deny.toml

# SPDX-FileCopyrightText: Copyright (c) 2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

[advisories]
ignore = [
    { id = "RUSTSEC-2026-0176", reason = "PyO3 0.29 fixes this, but pyo3-async-runtimes and pythonize are still on the PyO3 0.28 line." },
    { id = "RUSTSEC-2026-0177", reason = "PyO3 0.29 fixes this, but pyo3-async-runtimes and pythonize are still on the PyO3 0.28 line." },
]

[bans]
skip = [
    { crate = "getrandom@0.4.2", reason = "build-only duplicate internal to cbindgen's tempfile stack" },
    { crate = "r-efi@6.0.0", reason = "target-specific build-only duplicate from cbindgen's tempfile stack" },
    { crate = "winnow@1.0.1", reason = "build-only duplicate internal to cbindgen's TOML parser stack" },
]

[licenses]
allow = [
    "Apache-2.0 WITH LLVM-exception",
    "Apache-2.0",
    "BSD-3-Clause", # required by redis crate
    "BSL-1.0",      # Boost Software License, required by xxhash-rust
    "ISC",
    "MIT",
    "MPL-2.0",
    "Unicode-3.0",
]
private = { ignore = true }