Update EmbarkStudios/cargo-deny-action action to v2.0.15 (#17556)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action)
| action | patch | `v2.0.14` → `v2.0.15` |

---

### Release Notes

<details>
<summary>EmbarkStudios/cargo-deny-action
(EmbarkStudios/cargo-deny-action)</summary>

###
[`v2.0.15`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.0.15):
Release 2.0.15 - cargo-deny 0.19.0

[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.0.14...v2.0.15)

##### Changed

-
[PR#802](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/802)
made relative paths passed to `--config` be resolved relative to the
current working directory (rather than the resolved manifest path's
directory).
-
[PR#825](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/825)
updated `gix`, `reqwest`, and `tame-index` to newer versions. The
`reqwest` 0.13 changes means it is no longer possible to choose the
source of root certificates for `gix`, so that decision is now left to
`rustls-platform-verifier`. The `native-certs` feature has thus been
removed, and `cargo-deny` no longer defaults to using `webpki-roots`.

##### Fixed

-
[PR#802](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/802)
fixed path handling of paths passed to `--config`, resolving
[#&#8203;748](https://redirect.github.com/EmbarkStudios/krates/issues/748).
-
[PR#819](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/819)
added locations to all SARIF results since that's mandatory for valid
SARIF.
-
[PR#821](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/821)
fixed compilation on an Alpine host.

##### Added

-
[PR#795](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/795)
added `[bans.allow-workspace]` to allow workspace crates while denying
all external crates.
-
[PR#800](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/800)
added `[licenses.include-build]` to toggle whether build dependencies
are included in the license check.
-
[PR#823](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/823)
added `[advisories.unused-ignored-advisory]` to disable the warning when
an advisory is ignored but not encountered in the crate graph.
-
[PR#826](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/826)
added `[advisories.unsound]` to determine which crates can show
`unsound` advisories, similarly to the `unmaintained` field. Defaults to
`workspace` crates, ignoring `unsound` advisories for transitive
dependencies, resolving
[#&#8203;824](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/824).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot]
2026-01-19 08:48:46 -06:00
committed by GitHub
parent abd6b8f56c
commit ae0c183cc8
+1 -1
View File
@@ -103,7 +103,7 @@ jobs:
with:
save-if: ${{ inputs.save-rust-cache == 'true' }}
- name: "Check uv_build dependencies"
uses: EmbarkStudios/cargo-deny-action@76cd80eb775d7bbbd2d80292136d74d39e1b4918 # v2.0.14
uses: EmbarkStudios/cargo-deny-action@3fd3802e88374d3fe9159b834c7714ec57d6c979 # v2.0.15
with:
command: check bans
manifest-path: crates/uv-build/Cargo.toml