Skip to content

cargo-deny 0.19.0#261814

Merged
BrewTestBot merged 2 commits intomainfrom
bump-cargo-deny-0.19.0
Jan 8, 2026
Merged

cargo-deny 0.19.0#261814
BrewTestBot merged 2 commits intomainfrom
bump-cargo-deny-0.19.0

Conversation

@BrewTestBot
Copy link
Copy Markdown
Contributor

Created by brew bump


Created with brew bump-formula-pr.

Details

release notes
### Changed
- [PR#802](https://github.com/EmbarkStudios/cargo-deny/pull/802) made relative paths passed to `--config` be resolved relative to the current working directory (rather than the resolved manifest path's directory).
- [PR#825](https://github.com/EmbarkStudios/cargo-deny/pull/825) updated `gix`, `reqwest`, and `tame-index` to newer versions. The `reqwest` 0.13 changes means it is no longer possible to choose the source of root certificates for `gix`, so that decision is now left to `rustls-platform-verifier`. The `native-certs` feature has thus been removed, and `cargo-deny` no longer defaults to using `webpki-roots`.

Fixed

  • PR#802 fixed path handling of paths passed to --config, resolving #748.
  • PR#819 added locations to all SARIF results since that's mandatory for valid SARIF.
  • PR#821 fixed compilation on an Alpine host.

Added

  • PR#795 added [bans.allow-workspace] to allow workspace crates while denying all external crates.
  • PR#800 added [licenses.include-build] to toggle whether build dependencies are included in the license check.
  • PR#823 added [advisories.unused-ignored-advisory] to disable the warning when an advisory is ignored but not encountered in the crate graph.
  • PR#826 added [advisories.unsound] to determine which crates can show unsound advisories, similarly to the unmaintained field. Defaults to workspace crates, ignoring unsound advisories for transitive dependencies, resolving #824.

View the full release notes at https://github.com/EmbarkStudios/cargo-deny/releases/tag/0.19.0.


@github-actions github-actions bot added rust Rust use is a significant feature of the PR or issue bump-formula-pr PR was created using `brew bump-formula-pr` labels Jan 8, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Jan 8, 2026

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.

@github-actions github-actions bot added the CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. label Jan 8, 2026
@BrewTestBot BrewTestBot enabled auto-merge January 8, 2026 14:36
@BrewTestBot BrewTestBot added this pull request to the merge queue Jan 8, 2026
Merged via the queue into main with commit 2d8fa69 Jan 8, 2026
22 checks passed
@BrewTestBot BrewTestBot deleted the bump-cargo-deny-0.19.0 branch January 8, 2026 14:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bump-formula-pr PR was created using `brew bump-formula-pr` CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. rust Rust use is a significant feature of the PR or issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants