mirror of
https://github.com/openobserve/openobserve.git
synced 2026-11-04 16:09:05 +00:00
HuaijinandHengfei Yang
ada8b3763f
- [x] check if still need `CoalesceBatchesExec` - [x] check object_store upgrade --------- Co-authored-by: Hengfei Yang <hengfei.yang@gmail.com>
79 lines
2.9 KiB
TOML
79 lines
2.9 KiB
TOML
# Configuration documentation:
|
||
# https://embarkstudios.github.io/cargo-deny/index.html
|
||
|
||
[advisories]
|
||
yanked = "deny"
|
||
git-fetch-with-cli = true
|
||
ignore = [
|
||
"RUSTSEC-2023-0071", # from rsa, transitive dep of sqlx
|
||
"RUSTSEC-2021-0139", # from ansi_term, transitive dep of vrl
|
||
"RUSTSEC-2024-0370", # we need it even it is no longer maintained
|
||
"RUSTSEC-2024-0384", # from instant, dep of parking_lot
|
||
"RUSTSEC-2024-0388", # from derivative, dep of vrl
|
||
"RUSTSEC-2024-0421", # from idna, transitive dep of vrl
|
||
"RUSTSEC-2024-0436", # from paste, transitive dep of datafusion
|
||
"RUSTSEC-2024-0437", # from protobuf, transitive dep of prometheus
|
||
]
|
||
|
||
[licenses]
|
||
|
||
exceptions = [
|
||
# We should probably NOT bundle CA certs but use the OS ones.
|
||
{ name = "webpki-roots", allow = ["MPL-2.0","CDLA-Permissive-2.0"] },
|
||
{ name = "webpki-root-certs", allow = ["CDLA-Permissive-2.0"] }, # transitive dep via rustls-platform-verifier
|
||
{ name = "openobserve", allow = ["AGPL-3.0"] },
|
||
{ name = "config", allow = ["AGPL-3.0"] },
|
||
{ name = "infra", allow = ["AGPL-3.0"] },
|
||
{ name = "ingester", allow = ["AGPL-3.0"] },
|
||
{ name = "wal", allow = ["AGPL-3.0"] },
|
||
{ name = "proto", allow = ["AGPL-3.0"] },
|
||
{ name = "flight", allow = ["AGPL-3.0"] },
|
||
{ name = "tantivy_utils", allow = ["AGPL-3.0"] },
|
||
{ name = "report_server", allow = ["AGPL-3.0"] },
|
||
{ name = "arrayref", allow = ["BSD-2-Clause"] },
|
||
{ name = "mach", allow = ["BSD-2-Clause"] },
|
||
{ name = "fastdivide", allow = ["zlib-acknowledgement"] },
|
||
{ name = "foldhash", allow = ["Zlib"] },
|
||
{ name = "adler32", allow = ["Zlib"] },
|
||
{ name = "libz-rs-sys", allow = ["Zlib"] },
|
||
{ name = "libz-rs", allow = ["Zlib"] },
|
||
{ name = "zlib-rs", allow = ["Zlib"] },
|
||
# These two are transitive deps of vrl via dep rustyline.
|
||
# However, rustyline is needed only when we enable feature cli
|
||
# which we haven't. Probably in Cargo.lock due to old code, need
|
||
# to take a look and remove.
|
||
{ name = "clipboard-win", allow = ["BSL-1.0"] },
|
||
{ name = "error-code", allow = ["BSL-1.0"] },
|
||
{ name = "base16", allow = ["CC0-1.0"] },
|
||
{ name = "tiny-keccak", allow = ["CC0-1.0"] },
|
||
{ name = "ring", allow = ["BSD-4-Clause", "OpenSSL"] },
|
||
{ name = "inferno", allow = ["CDDL-1.0"] },
|
||
{ name = "libbz2-rs-sys", allow = ["bzip2-1.0.6"] },
|
||
{ name = "aws-lc-sys", allow = ["OpenSSL"] },
|
||
{ name = "borrow-or-share", allow = ["MIT-0"] },
|
||
]
|
||
|
||
allow = [
|
||
"Apache-2.0",
|
||
"Apache-2.0 WITH LLVM-exception",
|
||
"MPL-2.0",
|
||
"MIT",
|
||
"BSD-3-Clause", # OSI + fsf free
|
||
"Unicode-3.0", # OSI
|
||
"ISC", # OSI + fsf free
|
||
"BSL-1.0",
|
||
"CC0-1.0",
|
||
"0BSD", # OSI approved - BSD Zero Clause License
|
||
]
|
||
|
||
[[licenses.clarify]]
|
||
name = "ring"
|
||
expression = "BSD-4-Clause AND ISC AND MIT AND OpenSSL"
|
||
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
|
||
|
||
[sources.allow-org]
|
||
github = ["openobserve", "apache"]
|
||
|
||
[sources]
|
||
allow-git = ["https://github.com/mattsse/chromiumoxide"]
|