deny.toml

# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

[advisories]
ignore = [
    { id = "RUSTSEC-2026-0194", reason = "The released object_store versions still depend on quick-xml before 0.41.0; remove this exception when object_store publishes the fixed dependency." },
    { id = "RUSTSEC-2026-0195", reason = "The released object_store versions still depend on quick-xml before 0.41.0; remove this exception when object_store publishes the fixed dependency." },
]

[bans]
skip = [
    { crate = "getrandom@0.4.2", reason = "build-only duplicate internal to cbindgen's tempfile stack" },
    { crate = "r-efi@6.0.0", reason = "target-specific build-only duplicate from cbindgen's tempfile stack" },
    { crate = "winnow@1.0.1", reason = "build-only duplicate internal to cbindgen's TOML parser stack" },
]

[licenses]
allow = [
    "Apache-2.0 WITH LLVM-exception",
    "Apache-2.0",
    "BSD-3-Clause", # required by redis crate
    "BSL-1.0",      # Boost Software License, required by xxhash-rust
    "ISC",
    "MIT",
    "MIT-0",       # required by borrow-or-share through jsonschema/referencing
    "MPL-2.0",
    "Unicode-3.0",
    "Zlib",        # required by foldhash through tonic-prost-build/prost-build
]
private = { ignore = true }