# cargo-about configuration (PRD F8 / release packaging). # # Generates THIRD-PARTY-NOTICES.md at the repo root: # # cargo about generate about.hbs -o THIRD-PARTY-NOTICES.md # # Regeneration is a release-checklist step (docs/RELEASE.md), not a CI gate. # The accepted list mirrors deny.toml's [licenses].allow — keep them in sync. accepted = [ "Apache-2.0", "Apache-2.0 WITH LLVM-exception", "BSD-2-Clause", "BSD-3-Clause", "BSL-1.0", "CC0-1.0", "CDLA-Permissive-2.0", # In the dependency graph but not in deny.toml's allow list (deny only # gates advisories in CI today): colored_json (EPL-2.0), finl_unicode / # wezterm-bidi (Unicode-DFS-2016), terminfo (WTFPL). "EPL-2.0", "ISC", "MIT", "MIT-0", "MPL-2.0", "OpenSSL", "Unicode-3.0", "Unicode-DFS-2016", "WTFPL", "Zlib", ] # Notices cover what we ship: the kigi binary's dependency graph. targets = [ "aarch64-apple-darwin", "x86_64-apple-darwin", "aarch64-unknown-linux-gnu", "x86_64-unknown-linux-gnu", "x86_64-pc-windows-msvc", ] # ring bundles ISC/MIT/OpenSSL-derived texts in a single LICENSE file that # SPDX expression parsing cannot classify on its own. [ring] accepted = ["ISC", "MIT", "OpenSSL"]