put in place cargo-deny for on demand license and vulnerability checks (#9608)

GitOrigin-RevId: caa3fb20417f3cf2a68945f908a9a78c06dfef1d

Author: zxqfd555

Cargo.lock

@@ -98,7 +98,7 @@ serde_with = "3.12.0"
 smallvec = { version = "1.15.0", features = ["union", "const_generics"] }
 syn = { version = "2.0.101", features = ["default", "full", "visit", "visit-mut"] } # Hack to keep features unified between normal and build deps
 sysinfo = "0.35.1"
-tantivy = "0.22.0"
+tantivy = "0.25.0"
 tempfile = "3.20.0"
 thiserror = "1.0.63"
 timely = { path = "./external/timely-dataflow/timely", features = ["bincode"] }

Cargo.toml

@@ -0,0 +1,28 @@
+[graph]
+exclude = [
+    "abomonation", # vendorized fork
+    "differential-dataflow" # vendorized fork
+]
+
+[licenses]
+allow = [
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSL-1.0",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "CC0-1.0",
+    "CDLA-Permissive-2.0",
+    "ISC",
+    "MIT",
+    "MPL-2.0",
+    "Unicode-3.0",
+    "Zlib"
+]
+
+[[licenses.exceptions]]
+allow = ["BUSL-1.1"]
+name = "pathway"
+
+[advisories]
+unmaintained = "none"