ci: update deny action to v2 (#627)

Author: seanmonstar

.github/workflows/CI.yml

@@ -59,6 +59,7 @@ jobs:
     - uses: dtolnay/[email protected]
     - name: Remove the example crates to exclude effects to dependencies from them
       run: rm -r ./examples/* && cargo new --lib --edition 2021 examples/dummy
+    # we could probably replace all these with the cargo MSRV resolver ...
     - run: cargo update -p tokio --precise 1.38.1
     - run: cargo update -p tokio-util --precise 0.7.11
     - run: cargo update -p once_cell --precise 1.20.3
@@ -67,6 +68,7 @@ jobs:
     - run: cargo update -p tracing-core --precise 0.1.33
     - run: cargo update -p async-compression --precise 0.4.23
     - run: cargo update -p flate2 --precise 1.0.35
+    - run: cargo update -p itoa --precise 1.0.15
     - run: cargo check -p tower-http --all-features
 
   style:
@@ -90,7 +92,7 @@ jobs:
         - bans licenses sources
     steps:
     - uses: actions/checkout@v5
-    - uses: EmbarkStudios/cargo-deny-action@v1
+    - uses: EmbarkStudios/cargo-deny-action@v2
       with:
         manifest-path: tower-http/Cargo.toml
         command: check ${{ matrix.checks }}

deny.toml

@@ -1,15 +1,14 @@
 [advisories]
-vulnerability = "deny"
-unmaintained = "warn"
-notice = "warn"
+unmaintained = "none"
 ignore = []
 
 [licenses]
-unlicensed = "deny"
-allow = []
-deny = []
-copyleft = "warn"
-allow-osi-fsf-free = "either"
+allow = [
+   "MIT",
+   "Apache-2.0",
+   "BSD-3-Clause",
+   "Unicode-3.0",
+]
 confidence-threshold = 0.8
 exceptions = [
 ]