chore: upgrade cargo deny and allow Unicode-3.0 license (#2367)

aws · Nov 5, 2024 · 959a538 · 959a538
1 parent 7d4620d
commit 959a538
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 2 deletions.
diff --git a/.github/config/cargo-deny.toml b/.github/config/cargo-deny.toml
@@ -1,7 +1,18 @@
 [advisories]
 yanked = "deny"
 ignore = [
-    "RUSTSEC-2021-0139", # criterion, structopt, and tracing-subscriber (test dependencies) use ansi_term
+  # `atty` is a dependency of `structopt` and only used in s2n-quic-qns and s2n-quic-sim
+  # https://github.com/aws/s2n-quic/issues/2324
+  "RUSTSEC-2021-0145",
+  # `atty` is a dependency of `structopt` and only used in s2n-quic-qns and s2n-quic-sim
+  # https://github.com/aws/s2n-quic/issues/2324
+  "RUSTSEC-2024-0375",
+  # ` proc-macro-error` is a dependency of `structopt` and only used in s2n-quic-qns and s2n-quic-sim
+  # https://github.com/aws/s2n-quic/issues/2324
+  "RUSTSEC-2024-0370",
+  # `ansi_term` is a dependency of `structopt` and only used in s2n-quic-qns and s2n-quic-sim
+  # https://github.com/aws/s2n-quic/issues/2324
+  "RUSTSEC-2021-0139"
 ]
 
 [bans]
@@ -43,6 +54,7 @@ allow = [
     "OpenSSL",
     "Unicode-DFS-2016",
     "Zlib",
+    "Unicode-3.0",
 ]
 
 [[licenses.clarify]]

diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
@@ -56,6 +56,6 @@ jobs:
       - name: "Remove rust-toolchain"
         run: rm rust-toolchain
 
-      - uses: EmbarkStudios/cargo-deny-action@v1
+      - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           command: check --config .github/config/cargo-deny.toml