fix: update cargo-deny config for new advisories and licenses (#1006)

- Clean up advisory ignore list, remove resolved entries and add new ones
- Add CDLA-Permissive-2.0 to allowed licenses
- Add OpenSSL exception for aws-lc-sys
- Bump git2 to 0.20.4 and git2_credentials to 0.15.0

Author: AlexD10S

Cargo.lock

@@ -31,7 +31,7 @@ duct = { version = "0.13", default-features = false }
 env_logger = { version = "0.11.7", default-features = false }
 flate2 = "1.0.30"
 futures = { version = "0.3.30", default-features = false }
-git2 = { version = "0.18", default-features = true, features = ["vendored-openssl"] }
+git2 = { version = "0.20.4", default-features = true, features = ["vendored-openssl"] }
 glob = { version = "0.3.1", default-features = false }
 hex = { version = "0.4", default-features = false, features = ["std"] }
 jsonrpsee = { version = "0.24", default-features = false, features = ["server", "macros"] }
@@ -85,7 +85,7 @@ serde_json = { version = "1.0", default-features = false, features = ["preserve_
 serde = { version = "1.0", default-features = false, features = ["derive"] }
 zombienet-configuration = { version = "0.4.3", default-features = false }
 zombienet-sdk = { version = "0.4.3", default-features = false }
-git2_credentials = "0.13.0"
+git2_credentials = "0.15.0"
 cumulus-client-cli = { version = "0.26.0", default-features = false }
 
 # benchmarking

Cargo.toml

@@ -4,18 +4,17 @@ all-features = false
 # This section is considered when running `cargo deny check advisories`
 [advisories]
 ignore = [
-    { id = "RUSTSEC-2024-0344", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/214" },
-    { id = "RUSTSEC-2024-0388", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/436" },
-    { id = "RUSTSEC-2024-0384", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/437" },
-    { id = "RUSTSEC-2020-0163", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/438" },
-    { id = "RUSTSEC-2024-0436", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/450" },
-    { id = "RUSTSEC-2025-0012", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/451" },
-    { id = "RUSTSEC-2024-0370", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/458" },
-    { id = "RUSTSEC-2022-0061", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/458" },
-    { id = "RUSTSEC-2020-0168", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/458" },
-    { id = "RUSTSEC-2024-0438", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/458" },
-    { id = "RUSTSEC-2023-0091", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/458" },
-    { id = "RUSTSEC-2024-0442", reason = "No upgrade available. Tracking the vulnerability: https://github.com/r0gue-io/pop-cli/issues/458" },
+    { id = "RUSTSEC-2024-0388", reason = "No upgrade available. Dependency of contract-extrinsics" },
+    { id = "RUSTSEC-2024-0384", reason = "No upgrade available. Dependency of zombienet-sdk" },
+    { id = "RUSTSEC-2020-0163", reason = "No upgrade available. Dependency of contract-extrinsics" },
+    { id = "RUSTSEC-2024-0436", reason = "No upgrade available. Dependency of contract-build" },
+    { id = "RUSTSEC-2025-0012", reason = "No upgrade available. Dependency of zombienet-sdk" },
+    { id = "RUSTSEC-2024-0370", reason = "No upgrade available. Dependency of polkadot-sdk" },
+    { id = "RUSTSEC-2022-0061", reason = "No upgrade available. Dependency of polkadot-sdk" },
+    { id = "RUSTSEC-2026-0006", reason = "No upgrade available. Dependency of polkadot-sdk" },
+    { id = "RUSTSEC-2025-0118", reason = "No upgrade available. Dependency of polkadot-sdk" },
+    { id = "RUSTSEC-2025-0134", reason = "No upgrade available. Dependency of zombienet-sdk" },
+    { id = "RUSTSEC-2026-0002", reason = "No upgrade available. Dependency of polkadot-sdk" },
 ]
 
 [licenses]
@@ -26,6 +25,7 @@ allow = [
     "BSD-2-Clause",
     "BSD-3-Clause",
     "CC0-1.0",
+    "CDLA-Permissive-2.0",
     "ISC",
     "GPL-3.0",
     "GPL-3.0 WITH Classpath-exception-2.0", # For Substrate crates
@@ -44,6 +44,10 @@ confidence-threshold = 0.93
 allow = ["OpenSSL"]
 name = "ring"
 
+[[licenses.exceptions]]
+allow = ["OpenSSL"]
+name = "aws-lc-sys"
+
 [[licenses.clarify]]
 crate = "webpki"
 expression = "ISC"