chore(deps): update embarkstudios/cargo-deny-action action to v2 - autoclosed #434
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.6.3
->v2.0.1
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)
v2.0.1
: Release 2.0.1 - cargo-deny 0.16.1Compare Source
Fixed
unused-workspace-dependency
lint.v2.0.0
: Release 2.0.0 - cargo-deny 0.16.0Compare Source
Action
Added
Changed
v2
tag, usingv1
will be stable but not follow futurecargo-deny
releases.cargo-deny
Removed
[advisories]
The following fields have all been removed in favor of denying all advisories by default. To ignore an advisory the
ignore
field can be used as before.vulnerability
- Vulnerability advisories are nowdeny
by defaultunmaintained
- Unmaintained advisories are nowdeny
by defaultunsound
- Unsound advisories are nowdeny
by defaultnotice
- Notice advisories are nowdeny
by defaultseverity-threshold
- The severity of vulnerabilities is now irrelevant[licenses]
The following fields have all been removed in favor of denying all licenses that are not explicitly allowed via either
allow
orexceptions
.unlicensed
- Crates whose license(s) cannot be confidently determined are now always errors. Theclarify
field can be used to help cargo-deny determine the license.allow-osi-fsf-free
- The OSI/FSF Free attributes are now irrelevant, only whether it is explicitly allowed.copyleft
- The copyleft attribute is now irrelevant, only whether it is explicitly allowed.default
- The default is nowdeny
.deny
- All licenses are now denied by default, this field added nothing.Changed
bans.workspace-dependencies
section. This is an unannounced breaking change but is fairly minor and 0.15.0 was never released on github actions so the amount of people affected by this will be (hopefully) small. This also makes the workspace duplicate detection off by default since the field is optional, but makes it so that if not specified workspace duplicates are nowdeny
instead ofwarn
.Fixed
include-path-dependencies
field, allowing path dependencies to be ignored if it isfalse
.Configuration
📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.