cargo-deny

March 5, 2024

Version updated for EmbarkStudios/cargo-deny-action to version v1.6.0.

Go to the GitHub Marketplace to find the latest changes.

Release notes

PR#618 added metadata notes to diagnostics when a license is rejected, as well as removing span information for accepted licenses unless the log level is info or higher to make the diagnostic clearer by default.

PR#615 fixed an issue introduced in PR#605 where the various bans diagnostic codes could not have their lint level changed via the CLI. It also introduced the deprecated diagnostic code.

PR#605 did a major refactor of configuration, both how it is deserialized and changing (hopefully improving) many options.
PR#605 moved targets, exclude, all-features, features, no-default-features, and exclude into the [graph] table.
PR#605 moved feature-depth into the [output] table.

PR#613 added support for basic shell expansion to advisories.db-path, which expands support beyond just ~ to include environment variable expansion.

PR#601 resolved #600 by outputting the correct spans when a license was both allowed and denied.
PR#605 resolved #264 be replacing toml and serde with toml-span.
PR#605 resolved #539 by simplifying the very common name = "<crate_name>", version = "<requirements>" used to target specific crates into either a plain package spec string or the simpler crate = "<package spec>".
PR#605 resolved #578 by adding a reason = "<reason>" field to many fields within the configuration that are provided in diagnostics. [bans.deny] also has an additional use-instead = "<url/crate_name>". PR#610 did this for the advisories.ignore field.
PR#605 resolved #579 by allowing yanked crates to be ignored by specifying a PackageSpec in the [advisories.ignore] array.