bottlerocket-os/bottlerocket-sdk

update cargo-deny to 0.9.1+

bcressey opened this issue · 1 comments

We're vending cargo-deny in the SDK now, but it's a fairly old version. We should update to the most recent release and make the necessary changes to deny.toml in the OS packages.

@tjkirch in #49 (comment):

I read the changelogs beyond 0.6.2 and I think it'd be good to update, though we don't have to do it immediately. We'd probably want to pass --all-features to make sure we're not missing anything, since that's no longer the default, and probably make sure bans.wildcards is enabled. SPDX data has been updated in later versions, so it'd be good to get that.