selune
2aff1c5303
A scheduled/manual CI job scans locked dependencies for advisories, bans and unknown sources with cargo-deny 0.20.2 (never on pull requests, contents: read, no secrets). The first scan flagged quick-xml 0.38.4 (RUSTSEC-2026-0194/0195), so the workspace moves to quick-xml 0.41. Fixes #468. Co-authored-by: lillith <[email protected]>
16 lines
397 B
TOML
16 lines
397 B
TOML
# Licences remain covered by `cargo xtask licences --check`.
|
|
[advisories]
|
|
# The nightly command downgrades only this diagnostic with --warn unmaintained.
|
|
unmaintained = "all"
|
|
yanked = "warn"
|
|
|
|
[bans]
|
|
multiple-versions = "warn"
|
|
wildcards = "warn"
|
|
allow-wildcard-paths = true
|
|
|
|
[sources]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|