Файли
openidea/deny.toml
T
Shohruh Ismoilov 44d871caee fix(deps): bundle patched SQLite for RUSTSEC-2026-0459 (#2351)
Update libsqlite3-sys to 0.39.1 (SQLite 3.54.1), which needs SQLx at its unreleased rev 10462fa: SQLx 0.9.0 on crates.io caps libsqlite3-sys below 0.38. The rev also brings the 48 other commits on SQLx's main since 0.9.0. Cargo deny allows this one Git source and requires revision pins.
2026-11-09 20:30:07 +08:00

30 рядки
1002 B
TOML

[advisories]
version = 2
unmaintained = "workspace"
yanked = "warn"
ignore = [
# SQLx MySQL uses RSA public-key encryption; russh/ssh-key use signatures.
# No RSA private-key decryption is exposed to attacker-controlled ciphertext.
{ id = "RUSTSEC-2023-0071", reason = "RSA is used for MySQL password encryption and SSH signatures, not RSA decryption" },
]
[licenses]
allow = [
"MIT", "Apache-2.0", "Apache-2.0 WITH LLVM-exception", "BSD-2-Clause",
"BSD-3-Clause", "ISC", "Zlib", "0BSD", "CC0-1.0", "Unlicense", "MIT-0",
# File-level copyleft, used unmodified as dependencies.
"MPL-2.0",
"Unicode-3.0", "Unicode-DFS-2016", "CDLA-Permissive-2.0", "OpenSSL",
]
[bans]
multiple-versions = "warn"
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
# SQLx's unreleased SQLite dependency ceiling fix, pinned in Cargo.toml.
allow-git = ["https://github.com/transact-rs/sqlx"]
required-git-spec = "rev"