From d5e505619f433decf2a49a55f19539bc59562edf Mon Sep 17 00:00:00 2001
From: tottoto <tottotodev@gmail.com>
Date: Sat, 13 Sep 2025 21:48:25 +0900
Subject: [PATCH] Update to cargo-deny api version 2 (#3475)

---
 .github/workflows/CI.yml          |  2 +-
 deny.toml                         | 24 ++++++++++--------------
 examples/reverse-proxy/Cargo.toml |  1 +
 3 files changed, 12 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index f6379e6a..fba50396 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -176,7 +176,7 @@ jobs:
           - bans licenses sources
     steps:
       - uses: actions/checkout@v5
-      - uses: EmbarkStudios/cargo-deny-action@v1
+      - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           command: check ${{ matrix.checks }}
           manifest-path: axum/Cargo.toml
diff --git a/deny.toml b/deny.toml
index 251ba748..6bb50f12 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,16 +1,18 @@
+[graph]
+exclude-unpublished = true
+
 [advisories]
-vulnerability = "deny"
-unmaintained = "warn"
-notice = "warn"
+unmaintained = "none"
 ignore = []
 
 [licenses]
-unlicensed = "warn"
-allow = []
-deny = []
-copyleft = "warn"
-allow-osi-fsf-free = "either"
 confidence-threshold = 0.8
+allow = [
+    "Apache-2.0",
+    "BSD-3-Clause",
+    "MIT",
+    "Unicode-3.0",
+]
 
 [bans]
 multiple-versions = "deny"
@@ -21,12 +23,6 @@ skip-tree = [
     { name = "base64" },
     # parking_lot pulls in old versions of windows-sys
     { name = "windows-sys" },
-    # old version pulled in by rustls via ring
-    { name = "spin" },
-    # lots still pulls in syn 1.x
-    { name = "syn" },
-    # pulled in by hyper
-    { name = "socket2" },
     # pulled in by quickcheck and cookie
     { name = "rand" },
 ]
diff --git a/examples/reverse-proxy/Cargo.toml b/examples/reverse-proxy/Cargo.toml
index e2816573..0f234077 100644
--- a/examples/reverse-proxy/Cargo.toml
+++ b/examples/reverse-proxy/Cargo.toml
@@ -2,6 +2,7 @@
 name = "example-reverse-proxy"
 version = "0.1.0"
 edition = "2021"
+publish = false
 
 [dependencies]
 axum = { path = "../../axum" }