chore(deps): bump EmbarkStudios/cargo-deny-action from 1 to 2

[dependabot]

Bumps EmbarkStudios/cargo-deny-action from 1 to 2.

Release notes

Sourced from EmbarkStudios/cargo-deny-action's releases.

Release 2.1.1 - cargo-deny 0.20.2

Fixed

• PR#116 fixed in issue introduced in the 2.1.0 release due the deprecation of the use-git-cli argument. Thanks @​Firestar99!

Release 2.1.0 - cargo-deny 0.20.2

Changed

• PR#881 refactored the CLI, moving some duplicated options/flags into the root and removing several deprecated options/flags/values. See the PR for a full list of changes.

Added

• PR#879 resolved #873 by adding a new bans.std-replacements lint which checks the graph for crates.io sourced crates that have been partially or fully replaced in std and/or core.

Fixed

• PR#880 resolved #765 by respecting non-default build script paths in manifests.
• PR#881 resolved #874 by cleaning up the CLI, deduplicating some options/flags that caused bug in the list subcommand.

Release 2.0.20 - cargo-deny 0.19.8

Fixed

• PR#864 fixed matching of ^ and ~ with on prerelease versions for when checking if a crate is affected by an advisory. As of the time of the PR, this literally affected none of published versions of any crate with an advisory, but this just ensures such a case will be handled in the future.

Release 2.0.19 - cargo-deny 0.19.7

Changed

• PR#860 updated crates, resolving krates#111.

Release 2.0.18 - cargo-deny 0.19.5

Fixed

• PR#857 fixed a segfault reported in #855.

Release 2.0.17 - cargo-deny 0.19.2

Fixed

• PR#845 fixed structural issues with SARIF output, resolving #818. Thanks @​KyleChamberlin!

Release 2.0.16 - cargo-deny 0.19.1

Fixed

• PR#833 fixed an issue where the maximum advisory database staleness was over 14 years instead of the intended 90 days.
• PR#839 fixed an issue where unsound advisories would appear for transitive dependencies despite requesting them only for workspace dependencies, resolving #829.
• PR#840 resolved #797 by passing --filter-platform when collecting cargo metadata if only a single target was requested either in the config or via the command line.
• PR#841 fixed an issue where --frozen would not disable fetching of the advisory DB, resolving #759.
• PR#842 and PR#844 updated crates. Notably krates was updated to resolve two issues with crates being pruned from the graph used when running checks. Resolving these two issues may mean that updating cargo-deny may highlight issues that were previously hidden.
  • EmbarkStudios/krates#106 would fail to pull in crates brought in via a feature if that crate had its lib target renamed by the package author.
  • EmbarkStudios/krates#109 would fail to bring in optional dependencies if they were brought in by a weak feature in a crate also brought in by a weak feature.

Changed

• PR#830 removed gix in favor of shelling out to git. This massively improves build times and eases maintenance as gix bumps minor versions quite frequently. If cargo-deny is used in an environment that for some reason allows internet access but doesn't have git available, the advisory database would need to be updated before calling cargo-deny.
• PR#838 removed rustsec in favor of manually implemented advisory parsing and checking, with a nightly cron job that checks that the implementation exactly matches rustsec on the official rustsec advisory db.

Release 2.0.15 - cargo-deny 0.19.0

Changed

• PR#802 made relative paths passed to --config be resolved relative to the current working directory (rather than the resolved manifest path's directory).
• PR#825 updated gix, reqwest, and tame-index to newer versions. The reqwest 0.13 changes means it is no longer possible to choose the source of root certificates for gix, so that decision is now left to rustls-platform-verifier. The native-certs feature has thus been removed, and cargo-deny no longer defaults to using webpki-roots.

... (truncated)

Commits

• 3c63498 Fix use-git-cli deprecation (#116)
• 6f99e34 Bump to 0.20.2
• 8b229e2 Deprecate use-git-cli
• bb137d7 Bump to 0.19.8
• a531616 Bump to 0.19.7
• 6c8f9fa Bump to 0.19.5
• f28dad7 Remove mergify
• e4d1338 Add xray to the list of repositories using this action (#105)
• 91bf2b6 Bump to 0.19.2
• 175dc7f Bump to 0.19.1
• Additional commits viewable in compare view

Note

Bump EmbarkStudios/cargo-deny-action from v1 to v2 in CI workflows

Updates the action reference in cargo-deny.yml and ci.yml to use EmbarkStudios/cargo-deny-action@v2.

^{Macroscope summarized 1bdadb6.}

[dependabot]

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 file)

• .github/workflows/cargo-deny.yml - No issues in changed code

---

_{Reviewed by step-3.7-flash · Input: 43.1K · Output: 3.4K · Cached: 131.3K}

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

[github-actions]

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.