Refine cargo-deny rules (#8602)

A few `cargo-deny` tweaks with @macladson

Co-authored-by: Mac L <mjladson@pm.me>


Co-Authored-By: Michael Sproul <michael@sigmaprime.io>

Co-Authored-By: Mac L <mjladson@pm.me>
This commit is contained in:
Michael Sproul
2025-12-19 15:02:09 +11:00
committed by GitHub
parent 4e35e9d587
commit 2ce6b51269
2 changed files with 9 additions and 9 deletions

View File

@@ -333,7 +333,7 @@ install-deny:
cargo install --force cargo-deny --version 0.18.2 cargo install --force cargo-deny --version 0.18.2
deny-CI: deny-CI:
cargo deny check bans sources --hide-inclusion-graph cargo deny check bans sources
# Runs `cargo vendor` to make sure dependencies can be vendored for packaging, reproducibility and archival purpose. # Runs `cargo vendor` to make sure dependencies can be vendored for packaging, reproducibility and archival purpose.
vendor: vendor:

View File

@@ -2,16 +2,16 @@
# See https://embarkstudios.github.io/cargo-deny/ # See https://embarkstudios.github.io/cargo-deny/
[bans] [bans]
# Warn when multiple versions of the same crate are detected # Allow multiple versions by default. Change this to "warn" to see all multiple versions.
multiple-versions = "warn" multiple-versions = "allow"
deny = [ deny = [
# Legacy Ethereum crates that have been replaced with alloy { crate = "ethers", reason = "legacy Ethereum crate, use alloy instead" },
{ crate = "ethers", reason = "use alloy instead" }, { crate = "ethereum-types", reason = "legacy Ethereum crate, use alloy-primitives instead" },
{ crate = "ethereum-types", reason = "use alloy-primitives instead" },
# Replaced by quick-protobuf
{ crate = "protobuf", reason = "use quick-protobuf instead" }, { crate = "protobuf", reason = "use quick-protobuf instead" },
# Prevent duplicate versions of reqwest - heavy crate with build scripts { crate = "derivative", reason = "use educe or derive_more instead" },
{ crate = "reqwest", deny-multiple-versions = true, reason = "prevent duplicate versions" }, { crate = "ark-ff", reason = "present in Cargo.lock but not needed by Lighthouse" },
{ crate = "strum", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "reqwest", deny-multiple-versions = true, reason = "takes a long time to compile" }
] ]
[sources] [sources]