mirror of
https://github.com/gfx-rs/wgpu.git
synced 2025-12-08 21:26:17 +00:00
d0bcb7e62d
The warnings right now all entail `unmatched-skip` / `unmatched-skip-root` that have (likely) gotten stale since various automated Renovate bumps where `Cargo.lock` changes don't require the corresponding unmatched duplicate to be removed from `.deny.toml` again. An exception has been made for `unmatched-organization` since we don't always have a `git` dependency on a fork in `gfx-rs`, resulting in a warning about that orga being in `sources.allow-org.github`.
72 lines
1.9 KiB
TOML
72 lines
1.9 KiB
TOML
[bans]
|
|
multiple-versions = "deny"
|
|
skip-tree = [
|
|
{ name = "windows-sys", version = "0.45" },
|
|
{ name = "winit", version = "0.29" },
|
|
{ name = "rustc-hash", version = "1.1.0" },
|
|
|
|
# introduced by Deno, to be investigated
|
|
{ name = "petgraph", version = "0.6.5" },
|
|
]
|
|
skip = [
|
|
# Flume uses an old version
|
|
{ name = "nanorand", version = "0.7.0" },
|
|
|
|
# Deno uses an old version
|
|
{ name = "which", version = "6.0.3" },
|
|
|
|
# Loom uses a new windows version
|
|
{ name = "windows", version = "0.61.1" },
|
|
{ name = "windows-core", version = "0.61.2" },
|
|
{ name = "windows-implement", version = "0.60.0" },
|
|
{ name = "windows-interface", version = "0.59.1" },
|
|
{ name = "windows-result", version = "0.3.4" },
|
|
{ name = "windows-strings", version = "0.4.2" },
|
|
|
|
# cargo-metadata uses old version. Only used for infrastructure.
|
|
{ name = "toml", version = "0.8.23" },
|
|
{ name = "ordered-float", version = "2.10.1" },
|
|
# bindgen (used by deno) uses old version
|
|
{ name = "itertools", version = "0.13.0" },
|
|
# Deno uses an old version
|
|
{ name = "bincode", version = "1.3.3" },
|
|
]
|
|
wildcards = "deny"
|
|
allow-wildcard-paths = true
|
|
|
|
[advisories]
|
|
ignore = [
|
|
# `paste` crate is no longer maintained https://rustsec.org/advisories/RUSTSEC-2024-0436
|
|
# It's a dependency of `metal` (which is to be replaced with `objc2-metal`), and a
|
|
# transitive dependency of `deno`. https://github.com/gfx-rs/wgpu/issues/7873
|
|
"RUSTSEC-2024-0436",
|
|
]
|
|
|
|
[licenses]
|
|
allow = [
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"CC0-1.0",
|
|
"ISC",
|
|
"MPL-2.0",
|
|
"MIT",
|
|
"MIT-0",
|
|
"Unicode-DFS-2016",
|
|
"Unicode-3.0",
|
|
"Zlib",
|
|
]
|
|
private = { ignore = true }
|
|
|
|
[sources]
|
|
allow-git = [
|
|
# Waiting on releases; used in examples/tests only
|
|
]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
required-git-spec = "rev"
|
|
|
|
[sources.allow-org]
|
|
github = ["gfx-rs"]
|