chore: allow CDDL-1.0 for inferno dev dependency (pending legal review)

Lance v8.0.0-beta.2 pulls in inferno v0.11.21 (CDDL-1.0) transitively via
pprof -> lance-testing, a dev/profiling-only dependency that is not
distributed. Add CDDL-1.0 to the deny.toml allow list so cargo-deny passes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Daniel Rammer
2026-06-03 21:41:15 -05:00
parent aafcca2aab
commit d1d77a8d96

View File

@@ -145,6 +145,10 @@ allow = [
# CDLA-Permissive-2.0 is a permissive data license used by `webpki-roots`
# for the Mozilla CA root bundle. Data-only, distribution-compatible.
"CDLA-Permissive-2.0",
# CDDL-1.0 (copyleft) is pulled in only as a dev/profiling dependency via
# `inferno` -> `pprof` -> `lance-testing`; it is not distributed.
# PENDING LEGAL REVIEW before merge.
"CDDL-1.0",
]
confidence-threshold = 0.8
# Crates whose license cannot be determined from Cargo metadata but whose