雷电芽衣
2c9164b7fb
The removed jsonwebtoken/rsa stack leaves the notices; updated crates carry their new versions. tonic 0.14.9 puts MIT headers on its sources, which cargo-about pasted in as ten license texts; about.toml now pins tonic to its LICENSE file by checksum.
54 lines
1.4 KiB
TOML
54 lines
1.4 KiB
TOML
# cargo-about configuration (PRD F8 / release packaging).
|
|
#
|
|
# Generates THIRD-PARTY-NOTICES.md at the repo root:
|
|
#
|
|
# cargo about generate about.hbs -o THIRD-PARTY-NOTICES.md
|
|
#
|
|
# Regeneration is a release-checklist step (docs/RELEASE.md), not a CI gate.
|
|
# The accepted list mirrors deny.toml's [licenses].allow — keep them in sync.
|
|
|
|
accepted = [
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"BSL-1.0",
|
|
"CC0-1.0",
|
|
"CDLA-Permissive-2.0",
|
|
# In the dependency graph but not in deny.toml's allow list (deny only
|
|
# gates advisories in CI today): colored_json (EPL-2.0), finl_unicode /
|
|
# wezterm-bidi (Unicode-DFS-2016), terminfo (WTFPL).
|
|
"EPL-2.0",
|
|
"ISC",
|
|
"MIT",
|
|
"MIT-0",
|
|
"MPL-2.0",
|
|
"OpenSSL",
|
|
"Unicode-3.0",
|
|
"Unicode-DFS-2016",
|
|
"WTFPL",
|
|
"Zlib",
|
|
]
|
|
|
|
# Notices cover what we ship: the kigi binary's dependency graph.
|
|
targets = [
|
|
"aarch64-apple-darwin",
|
|
"x86_64-apple-darwin",
|
|
"aarch64-unknown-linux-gnu",
|
|
"x86_64-unknown-linux-gnu",
|
|
"x86_64-pc-windows-msvc",
|
|
]
|
|
|
|
# ring bundles ISC/MIT/OpenSSL-derived texts in a single LICENSE file that
|
|
# SPDX expression parsing cannot classify on its own.
|
|
[ring]
|
|
accepted = ["ISC", "MIT", "OpenSSL"]
|
|
|
|
# tonic 0.14.9 sources carry MIT headers; take only LICENSE.
|
|
[tonic.clarify]
|
|
license = "MIT"
|
|
|
|
[[tonic.clarify.files]]
|
|
path = "LICENSE"
|
|
checksum = "5c686e0f7978412b49187ae0e9f77e9b52eea9d8d2e6c0de8694b35817d873b1"
|