v1.3.1 - cargo-deny 0.12.1

Fixed

• PR#426 fixed an oversight in PR#422, fully resolving #412 by allowing both https and ssh URLs for advisory databases. Thanks @jbg!

Changed

• PR#427 updated dependencies.

v1.3.0 - cargo-deny 0.12.0

Removed

• PR#423 removed the fix subcommand. This functionality was far too complicated for far too little benefit.

Fixed

• PR#420 resolved #388 by adding the ability to fetch advisory databases via the git CLI. Thanks @danielhaap83!
• PR#422 fixed #380 and #410 by updating a few transitive dependencies that use git2, as well as removing the usage of rustsec's git feature so that we now use git2 v0.14, resolving a crash issue in new libgit2 versions available in eg. rolling release distros such as Arch. This should also make it easier to update and improve git related functionality since more of it is inside cargo-deny itself now.
• PR#424 really fixed (there's even a test now!) #384 by adding each version's reverse dependency graph in the ascending order.

v1.2.17 - cargo-deny 0.11.4

Changed

• PR#51 updated the image to use Rust 1.60.0 by default. Thanks @MarcoIeni!

v1.2.16 - cargo-deny 0.11.4

Added

• PR#49 added the command-arguments option to the action. Thanks @ryo33!

v1.2.15 - cargo-deny 0.11.3

Fixed

• Accidentally change how arguments were forwarded to cargo-deny which broken more complicated invocations

v1.2.14 - cargo-deny 0.11.3

Added

• Added git to the image, resolving #40

v1.2.13 - cargo-deny 0.11.3

Changed

• Added the rust-version github actions variable, allowing you to specify a specific cargo version to use when running cargo-deny, including nightly, or other unstable versions.

v1.2.12 - cargo-deny 0.11.3

Fixed

• PR#407 resolved #406 by always checking license exceptions first.

v1.2.10 - cargo-deny 0.11.1

Added

• PR#391 resolved #344 by adding [licenses.ignore-sources] to ignore license checking for crates sourced from 1 or more specified registries. Thanks @ShellWowza!
• PR#396 resolved #366 by also looking for .deny.toml in addition to deny.toml if a config file is not specified.

Changed

• PR#392 updated all dependencies.

Fixed

• PR#393 resolved #371 by changing the default for version requirements specified in config files to accept all versions, rather than using the almost-but-not-quite default of *.
• PR#394 resolved #147 by ignore all private crates, not only the ones in the workspace.
• PR#395 resolved #375 by fixing a potential infinite loop when using [bans.skip-tree].

v1.2.9 - cargo-deny 0.11.0

Fixed image to use proper tag.