chore(ci): deny wildcards (#552)

.github/workflows/deny.yml

@@ -3,10 +3,10 @@ name: deny
 on:
   push:
     branches: [master]
-    paths: [Cargo.lock]
+    paths: [Cargo.lock, deny.toml]
   pull_request:
     branches: [master]
-    paths: [Cargo.lock]
+    paths: [Cargo.lock, deny.toml]
   merge_group:
 
 env:
@@ -23,4 +23,4 @@ jobs:
       - uses: actions/checkout@v4
       - uses: EmbarkStudios/cargo-deny-action@v1
         with:
-          command: check all
+          command: check all

deny.toml

@@ -15,7 +15,7 @@ notice = "warn"
 # Lint level for when multiple versions of the same crate are detected
 multiple-versions = "warn"
 # Lint level for when a crate version requirement is `*`
-wildcards = "allow"
+wildcards = "deny"
 highlight = "all"
 # List of crates to deny
 deny = [
@@ -85,4 +85,4 @@ unknown-registry = "warn"
 # Lint level for what to happen when a crate from a git repository that is not
 # in the allow list is encountered
 unknown-git = "deny"
-allow-git = []
+allow-git = []