deny.toml

[graph]
targets = [
    { triple = "aarch64-apple-darwin" },
    { triple = "aarch64-unknown-linux-gnu" },
    { triple = "x86_64-apple-darwin" },
    { triple = "x86_64-unknown-linux-gnu" },
]

[advisories]
version = 2

[bans]
multiple-versions = "deny"
skip = [
    { name = "syn", version = "1.0.109" },
    { name = "syn", version = "2.0.23" },
    { name = "bitflags", version = "1.3.2" },
    { name = "bitflags", version = "2.3.3" },
    { name = "indexmap", version = "1.9.1" },
    { name = "indexmap", version = "2.0.0" },
    { name = "hashbrown", version = "0.12.3" },
    { name = "hashbrown", version = "0.14.0" },
    { name = "nix", version = "0.26.4" },
    { name = "ordered-float", version = "2.10.0" },
    { name = "fastrand", version = "2.0.1" },
    { name = "regex-syntax", version = "0.6.29" },
    { name = "sync_wrapper", version = "0.1.2" },
    { name = "sync_wrapper", version = "1.0.1" },
    { name = "hyper-tls", version = "0.5.0" },
    { name = "hyper-tls", version = "0.6.0" },
    { name = "socket2", version = "0.4.9" },
    { name = "socket2", version = "0.5.7" },
    { name = "hyper", version = "0.14.27" },
    { name = "hyper", version = "1.4.1" },
    { name = "base64", version = "0.21.4" },
    { name = "base64", version = "0.22.1" },
    { name = "http-body", version = "0.4.5" },
    { name = "http-body", version = "1.0.1" },
    { name = "h2", version = "0.3.26"},
    { name = "h2", version = "0.4.6"},
    { name = "http", version = "0.2.9"},
    { name = "http", version = "1.1.0"},
]

# Use `tracing` instead.
[[bans.deny]]
name = "env_logger"

# We prefer the system's native TLS or OpenSSL to Rustls, since they are more
# mature and more widely used.
[[bans.deny]]
name = "rustls"

[licenses]
version = 2
allow = [
    "Apache-2.0",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "MIT",
    "Unicode-DFS-2016",
]

[[licenses.clarify]]
name = "ring"
expression = "ISC"
license-files = [
    { path = "LICENSE", hash = 0xbd0eed23 }
]

[sources]
unknown-git = "deny"
unknown-registry = "deny"
# Do not allow non-MaterializeInc Git repositories here! Git repositories must
# be owned by the MaterializeInc organization so that maintainership is shared
# amongst Materialize employees and so that historical versions of Materialize
# remain buildable even if upstream Git repositories disappear. If you don't
# have permissions to create a fork in the MaterializeInc organization, ask in
# #eng-infra on Slack.
allow-org = { github = [] }