From 2ce6b51269708a1c28c69a3241028522ebc153df Mon Sep 17 00:00:00 2001 From: Michael Sproul Date: Fri, 19 Dec 2025 15:02:09 +1100 Subject: [PATCH] Refine cargo-deny rules (#8602) A few `cargo-deny` tweaks with @macladson Co-authored-by: Mac L Co-Authored-By: Michael Sproul Co-Authored-By: Mac L --- Makefile | 2 +- deny.toml | 16 ++++++++-------- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/Makefile b/Makefile index 4426b941aa..9d08c3ebe1 100644 --- a/Makefile +++ b/Makefile @@ -333,7 +333,7 @@ install-deny: cargo install --force cargo-deny --version 0.18.2 deny-CI: - cargo deny check bans sources --hide-inclusion-graph + cargo deny check bans sources # Runs `cargo vendor` to make sure dependencies can be vendored for packaging, reproducibility and archival purpose. vendor: diff --git a/deny.toml b/deny.toml index 677396c0c3..398a173dfa 100644 --- a/deny.toml +++ b/deny.toml @@ -2,16 +2,16 @@ # See https://embarkstudios.github.io/cargo-deny/ [bans] -# Warn when multiple versions of the same crate are detected -multiple-versions = "warn" +# Allow multiple versions by default. Change this to "warn" to see all multiple versions. +multiple-versions = "allow" deny = [ - # Legacy Ethereum crates that have been replaced with alloy - { crate = "ethers", reason = "use alloy instead" }, - { crate = "ethereum-types", reason = "use alloy-primitives instead" }, - # Replaced by quick-protobuf + { crate = "ethers", reason = "legacy Ethereum crate, use alloy instead" }, + { crate = "ethereum-types", reason = "legacy Ethereum crate, use alloy-primitives instead" }, { crate = "protobuf", reason = "use quick-protobuf instead" }, - # Prevent duplicate versions of reqwest - heavy crate with build scripts - { crate = "reqwest", deny-multiple-versions = true, reason = "prevent duplicate versions" }, + { crate = "derivative", reason = "use educe or derive_more instead" }, + { crate = "ark-ff", reason = "present in Cargo.lock but not needed by Lighthouse" }, + { crate = "strum", deny-multiple-versions = true, reason = "takes a long time to compile" }, + { crate = "reqwest", deny-multiple-versions = true, reason = "takes a long time to compile" } ] [sources]