Update deny config (#375)

* Add regex-syntax to cargo-deny skip-tree * Remove not detected cargo-deny advisory ignore * Fix to use skip instead of skip-tree to allow duplicate regex-syntax * Fix typo Co-authored-by: Jonas Platte <[email protected]> --------- Co-authored-by: Jonas Platte <[email protected]>
tower-rs · Jun 14, 2023 · f22c3ab · f22c3ab
1 parent d22f200
commit f22c3ab
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/deny.toml b/deny.toml
@@ -2,12 +2,7 @@
 vulnerability = "deny"
 unmaintained = "warn"
 notice = "warn"
-ignore = [
-  # Potential Unix segfault with time crate, used by chrono.
-  # if setting env vars in threaded context, we are unlikely affected
-  # https://github.com/time-rs/time/issues/293
-  "RUSTSEC-2020-0159",
-]
+ignore = []
 
 [licenses]
 unlicensed = "deny"
@@ -36,6 +31,11 @@ license-files = [
 [bans]
 multiple-versions = "deny"
 highlight = "all"
+skip = [
+  # tracing-subscriber depends on multiple versions of regex-syntax.
+  # This is not actually depended by tower-http as this is caused by examples.
+  { name = "regex-syntax", version = ">=0.6, <= 0.7" },
+]
 skip-tree = [{ name = "tower", version = ">=0.3, <=0.4" }]
 
 [sources]