forked from near/nearcore
-
Notifications
You must be signed in to change notification settings - Fork 0
/
deny.toml
129 lines (106 loc) · 4.9 KB
/
deny.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
targets = [
{ triple = "x86_64-unknown-linux-musl" },
{ triple = "x86_64-pc-windows-msvc" },
{ triple = "x86_64-apple-darwin" },
]
[bans]
multiple-versions = "deny"
deny = [
# See: https://github.com/rust-random/rand/issues/645
{ name = "rand", version = "<0.6" },
# See: https://github.com/near/nearcore/pull/3595
{ name = "ethabi", version = "<9.0.1" },
{ name = "ethabi-contract", version = "<9.0.0" },
{ name = "ethabi-derive", version = "<9.0.1" },
{ name = "ethereum-types", version = "<0.8.0" },
{ name = "keccak-hash", version = "<0.4.1" },
{ name = "primitive-types", version = "<0.6.2" },
{ name = "uint", version = "<0.8.2" },
]
skip = [
# crypto-mac 0.7.0 still uses it: https://github.com/RustCrypto/traits/issues/43
{ name = "subtle", version = "=1.0.0" },
# wabt 0.9.0 (dev dependency) still uses it
{ name = "glob", version = "=0.2.11" },
# near-epoch-manager fixed the rand version to ensure protocol stability
{ name = "rand", version = "=0.6.5" },
# rand 0.6.5 uses two versions of rand_core due to weird dependencies mismatch with rand_chacha
{ name = "rand_core", version = "=0.3.1" },
{ name = "rand_chacha", version = "=0.1.1" },
{ name = "autocfg", version = "=0.1.7" },
# wasmer 0.17 and wasmtime 0.17 use conflicting versions of those
{ name = "base64", version = "=0.11.0" },
{ name = "wasmparser", version = "=0.51.4" },
{ name = "rand_core", version = "=0.4.2" },
# wasmer 0.17 and wasmtime 0.17 uses older versions of some crates
{ name = "sha2", version = "=0.8.2" },
{ name = "crypto-mac", version = "=0.7.0" },
{ name = "block-padding", version = "=0.1.5" },
{ name = "block-buffer", version = "=0.7.3" },
{ name = "opaque-debug", version = "=0.2.3" },
{ name = "generic-array", version = "=0.12.3" },
# `sha2` uses it
{ name = "cfg-if", version = "=1.0.0" },
# evm support has some legacy. Updating it fails at this point.
# to fully update, need to fork half of parity libraries, as they stopped development.
# See: https://github.com/near/nearcore/issues/3506
{ name = "digest", version = "=0.8.1" },
{ name = "proc-macro2", version = "=0.4.30" },
{ name = "quote", version = "=0.6.13" },
{ name = "rustc-hex", version = "=1.0.0" },
{ name = "syn", version = "=0.15.44" },
{ name = "unicode-xid", version = "=0.1.0" },
# param estimator uses newer imports, but it's not part of neard
{ name = "indicatif", version = "=0.15.0" },
{ name = "rand_xorshift", version = "=0.2.0" },
{ name = "wasmparser", version = "=0.59.0" },
# wasmtime and actix-http
{ name = "gimli", version = "=0.23.0" },
# wasmer and wasmtime
{ name = "target-lexicon", version = "=0.10.0" },
# chain and param estimator
{ name = "num-rational", version = "=0.3.2" },
# tokia via actix and actix-server
{ name = "miow", version = "=0.3.6" },
# crossbeam-epoch and wasmtime-runtime
{ name = "memoffset", version = "=0.6.1" },
# tracing-subscriber via near-logger-utils and clap via bindgen
{ name = "ansi_term", version = "=0.12.1" },
# wasmer 0.17.x
{ name = "parking_lot", version = "=0.10.2" },
{ name = "parking_lot_core", version = "=0.7.2" },
{ name = "lock_api", version = "=0.3.4" },
# ethereum-types via old evm (openethereum)
{ name = "ethereum-types", version = "=0.10.0" },
# chrono uses old time crate
{ name = "time", version = "=0.1.43" },
# clap v2 uses old versions
{ name = "strsim", version = "0.8.0" },
# ed25519-dalek uses older versions of rand and rand_core
{ name = "rand", version = "=0.7.3" },
{ name = "rand_core", version = "=0.5.1" },
{ name = "rand_chacha", version = "=0.2.2" },
{ name = "getrandom", version = "=0.1.16" },
# criterion and criterion-plot use conflicting versions
{ name = "itertools", version = "=0.9.0" },
{ name = "semver-parser", version = "=0.7.0" },
{ name = "semver", version = "=0.9.0" },
# wasmer 1.0 use some older version of crates than wasmtime
{ name = "cranelift-bforest", version = "=0.68.0" },
{ name = "cranelift-codegen", version = "=0.68.0" },
{ name = "cranelift-codegen-meta", version = "=0.68.0" },
{ name = "cranelift-codegen-shared", version = "=0.68.0" },
{ name = "cranelift-entity", version = "=0.68.0" },
{ name = "cranelift-frontend", version = "=0.68.0" },
{ name = "libloading", version = "=0.5.2" },
{ name = "wasmparser", version = "=0.65.0" },
{ name = "which", version = "=3.1.1" },
{ name = "object", version = "=0.22.0" },
# cached uses an older version
{ name = "strsim", version = "=0.9.3" },
{ name = "darling", version = "=0.10.2" },
{ name = "darling_core", version = "=0.10.2" },
{ name = "darling_macro", version = "=0.10.2" },
# hashbrown uses an older version
{ name = "ahash", version = "=0.4.7" },
]