mirror of
https://github.com/openobserve/openobserve.git
synced 2026-11-04 00:08:55 +00:00
Huaijin
3b44da3eee
## Summary - introduce a `common` workspace crate for shared metadata, infrastructure helpers, and utilities - keep service-backed code in `openobserve-core` while preserving the existing `common` compatibility namespace - flatten `src/core/src/service/` into the standard `src/core/src/` module layout without using `#[path]` - retain `service::*` as compatibility re-exports from `service.rs` - move cipher request/response types from core into the search crate while preserving `openobserve_core::cipher` - remove unused Cargo dependencies from workspace crates Enterprise companion: https://github.com/openobserve/o2-enterprise/pull/2202 ## Validation - `cargo check --workspace --all-targets` - `cargo clippy -p common -p openobserve-core -p search --lib -- -D warnings` - common crate unit tests: 271 passed, 4 ignored - enterprise overlay: `cargo check -p openobserve-core --features cloud` - migrated cipher tests: 8 passed - `cargo deny check licenses` - `cargo fmt --all -- --check` - `git diff --check`
97 lines
3.9 KiB
TOML
97 lines
3.9 KiB
TOML
# Configuration documentation:
|
||
# https://embarkstudios.github.io/cargo-deny/index.html
|
||
|
||
[advisories]
|
||
yanked = "deny"
|
||
git-fetch-with-cli = true
|
||
ignore = [
|
||
"RUSTSEC-2023-0071", # from rsa, transitive dep of sqlx
|
||
"RUSTSEC-2021-0139", # from ansi_term, transitive dep of vrl
|
||
"RUSTSEC-2024-0370", # we need it even it is no longer maintained
|
||
"RUSTSEC-2024-0384", # from instant, dep of parking_lot
|
||
"RUSTSEC-2024-0388", # from derivative, dep of vrl
|
||
"RUSTSEC-2024-0421", # from idna, transitive dep of vrl
|
||
"RUSTSEC-2024-0436", # from paste, transitive dep of datafusion
|
||
"RUSTSEC-2024-0437", # from protobuf, transitive dep of prometheus
|
||
]
|
||
|
||
[licenses]
|
||
|
||
exceptions = [
|
||
# We should probably NOT bundle CA certs but use the OS ones.
|
||
{ name = "webpki-roots", allow = ["MPL-2.0","CDLA-Permissive-2.0"] },
|
||
{ name = "webpki-root-certs", allow = ["CDLA-Permissive-2.0"] }, # transitive dep via rustls-platform-verifier
|
||
{ name = "openobserve", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-api", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-api-common", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-api-management", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-api-query", allow = ["AGPL-3.0"] },
|
||
{ name = "common", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-core", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-jobs", allow = ["AGPL-3.0"] },
|
||
{ name = "openobserve-vrl", allow = ["AGPL-3.0"] },
|
||
{ name = "search", allow = ["AGPL-3.0"] },
|
||
{ name = "promql", allow = ["AGPL-3.0"] },
|
||
# Empty dependency-resolution stubs for the private enterprise crates.
|
||
{ name = "o2_dex", allow = ["AGPL-3.0"] },
|
||
{ name = "o2_enterprise", allow = ["AGPL-3.0"] },
|
||
{ name = "o2_openfga", allow = ["AGPL-3.0"] },
|
||
{ name = "o2_ratelimit", allow = ["AGPL-3.0"] },
|
||
{ name = "vortex", allow = ["AGPL-3.0"] },
|
||
{ name = "vortex-datafusion", allow = ["AGPL-3.0"] },
|
||
{ name = "config", allow = ["AGPL-3.0"] },
|
||
{ name = "infra", allow = ["AGPL-3.0"] },
|
||
{ name = "ingester", allow = ["AGPL-3.0"] },
|
||
{ name = "wal", allow = ["AGPL-3.0"] },
|
||
{ name = "proto", allow = ["AGPL-3.0"] },
|
||
{ name = "flight", allow = ["AGPL-3.0"] },
|
||
{ name = "tantivy_utils", allow = ["AGPL-3.0"] },
|
||
{ name = "report_server", allow = ["AGPL-3.0"] },
|
||
{ name = "web", allow = ["AGPL-3.0"] },
|
||
{ name = "arrayref", allow = ["BSD-2-Clause"] },
|
||
{ name = "mach", allow = ["BSD-2-Clause"] },
|
||
{ name = "fastdivide", allow = ["zlib-acknowledgement"] },
|
||
{ name = "foldhash", allow = ["Zlib"] },
|
||
{ name = "adler32", allow = ["Zlib"] },
|
||
{ name = "libz-rs-sys", allow = ["Zlib"] },
|
||
{ name = "libz-rs", allow = ["Zlib"] },
|
||
{ name = "zlib-rs", allow = ["Zlib"] },
|
||
# These two are transitive deps of vrl via dep rustyline.
|
||
# However, rustyline is needed only when we enable feature cli
|
||
# which we haven't. Probably in Cargo.lock due to old code, need
|
||
# to take a look and remove.
|
||
{ name = "clipboard-win", allow = ["BSL-1.0"] },
|
||
{ name = "error-code", allow = ["BSL-1.0"] },
|
||
{ name = "base16", allow = ["CC0-1.0"] },
|
||
{ name = "tiny-keccak", allow = ["CC0-1.0"] },
|
||
{ name = "ring", allow = ["BSD-4-Clause", "OpenSSL"] },
|
||
{ name = "inferno", allow = ["CDDL-1.0"] },
|
||
{ name = "libbz2-rs-sys", allow = ["bzip2-1.0.6"] },
|
||
{ name = "aws-lc-sys", allow = ["OpenSSL"] },
|
||
{ name = "borrow-or-share", allow = ["MIT-0"] },
|
||
]
|
||
|
||
allow = [
|
||
"Apache-2.0",
|
||
"Apache-2.0 WITH LLVM-exception",
|
||
"MPL-2.0",
|
||
"MIT",
|
||
"BSD-3-Clause", # OSI + fsf free
|
||
"Unicode-3.0", # OSI
|
||
"ISC", # OSI + fsf free
|
||
"BSL-1.0",
|
||
"CC0-1.0",
|
||
"0BSD", # OSI approved - BSD Zero Clause License
|
||
]
|
||
|
||
[[licenses.clarify]]
|
||
name = "ring"
|
||
expression = "BSD-4-Clause AND ISC AND MIT AND OpenSSL"
|
||
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
|
||
|
||
[sources.allow-org]
|
||
github = ["openobserve", "apache"]
|
||
|
||
[sources]
|
||
allow-git = ["https://github.com/mattsse/chromiumoxide"]
|