Merge branch 'dependabot/github_actions/github-actions-c4bcf5a8e2'

.github/workflows/ci.yml

@@ -187,7 +187,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
-      - uses: EmbarkStudios/cargo-deny-action@v1
+      - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           command: check ${{ matrix.checks }}
 

Cargo.toml

@@ -303,6 +303,9 @@ futures-lite = { version = "2.1.0", default-features = false, features = ["std"]
 faster-hex = { version = "0.9.0", default-features = false }
 reqwest = { version = "0.12.0", default-features = false, features = ["charset", "http2", "macos-system-configuration"] } # all but the 'default-tls' feature
 curl = { version = "0.4" }
+winnow = { version = "0.6.0", features = ["simd"] }
+unicode-bom = "2.0.2"
+
 
 [package.metadata.docs.rs]
 features = ["document-features", "max"]

deny.toml

@@ -8,10 +8,7 @@
 # More documentation for the advisories section can be found here:
 # https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
 [advisories]
-ignore = [
-    # this is `rustls@0.20.9` coming in with `curl`, which doesn't have an update yet. It's only active optionally, not by default.
-    "RUSTSEC-2024-0336",
-]
+ignore = []
 
 
 
@@ -29,10 +26,10 @@ allow = [
     "MIT",
     "MIT-0",
     "ISC",
-    "Unicode-DFS-2016",
     "LicenseRef-ring",
+    "Unicode-DFS-2016",
     "Zlib",
-    "Unicode-3.0"
+    "MPL-2.0"
 ]
 # The confidence threshold for detecting a license from license text.
 # The higher the value, the more closely the license text must be to the

gix-actor/Cargo.toml

@@ -26,7 +26,7 @@ bstr = { version = "1.3.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
-winnow = { version = "0.6.0", features = ["simd"] }
+winnow.workspace = true
 itoa = "1.0.1"
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",

gix-attributes/Cargo.toml

@@ -22,17 +22,17 @@ gix-quote = { version = "^0.4.12", path = "../gix-quote" }
 gix-glob = { version = "^0.16.4", path = "../gix-glob" }
 gix-trace = { version = "^0.1.8", path = "../gix-trace" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"]}
+bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"] }
 smallvec = "1.10.0"
 kstring = "2.0.0"
-unicode-bom = "2.0.2"
+unicode-bom.workspace = true
 thiserror = "1.0.26"
-serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"]}
+serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
 document-features = { version = "0.2.1", optional = true }
 
 [dev-dependencies]
-gix-testtools = { path = "../tests/tools"}
+gix-testtools = { path = "../tests/tools" }
 gix-fs = { path = "../gix-fs" }
 
 [package.metadata.docs.rs]

gix-config/Cargo.toml

@@ -17,19 +17,19 @@ autotests = false
 serde = ["dep:serde", "bstr/serde", "gix-sec/serde", "gix-ref/serde", "gix-glob/serde", "gix-config-value/serde"]
 
 [dependencies]
-gix-features = { version = "^0.38.2", path = "../gix-features"}
+gix-features = { version = "^0.38.2", path = "../gix-features" }
 gix-config-value = { version = "^0.14.7", path = "../gix-config-value" }
 gix-path = { version = "^0.10.9", path = "../gix-path" }
 gix-sec = { version = "^0.10.7", path = "../gix-sec" }
 gix-ref = { version = "^0.45.0", path = "../gix-ref" }
 gix-glob = { version = "^0.16.4", path = "../gix-glob" }
 
-winnow = { version = "0.6.0", features = ["simd"] }
+winnow.workspace = true
 memchr = "2"
 thiserror = "1.0.26"
-unicode-bom = "2.0.2"
+unicode-bom.workspace = true
 bstr = { version = "1.3.0", default-features = false, features = ["std"] }
-serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"]}
+serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 smallvec = "1.9.0"
 once_cell = "1.14.0"
 

gix-ignore/Cargo.toml

@@ -21,14 +21,14 @@ gix-glob = { version = "^0.16.4", path = "../gix-glob" }
 gix-path = { version = "^0.10.9", path = "../gix-path" }
 gix-trace = { version = "^0.1.8", path = "../gix-trace" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"]}
-unicode-bom = "2.0.2"
-serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"]}
+bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"] }
+unicode-bom.workspace = true
+serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
 document-features = { version = "0.2.1", optional = true }
 
 [dev-dependencies]
-gix-testtools = { path = "../tests/tools"}
+gix-testtools = { path = "../tests/tools" }
 gix-fs = { path = "../gix-fs" }
 
 [package.metadata.docs.rs]

gix-object/Cargo.toml

@@ -50,7 +50,7 @@ bstr = { version = "1.3.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
-winnow = { version = "0.6.0", features = ["simd"] }
+winnow.workspace = true
 smallvec = { version = "1.4.0", features = ["write"] }
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",

gix-protocol/Cargo.toml

@@ -62,7 +62,7 @@ bstr = { version = "1.3.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
-winnow = { version = "0.6.0", features = ["simd"] }
+winnow.workspace = true
 
 # for async-client
 async-trait = { version = "0.1.51", optional = true }

gix-ref/Cargo.toml

@@ -31,7 +31,7 @@ gix-lock = { version = "^14.0.0", path = "../gix-lock" }
 gix-tempfile = { version = "^14.0.0", default-features = false, path = "../gix-tempfile" }
 
 thiserror = "1.0.34"
-winnow = { version = "0.6.0", features = ["simd"] }
+winnow.workspace = true
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
 # packed refs