feat(ci): add cargo deny to lint dependencies

.github/workflows/test.yml

@@ -33,6 +33,8 @@ jobs:
         uses: crate-ci/typos@master
       - name: "Rustfmt"
         run: cargo fmt --all --check
+      - name: Lint dependencies
+        uses: EmbarkStudios/cargo-deny-action@v1
 
   test:
     name: Test

Cargo.toml

@@ -6,10 +6,22 @@ members = [
   "swiftide-indexing",
 
   "examples",
-  "benchmarks", "swiftide-test-utils",
+  "benchmarks",
+  "swiftide-test-utils",
 ]
 resolver = "2"
 
+[workspace.package]
+version = "0.7.0"
+edition = "2021"
+license = "MIT"
+readme = "README.md"
+keywords = ["llm", "rag", "ai", "data", "openai"]
+description = "Blazing fast, streaming pipeline library for AI applications"
+categories = ["asynchronous"]
+repository = "https://github.com/bosun-ai/swiftide-rs"
+homepage = "https://swiftide.rs"
+
 [profile.dev.package]
 insta.opt-level = 3
 similar.opt-level = 3

benchmarks/Cargo.toml

@@ -1,8 +1,15 @@
 [package]
 name = "benchmarks"
-version = "0.0.0"
 publish = false
-edition = "2021"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dev-dependencies]
 tokio = { version = "1.0", features = ["full"] }

deny.toml

@@ -0,0 +1,39 @@
+[graph]
+all-features = true
+
+[licenses]
+confidence-threshold = 0.8
+allow = [
+  "Apache-2.0",
+  "BSD-2-Clause",
+  "BSD-3-Clause",
+  "ISC",
+  "MIT",
+  "Unicode-DFS-2016",
+  "WTFPL",
+  "MPL-2.0",
+]
+exceptions = [{ allow = ["OpenSSL"], crate = "ring" }]
+
+[advisories]
+yanked = "deny"
+
+[bans]
+multiple-versions = "allow"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "warn"
+allow-registry = ["https://github.com/rust-lang/crates.io-index"]
+
+[[licenses.clarify]]
+crate = "ring"
+# SPDX considers OpenSSL to encompass both the OpenSSL and SSLeay licenses
+# https://spdx.org/licenses/OpenSSL.html
+# ISC - Both BoringSSL and ring use this for their new files
+# MIT - "Files in third_party/ have their own licenses, as described therein. The MIT
+# license, for third_party/fiat, which, unlike other third_party directories, is
+# compiled into non-test libraries, is included below."
+# OpenSSL - Obviously
+expression = "ISC AND MIT AND OpenSSL"
+license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

examples/Cargo.toml

@@ -1,8 +1,15 @@
 [package]
 name = "examples"
-version = "0.0.0"
 publish = false
-edition = "2021"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dependencies]
 tokio = { version = "1.0", features = ["full"] }

release-plz.toml

@@ -1,3 +1,12 @@
 [workspace]
 changelog_path = "./CHANGELOG.md"
 changelog_config = "cliff.toml"
+git_tag_enable = false
+git_release_enable = false
+
+[[package]]
+# Only release the main package on github
+name = "swiftide"
+git_tag_name = "v{{ version }}"
+git_tag_enable = true
+git_release_enable = true

swiftide-core/Cargo.toml

@@ -1,14 +1,14 @@
 [package]
 name = "swiftide-core"
-version = "0.7.0"
-edition = "2021"
-license = "MIT"
-readme = "../README.md"
-keywords = ["llm", "rag", "ai", "data", "openai"]
-description = "Blazing fast, streaming pipeline library for AI applications"
-categories = ["asynchronous"]
-repository = "https://github.com/bosun-ai/swiftide-rs"
-homepage = "https://swiftide.rs"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dependencies]
 anyhow = { workspace = true }

swiftide-indexing/Cargo.toml

@@ -1,14 +1,14 @@
 [package]
 name = "swiftide-indexing"
-version = "0.7.0"
-edition = "2021"
-license = "MIT"
-readme = "../README.md"
-keywords = ["llm", "rag", "ai", "data", "openai"]
-description = "Blazing fast, streaming pipeline library for AI applications"
-categories = ["asynchronous"]
-repository = "https://github.com/bosun-ai/swiftide-rs"
-homepage = "https://swiftide.rs"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dependencies]
 swiftide-core = { path = "../swiftide-core", version = "0.7" }

swiftide-integrations/Cargo.toml

@@ -1,14 +1,14 @@
 [package]
 name = "swiftide-integrations"
-version = "0.7.0"
-edition = "2021"
-license = "MIT"
-readme = "../README.md"
-keywords = ["llm", "rag", "ai", "data", "openai"]
-description = "Blazing fast, streaming pipeline library for AI applications"
-categories = ["asynchronous"]
-repository = "https://github.com/bosun-ai/swiftide-rs"
-homepage = "https://swiftide.rs"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dependencies]
 swiftide-core = { path = "../swiftide-core", version = "0.7" }

swiftide-query/Cargo.toml

@@ -1,14 +1,14 @@
 [package]
 name = "swiftide-query"
-version = "0.7.0"
-edition = "2021"
-license = "MIT"
-readme = "../README.md"
-keywords = ["llm", "rag", "ai", "data", "openai"]
-description = "Blazing fast, streaming pipeline library for AI applications"
-categories = ["asynchronous"]
-repository = "https://github.com/bosun-ai/swiftide-rs"
-homepage = "https://swiftide.rs"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dependencies]
 anyhow = { workspace = true }

swiftide-test-utils/Cargo.toml

@@ -1,7 +1,15 @@
 [package]
 name = "swiftide-test-utils"
 publish = false
-edition = "2021"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [dependencies]
 swiftide-core = { path = "../swiftide-core", features = ["test-utils"] }

swiftide/Cargo.toml

@@ -1,14 +1,14 @@
 [package]
 name = "swiftide"
-version = "0.7.0"
-edition = "2021"
-license = "MIT"
-readme = "../README.md"
-keywords = ["llm", "rag", "ai", "data", "openai"]
-description = "Blazing fast, streaming pipeline library for AI applications"
-categories = ["asynchronous"]
-repository = "https://github.com/bosun-ai/swiftide-rs"
-homepage = "https://swiftide.rs"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+readme.workspace = true
+keywords.workspace = true
+description.workspace = true
+categories.workspace = true
+repository.workspace = true
+homepage.workspace = true
 
 [badges]