2024 08:44:14 +0000 Subject: [PATCH 1/2] chore(deps): Bump the gha-deps group with 2 updates Bumps the gha-deps group with 2 updates: [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) and [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels). Updates `EmbarkStudios/cargo-deny-action` from 1.6.3 to 2.0.1 - [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases) - [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/3f4a782664881cf5725d0ffd23969fcce89fd868...8371184bd11e21dcf8ac82ebf8c9c9f74ebf7268) Updates `mheap/github-action-required-labels` from 5.4.1 to 5.4.2 - [Release notes](https://github.com/mheap/github-action-required-labels/releases) - [Commits](https://github.com/mheap/github-action-required-labels/compare/5847eef68201219cf0a4643ea7be61e77837bbce...d25134c992b943fb6ad00c25ea00eb5988c0a9dd) --- updated-dependencies: - dependency-name: EmbarkStudios/cargo-deny-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-deps - dependency-name: mheap/github-action-required-labels dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/audit.yaml | 2 +- .github/workflows/block-merge.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml index 077b254d..80ba8585 100644 --- a/.github/workflows/audit.yaml +++ b/.github/workflows/audit.yaml @@ -52,7 +52,7 @@ jobs: cargo generate-lockfile --verbose fi - - uses: EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 # v1.6.3 + - uses: EmbarkStudios/cargo-deny-action@8371184bd11e21dcf8ac82ebf8c9c9f74ebf7268 # v2.0.1 with: arguments: --locked --all-features command: check ${{ matrix.checks }} diff --git a/.github/workflows/block-merge.yaml b/.github/workflows/block-merge.yaml index 16b671cf..8de0bf03 100644 --- a/.github/workflows/block-merge.yaml +++ b/.github/workflows/block-merge.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: mheap/github-action-required-labels@5847eef68201219cf0a4643ea7be61e77837bbce # v5.4.1 + - uses: mheap/github-action-required-labels@d25134c992b943fb6ad00c25ea00eb5988c0a9dd # v5.4.2 with: mode: exactly count: 0 From 5695c7bc615becc08e5a1b3b67d56238a262b4ba Mon Sep 17 00:00:00 2001 From: Ryan Lopopolo Date: Sun, 8 Sep 2024 13:06:42 -0700 Subject: [PATCH 2/2] Update deny.toml to address deprecations removed in 0.16.0 --- deny.toml | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/deny.toml b/deny.toml index 5847c099..9a84db8d 100644 --- a/deny.toml +++ b/deny.toml @@ -1,21 +1,10 @@ [advisories] -vulnerability = "deny" -unmaintained = "deny" -notice = "warn" ignore = [] [licenses] -unlicensed = "deny" allow = [ - "Apache-2.0", "MIT", - "Unicode-DFS-2016", ] -deny = [] -copyleft = "deny" -allow-osi-fsf-free = "neither" -default = "deny" -confidence-threshold = 0.8 [bans] multiple-versions = "deny"