deny.toml

# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

[bans]
skip = [
    { crate = "block-buffer@0.10.4", reason = "required by sha1 0.10 alongside sha2 0.11" },
    { crate = "console@0.15.11", reason = "required by dialoguer 0.11 alongside the CLI's console 0.16" },
    { crate = "cpufeatures@0.2.17", reason = "required by sha1 0.10 alongside sha2 0.11" },
    { crate = "crypto-common@0.1.7", reason = "required by sha1 0.10 alongside sha2 0.11" },
    { crate = "digest@0.10.7", reason = "required by sha1 0.10 alongside sha2 0.11" },
    { crate = "foldhash@0.1.5", reason = "required by prost-build's hashbrown 0.15 alongside newer hashbrown" },
    { crate = "getrandom@0.4.2", reason = "build-only duplicate internal to cbindgen's tempfile stack" },
    { crate = "getrandom@0.2.17", reason = "required by ring alongside newer getrandom releases" },
    { crate = "getrandom@0.3.4", reason = "required by current rand and uuid releases alongside getrandom 0.4" },
    { crate = "hashbrown@0.15.5", reason = "required by prost-build alongside newer hashbrown releases" },
    { crate = "hashbrown@0.16.1", reason = "required by tonic-prost-build alongside indexmap's hashbrown 0.17" },
    { crate = "itertools@0.14.0", reason = "required by prost-build alongside object_store's itertools 0.15" },
    { crate = "rand@0.9.3", reason = "required by OpenTelemetry and tungstenite alongside object_store's rand 0.10" },
    { crate = "rand_core@0.9.5", reason = "required by rand 0.9 alongside rand 0.10" },
    { crate = "r-efi@6.0.0", reason = "target-specific build-only duplicate from cbindgen's tempfile stack" },
    { crate = "reqwest@0.12.28", reason = "required by core and CLI dependencies alongside object_store's reqwest 0.13" },
    { crate = "thiserror@1.0.69", reason = "required by dialoguer 0.11 alongside workspace dependencies using thiserror 2" },
    { crate = "thiserror-impl@1.0.69", reason = "required by dialoguer 0.11 alongside workspace dependencies using thiserror 2" },
    { crate = "wasm-streams@0.4.2", reason = "required by reqwest 0.12 alongside reqwest 0.13" },
    { crate = "winnow@1.0.1", reason = "build-only duplicate internal to cbindgen's TOML parser stack" },
    { crate = "windows-sys@0.52.0", reason = "target-specific dependency required alongside newer windows-sys releases" },
    { crate = "windows-sys@0.59.0", reason = "target-specific dependency required alongside windows-sys 0.61" },
]

[licenses]
allow = [
    "Apache-2.0 WITH LLVM-exception",
    "Apache-2.0",
    "BSD-3-Clause", # required by redis crate
    "BSL-1.0",      # Boost Software License, required by xxhash-rust
    "CDLA-Permissive-2.0", # Mozilla root certificate data used by object_store's Rustls transport
    "ISC",
    "MIT",
    "MIT-0",       # required by borrow-or-share through jsonschema/referencing
    "MPL-2.0",
    "Unicode-3.0",
    "Zlib",        # required by foldhash through tonic-prost-build/prost-build
]
private = { ignore = true }