diff --git a/deny.toml b/deny.toml index 8054f469..b884b86d 100644 --- a/deny.toml +++ b/deny.toml @@ -1,27 +1,4 @@ [advisories] ignore = [ - { id = "RUSTSEC-2026-0097", reason = "rand 0.8.5 is a transitive dep from ark-std/logos-blockchain-*/risc0-* which pin to 0.8.x. Fix is in rand >= 0.9.3, outside the 0.8 semver range. The vulnerability requires custom logger + thread_rng + reseeding which we don't trigger." }, + { id = "RUSTSEC-2026-0097", reason = "rand 0.8.5 is a transitive dep pinned to 0.8.x by upstream. Fix is in >= 0.9.3, outside the semver range." }, ] - -[licenses] -allow = [ - "Apache-2.0 WITH LLVM-exception", - "Apache-2.0", - "BSD-2-Clause", - "BSD-3-Clause", - "BSL-1.0", - "BlueOak-1.0.0", - "CC0-1.0", - "CDDL-1.0", - "CDLA-Permissive-2.0", - "ISC", - "MIT", - "MPL-2.0", - "Unicode-3.0", - "Zlib", - "LGPL-3.0-only", - "LGPL-3.0-or-later", -] - -[bans] -multiple-versions = "allow"