Markus Pettersson
cc5b249b7c
Stop ignoring RUSTSEC-2024-0436 (paste is unmaintained)
2026-09-11 09:57:33 +02:00
Linus Färnstrand
9c1a670c8a
Ban ring from our dependency tree
2026-09-03 20:28:52 +02:00
Emīls
89247fa467
Allow 0BSD license dependencies
...
0BSD is compatible with GPLv3 and more permissive than other BSD
licenses we already support.
https://www.gnu.org/licenses/license-list.en.html#Zero-BSD
2026-07-10 08:27:27 +02:00
Markus Pettersson
258b121aa2
Ignore RUSTSEC-2026-0168 advisory
...
Silence RUSTSEC-2026-0168. The pqcrypto-* crates are unmaintained, but
there are no viable alternative for the HQC algorithm at the moment.
2026-06-05 09:09:57 +02:00
Zoey Rust
60c3742581
Deduplicate windows dependency
2026-05-22 10:22:21 +02:00
Zoey Rust
25df6e644d
Depend on windows_result directly for access to its Error type
2026-05-22 10:22:20 +02:00
Linus Färnstrand
db3e333999
Update deny.toml with the actual target triples we ship Rust code to
2026-05-13 09:07:48 +02:00
Joakim Hulthe
28b601d417
Add paste to advisories.ignore
...
The most recent version of `netlink-packet-core` reverted back to using
`paste` over `pastey` because the latter not "proven by the community".
https://crates.io/crates/netlink-packet-core
https://crates.io/crates/paste
https://crates.io/crates/pastey
2026-04-29 11:21:33 +02:00
Markus Pettersson
9905e16536
Add rand < 0.9.3 to deny.toml
2026-04-15 14:25:43 +02:00
Linus Färnstrand
d29c4e4a15
Update Rust code to use GPL-3.0-or-later license SPDX
2026-02-20 13:18:38 +01:00
Markus Pettersson
29ef2a1a20
Remove ignore of RUSTSEC-2025-0142 from deny.toml
2026-02-16 12:58:54 +01:00
Sebastian Holmin
9b91c0103a
Format deny.toml files
2026-01-23 15:05:54 +01:00
Linus Färnstrand
03364a2a12
Ignore RUSTSEC-2025-0142 for two months
...
Short ignore time since we should fix our own crate and upgrade
2026-01-09 11:20:14 +01:00
Linus Färnstrand
6bad273baa
Ignore RUSTSEC-2025-0141 for six months
2026-01-07 23:37:56 +01:00
Markus Pettersson
3981421c14
Revert ignoring RUSTSEC-2024-0436 in vulnerability scanners
2025-10-01 10:58:56 +02:00
Linus Färnstrand
d9f3c505ce
Change licence identifier from GPL-3.0 to GPL-3.0-only
...
This is the new SPDX compatible identifier
2025-09-09 14:56:15 +02:00
Sebastian Holmin
74d005a051
Add "CDLA-Permissive-2.0" license
2025-08-26 15:32:06 +02:00
Linus Färnstrand
dcfc84913f
Remove custom license allowance for ring
...
Ring switched over to Apache-2.0 AND ISC, so they are now compatible
with our regular list of allowed licenses
2025-06-04 13:43:47 +02:00
Joakim Hulthe
c64570a364
Tweak wording in deny.toml
2025-04-16 18:32:21 +02:00
Markus Pettersson
a8f2884967
Silence RUSTSEC-2024-0436
2025-03-11 12:03:08 +01:00
Linus Färnstrand
2a8442f163
Forbid tokio 0.x
2024-12-19 15:30:15 +01:00
Linus Färnstrand
e2bc1a64c0
Restructure cargo bans section
2024-12-19 15:30:12 +01:00
Linus Färnstrand
d29b2ad00b
Forbid old hyper and async-std
2024-12-19 15:30:00 +01:00
Markus Pettersson
24c602a921
Revert "Silence RUSTSEC-2024-0421"
...
This reverts commit 6022cb16ba
2024-12-11 13:26:28 +01:00
Markus Pettersson
6022cb16ba
Silence RUSTSEC-2024-0421
2024-12-10 09:34:37 +01:00
Markus Pettersson
4427875be2
Add notice about what files to sync when ignoring RUSTSEC advisories
2024-11-15 07:31:48 +01:00
Linus Färnstrand
bbed3cdf80
Stop ignoring RUSTSEC-2023-0079 (Kyber timing attack)
...
The dependency with this CVE is no longer in our dependency tree
2024-10-15 11:56:57 +02:00
Markus Pettersson
637730fb40
Revert silencing RUSTSEC-2024-0370 in cargo deny
2024-09-20 08:58:44 +02:00
Markus Pettersson
b83bf05d3d
Silence RUSTSEC-2024-0370
2024-09-06 09:28:04 +02:00
David Lönnhager
41579cfb26
Add Unicode-3.0 to approved licenses
2024-08-27 11:12:51 +02:00
Oskar Nyberg
fb551fdf45
Add Zlib to allowed licences
2024-04-15 11:50:13 +02:00
Linus Färnstrand
90ce4168f0
Update [deny] section of the deny.toml files
2024-03-26 10:44:48 +01:00
Linus Färnstrand
555a80eaa3
Update [advisories] section of our deny.toml files to version 2
2024-03-26 10:44:46 +01:00
Linus Färnstrand
d8ec7ceb1f
Update and align [sources] section of our deny.toml files
2024-03-26 10:44:45 +01:00
Linus Färnstrand
d3596f679a
Update [licenses] section of deny.toml to version 2
2024-03-26 10:44:44 +01:00
Linus Färnstrand
236059ef71
Update cargo deny targets
...
Adds Android and iOS targets
2024-03-26 10:44:41 +01:00
Linus Färnstrand
7baae701c8
Point the hickory-dns dependency to our own fork of the repo
...
We should avoid depending on git repositories outside our own control.
The hickory-dns organization or repository can go away at any point in
time. That will make it way harder to re-build old versions of the app.
2024-03-26 09:26:45 +01:00
David Lönnhager
4d530d60a3
Add hickory-dns to allowed git dependencies
2024-03-18 18:13:19 +01:00
Linus Färnstrand
4b426fa6d6
Remove nix rust crate git repository from allowed external sources
2024-03-08 15:11:26 +01:00
David Lönnhager
4011170772
Temporarily allow RUSTSEC-2023-0079 in deny.toml
2024-02-09 15:54:02 +01:00
Linus Färnstrand
a4d6d259b7
Un-ignore RUSTSEC-2020-0071 and ban time 0.1 from dependency tree
2023-08-01 14:22:49 +02:00
Linus Färnstrand
f74fd478ea
Deny atty as Rust dependency
2023-08-01 10:40:23 +02:00
Linus Färnstrand
71c0352c85
Deny old clap versions in our dependency tree
2023-07-03 10:38:51 +02:00
David Lönnhager
6791bad337
Rework macOS routing
2023-06-05 20:04:30 +02:00
Emīls
ae24508c08
Allow CC0 license
2023-05-22 10:18:38 +02:00
Emīls Piņķis
10ba71b305
Allow Unicode-DFS-2016 licence
2022-09-27 21:13:24 +02:00
Linus Färnstrand
ab94bbc953
Add OpenSSL related crates to deny.toml ban section
...
We use Rustls for TLS. We don't want to accidentally pull in
OpenSSL for anything. Both because it would bloat the binaries,
and because we would then potentially be vulnerable to OpenSSL
CVEs. Which is something we don't monitor since we are not actively
using it
2022-07-01 11:45:22 +02:00
Linus Färnstrand
122721a34b
Remove documentation from deny.toml
2022-07-01 10:03:09 +02:00
Linus Färnstrand
89ebfbdd40
Improve the list of allowed licenses
2022-07-01 10:03:09 +02:00
Linus Färnstrand
46970d7e31
Add initial deny.toml file for cargo-deny
2022-07-01 10:03:00 +02:00
Markus Pettersson