Towards satisfying cargo-deny

Author: MeFisto94

Cargo.toml

@@ -77,7 +77,7 @@ env_logger = { version = "0.11.3", default-features = false, features = ["auto-c
 log = "0.4.21"
 
 # Tracing / Profiling
-tracy-client = { version = "0.18.0", optional = true } # https://github.com/nagisa/rust_tracy_client/tree/main/tracy-client -> tracy client 0.11.1
+tracy-client = { version = "0.18.3", optional = true } # https://github.com/nagisa/rust_tracy_client/tree/main/tracy-client -> tracy client 0.11.1
 profiling = { version = "1.0.16", default-features = false }
 wgpu-profiler = { version = "0.19.0", features = ["tracy"] }
 

deny.toml

@@ -70,6 +70,8 @@ feature-depth = 1
 # A list of advisory IDs to ignore. Note that ignored advisories will still
 # output a note when they are encountered.
 ignore = [
+    { id = "RUSTSEC_2024-0436", reason = "Even the most recent WGPU doesn't fix this yet, but metal itself is also deprecated" },
+    { id = "RUSTSEC-2025-0056", reason = "No safe upgrade is available, used by multiple dependencies" },
     #"RUSTSEC-0000-0000",
     #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
     #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish
@@ -97,7 +99,9 @@ allow = [
     "MIT",
     "MIT-0",
     "Unicode-DFS-2016",
-    "Zlib"
+    "Zlib",
+    # https://softwareengineering.stackexchange.com/a/317946
+    "MPL-2.0",
     #"Apache-2.0 WITH LLVM-exception",
 ]
 # The confidence threshold for detecting a license from license text.