Repository navigation
cargo-deny admits the Zlib licence, which foldhash carries under serde_json 1.0.154 - #412
Conversation
…e_json 1.0.154 serde_json 1.0.154 (#404) depends on foldhash 0.2.0, licensed Zlib, which the allow list did not name. CI does not run cargo-deny, so main stayed green while the pre-push `uphold supply-chain` refused every push from it. Zlib is permissive and OSI approved, with no copyleft and no attribution required in the binary. Claude-Session: https://claude.ai/code/session_01HM96sKSAyDhLk9smu82u5V
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Merge Risk: ⚪ Minimal · up to
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #412 +/- ##
=======================================
Coverage 94.84% 94.84%
=======================================
Files 52 52
Lines 27217 27217
=======================================
Hits 25815 25815
Misses 1402 1402 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Bumps serde-saphyr from 1.3.0 to 2.0.0.
updated-dependencies:
dependency-version: 2.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
https://claude.ai/code/session_01HM96sKSAyDhLk9smu82u5V
Summary by CodeRabbit