From 46028548dedbd12ab187624b0aa3298e7035a5f1 Mon Sep 17 00:00:00 2001 From: Georg Semmler Date: Tue, 16 Dec 2025 13:47:13 +0100 Subject: [PATCH] Exclude development scripts from published package During a dependency review we noticed that the hyper-rustls crate includes various development scripts. These development scripts shouldn't be there as they might, at some point become problematic. As of now they prevent any downstream user from enabling the `[bans.build.interpreted]` option of cargo deny. I opted for using an explicit include list instead of an exclude list to prevent these files from being included in the published packages to make sure that everything that's included is an conscious choice. --- Cargo.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/Cargo.toml b/Cargo.toml index cf10f44..e44bca7 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -9,6 +9,7 @@ description = "Rustls+hyper integration for pure rust HTTPS" homepage = "https://github.com/rustls/hyper-rustls" repository = "https://github.com/rustls/hyper-rustls" documentation = "https://docs.rs/hyper-rustls/" +include = ["Cargo.toml", "LICENSE-MIT", "LICENSE-APACHE", "LICENSE-ICS", "README.md", "src/**/*.rs"] [features] default = ["native-tokio", "http1", "tls12", "logging", "aws-lc-rs"]