EmbarkStudios/cargo-deny (cargo-deny)
### [`v0.16.1`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0161---2024-08-05)
[Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.16.0...0.16.1)
##### Fixed
- [PR#691](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/691) fixed an issue where workspace dependencies that used the current dir '.' path component would incorrectly trigger the `unused-workspace-dependency` lint.
### [`v0.16.0`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0160---2024-08-02)
[Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.15.1...0.16.0)
##### Removed
- [PR#681](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/681) finished the deprecation introduced in [PR#611](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/611), making the usage of the deprecated fields into errors.
##### `[advisories]`
The following fields have all been removed in favor of denying all advisories by default. To ignore an advisory the [`ignore`](https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html#the-ignore-field-optional) field can be used as before.
- `vulnerability` - Vulnerability advisories are now `deny` by default
- `unmaintained` - Unmaintained advisories are now `deny` by default
- `unsound` - Unsound advisories are now `deny` by default
- `notice` - Notice advisories are now `deny` by default
- `severity-threshold` - The severity of vulnerabilities is now irrelevant
##### `[licenses]`
The following fields have all been removed in favor of denying all licenses that are not explicitly allowed via either [`allow`](https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-allow-field-optional) or [`exceptions`](https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-exceptions-field-optional).
- `unlicensed` - Crates whose license(s) cannot be confidently determined are now always errors. The [`clarify`](https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-clarify-field-optional) field can be used to help cargo-deny determine the license.
- `allow-osi-fsf-free` - The OSI/FSF Free attributes are now irrelevant, only whether it is explicitly allowed.
- `copyleft` - The copyleft attribute is now irrelevant, only whether it is explicitly allowed.
- `default` - The default is now `deny`.
- `deny` - All licenses are now denied by default, this field added nothing.
##### Changed
- [PR#685](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/685) follows up on [PR#673](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/673), moving the fields that were added to their own separate [`bans.workspace-dependencies`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-workspace-dependencies-field-optional) section. This is an unannounced breaking change but is fairly minor and 0.15.0 was never released on github actions so the amount of people affected by this will be (hopefully) small. This also makes the workspace duplicate detection off by default since the field is optional, *but* makes it so that if not specified workspace duplicates are now `deny` instead of `warn`.
##### Fixed
- [PR#685](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/685) resolved [#682](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/682) by adding the `include-path-dependencies` field, allowing path dependencies to be ignored if it is `false`.
### [`v0.15.1`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0151---2024-07-26)
[Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.15.0...0.15.1)
##### Fixed
- [PR#681](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/681) fixed [#680](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/680) by always stripping `.git` from urls when matching sources to resolved nodes as they are allowed, but (generally) have no semantic meaning and are stripped by cargo when emitting metadata.
### [`v0.15.0`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0150---2024-07-25)
[Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.14.24...0.15.0)
##### Added
- [PR#673](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/673) added linting of `[workspace.dependencies]`, resolving [#436](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/436) and [#525](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/525).
- Added lint [`workspace-duplicates`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-workspace-duplicates-field-optional), which allows checking for missing usage of `workspace = true` for direct workspace dependencies that are used more than once in the workspace.
- Added lint [`unused-workspace-dependencies`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-unused-workspace-dependencies-field-optional), which allows checking for dependencies declared in `[workspace.dependencies]` that aren't actually used.
##### Changed
- [PR#673](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/673) changed how span information for workspace dependencies worked, which meant improvements were made to the output for the `bans.wildcards` lint. Previously fake cargo manifests were created that weren't even necessarily valid toml files, however now the actual cargo manifests are used, meaning that the lint will now point to the correct file and line location of the dependency declaration that uses a wildcard.
- [PR#675](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/675) changed the utf-8 characters used in rendering diagnostics, inspired by [rust-lang/rust#126597](https://redirect.github.com/rust-lang/rust/pull/126597).
- [PR#676](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/676) updated notably `gix` -> 0.64 (and tame-index).
##### Fixed
- [PR#668](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/668) resolved [#667](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/667) by adding a missing feature flag to allow local cargo registry support.
### [`v0.14.24`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#01424---2024-05-24)
[Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.14.23...0.14.24)
##### Changed
- [PR#663](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/663) updated some crates, notably `gix` -> 0.63 (and tame-index).
Configuration
š Schedule: Branch creation - "after 8pm,before 6am" in timezone America/Denver, Automerge - "after 8pm,before 6am" in timezone America/Denver.
š¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
ā» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
š Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
0.14.23->0.16.1Release Notes
EmbarkStudios/cargo-deny (cargo-deny)
### [`v0.16.1`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0161---2024-08-05) [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.16.0...0.16.1) ##### Fixed - [PR#691](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/691) fixed an issue where workspace dependencies that used the current dir '.' path component would incorrectly trigger the `unused-workspace-dependency` lint. ### [`v0.16.0`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0160---2024-08-02) [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.15.1...0.16.0) ##### Removed - [PR#681](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/681) finished the deprecation introduced in [PR#611](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/611), making the usage of the deprecated fields into errors. ##### `[advisories]` The following fields have all been removed in favor of denying all advisories by default. To ignore an advisory the [`ignore`](https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html#the-ignore-field-optional) field can be used as before. - `vulnerability` - Vulnerability advisories are now `deny` by default - `unmaintained` - Unmaintained advisories are now `deny` by default - `unsound` - Unsound advisories are now `deny` by default - `notice` - Notice advisories are now `deny` by default - `severity-threshold` - The severity of vulnerabilities is now irrelevant ##### `[licenses]` The following fields have all been removed in favor of denying all licenses that are not explicitly allowed via either [`allow`](https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-allow-field-optional) or [`exceptions`](https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-exceptions-field-optional). - `unlicensed` - Crates whose license(s) cannot be confidently determined are now always errors. The [`clarify`](https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#the-clarify-field-optional) field can be used to help cargo-deny determine the license. - `allow-osi-fsf-free` - The OSI/FSF Free attributes are now irrelevant, only whether it is explicitly allowed. - `copyleft` - The copyleft attribute is now irrelevant, only whether it is explicitly allowed. - `default` - The default is now `deny`. - `deny` - All licenses are now denied by default, this field added nothing. ##### Changed - [PR#685](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/685) follows up on [PR#673](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/673), moving the fields that were added to their own separate [`bans.workspace-dependencies`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-workspace-dependencies-field-optional) section. This is an unannounced breaking change but is fairly minor and 0.15.0 was never released on github actions so the amount of people affected by this will be (hopefully) small. This also makes the workspace duplicate detection off by default since the field is optional, *but* makes it so that if not specified workspace duplicates are now `deny` instead of `warn`. ##### Fixed - [PR#685](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/685) resolved [#682](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/682) by adding the `include-path-dependencies` field, allowing path dependencies to be ignored if it is `false`. ### [`v0.15.1`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0151---2024-07-26) [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.15.0...0.15.1) ##### Fixed - [PR#681](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/681) fixed [#680](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/680) by always stripping `.git` from urls when matching sources to resolved nodes as they are allowed, but (generally) have no semantic meaning and are stripped by cargo when emitting metadata. ### [`v0.15.0`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#0150---2024-07-25) [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.14.24...0.15.0) ##### Added - [PR#673](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/673) added linting of `[workspace.dependencies]`, resolving [#436](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/436) and [#525](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/525). - Added lint [`workspace-duplicates`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-workspace-duplicates-field-optional), which allows checking for missing usage of `workspace = true` for direct workspace dependencies that are used more than once in the workspace. - Added lint [`unused-workspace-dependencies`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-unused-workspace-dependencies-field-optional), which allows checking for dependencies declared in `[workspace.dependencies]` that aren't actually used. ##### Changed - [PR#673](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/673) changed how span information for workspace dependencies worked, which meant improvements were made to the output for the `bans.wildcards` lint. Previously fake cargo manifests were created that weren't even necessarily valid toml files, however now the actual cargo manifests are used, meaning that the lint will now point to the correct file and line location of the dependency declaration that uses a wildcard. - [PR#675](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/675) changed the utf-8 characters used in rendering diagnostics, inspired by [rust-lang/rust#126597](https://redirect.github.com/rust-lang/rust/pull/126597). - [PR#676](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/676) updated notably `gix` -> 0.64 (and tame-index). ##### Fixed - [PR#668](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/668) resolved [#667](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/667) by adding a missing feature flag to allow local cargo registry support. ### [`v0.14.24`](https://redirect.github.com/EmbarkStudios/cargo-deny/blob/HEAD/CHANGELOG.md#01424---2024-05-24) [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny/compare/0.14.23...0.14.24) ##### Changed - [PR#663](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/663) updated some crates, notably `gix` -> 0.63 (and tame-index).Configuration
š Schedule: Branch creation - "after 8pm,before 6am" in timezone America/Denver, Automerge - "after 8pm,before 6am" in timezone America/Denver.
š¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
ā» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
š Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.