[renovate]

This PR contains the following updates:

Package	Type	Update	Change
cargo-deny	tools	minor	0.19.4 → 0.20.2

---

Release Notes

EmbarkStudios/cargo-deny (cargo-deny)

v0.20.2

Compare Source

Fixed

• PR#884 fixed snapshot filenames on Windows which caused the release binary publish to fail...again.

v0.20.1

Compare Source

Fixed

• PR#883 fixed snapshot filenames on Windows which caused the release binary publish to fail.

v0.20.0

Compare Source

Changed

• PR#881 refactored the CLI, moving some duplicated options/flags into the root and removing several deprecated options/flags/values. See the PR for a full list of changes.

Added

• PR#879 resolved #​873 by adding a new bans.std-replacements lint which checks the graph for crates.io sourced crates that have been partially or fully replaced in std and/or core.

Fixed

• PR#880 resolved #​765 by respecting non-default build script paths in manifests.
• PR#881 resolved #​874 by cleaning up the CLI, deduplicating some options/flags that caused bug in the list subcommand.

v0.19.9

Compare Source

Added

• PR#866 added sources.unused-allowed-org

Fixed

• PR#870 resolved #​868 by spawning scoped threads directly, allowing forward progress even on severely constrained thread pool counts.
• PR#871 resolved #​869 by ignoring wildcards on crates that depend on themselves.

v0.19.8

Compare Source

Fixed

• PR#864 fixed matching of ^ and ~ with on prerelease versions for when checking if a crate is affected by an advisory. As of the time of the PR, this literally affected none of published versions of any crate with an advisory, but this just ensures such a case will be handled in the future.

v0.19.7

Compare Source

Changed

• PR#860 updated crates, resolving krates#111.

v0.19.6

Compare Source

Fixed

• PR#854 resolved #​854 by removing environment variables that affect repo paths before cloning or fetching the advisory database.

v0.19.5

Compare Source

Fixed

• PR#857 fixed a segfault reported in #​855.

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 7e55721f-8079-49ee-80b3-06820ece4827

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}