letro/letro-authentication-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Update some dependencies and the cargo-deny allowlist

Browse Source
This commit is contained in:
Quentin Gliech
2024-07-02 15:24:18 +02:00
parent 85186682d7
commit 488cc564b9
5 changed files with 66 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
deny.toml
View File

@@ -52,7 +52,6 @@ deny = [
multiple-versions = "deny"
skip = [
{ name = "base64", version = "0.13.1" }, # async-graphql depends on this old version
{ name = "base64", version = "0.21.7" }, # many dependencies depends on this old version
{ name = "syn", version = "1.0.109" }, # sea-query, sqlx, schemars depend on the old version
{ name = "event-listener", version = "2.5.3" }, # async-channel (wiremock) and sqlx-core depend on the old version
@@ -60,7 +59,6 @@ skip = [
{ name = "regex-automata", version = "0.1.10" }, # ^
{ name = "regex-automata", version = "0.2.0" }, # icu_list depends on this old version
{ name = "indexmap", version = "1.9.3" }, # schemars depends on this old version
{ name = "bitflags", version = "1.3.2" }, # axum depends on an old version
{ name = "hashbrown" }, # Too many versions :(
# sqlx uses old versions of those:
{ name = "rustls", version = "0.21.10" },
@@ -69,6 +67,7 @@ skip = [
{ name = "webpki-roots", version = "0.25.3" },
# axum-macros, sqlx-macros and sea-query-attr use an old version
{ name = "heck", version = "0.4.1" },
# opentelemetry-http needs this
{ name = "http", version = "0.2.12" },
# sea-query-attr uses an old version of darling
{ name = "darling", version = "0.14.4" },
@@ -80,6 +79,13 @@ skip = [
{ name = "itertools", version = "0.12.1" },
# wasmtime -> cranelift is depending on this old version
{ name = "gimli", version = "0.28.1" },
# opentelemetry-otlp -> -proto -> tonic is depending on this old version
{ name = "http-body", version = "0.4.6" },
# apalis-core depends on this old version
{ name = "strum", version = "0.25.0" },
{ name = "strum_macros", version = "0.25.0" },
# For some reason, axum-core depends on this old version, even though axum is on the new one
{ name = "sync_wrapper", version = "0.1.2" },
]
skip-tree = []