# cargo-deny configuration. See https://embarkstudios.github.io/cargo-deny/
# Run locally with: cargo deny check

[advisories]
# Fail on any security advisory affecting the dependency tree.
yanked = "deny"
ignore = []

[bans]
# Flag multiple versions of the same crate so duplicate trees are visible.
multiple-versions = "deny"
wildcards = "deny"

# These versions are required by incompatible upstream dependency lines:
# - pem/rcgen/wtransport still use base64 0.22.
# - ring and wasm-bindgen still use getrandom 0.2.
# - current displaydoc/serde/thiserror/tokio and wasm-bindgen trees span syn 2
#   and syn 3.
# - ring still uses windows-sys 0.52 while the Tokio/QUIC tree uses 0.61.
# Keep the duplicate-version policy strict for every other crate/version.
skip = [
    { name = "base64", version = "0.22.1" },
    { name = "getrandom", version = "0.2.17" },
    { name = "syn", version = "2.0.119" },
    { name = "windows-sys", version = "0.52.0" },
]

[licenses]
# Allowlist of licenses acceptable for this project's dependencies.
allow = [
    "MIT",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Unicode-3.0",
    "Zlib",
    "MPL-2.0",
]
confidence-threshold = 0.8

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]