From 9e658ba7dcfa4ebbae00e33d6064f6f8dbac5788 Mon Sep 17 00:00:00 2001
From: Ivan Pashchenko <ivan.pashchenko@jetbrains.com>
Date: Mon, 25 Mar 2024 18:28:17 +0100
Subject: [PATCH] IJPL-442: fix cargo deny vuln, do not use external info for
 license scanning

GitOrigin-RevId: 88394269437d4c774cd281a65ba1effe7b62de70
---
 native/XPlatLauncher/Cargo.lock | 4 ++--
 native/XPlatLauncher/about.toml | 2 ++
 native/XPlatLauncher/deny.toml  | 6 +++---
 3 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/native/XPlatLauncher/Cargo.lock b/native/XPlatLauncher/Cargo.lock
index 8d449328c05f..a5ead8036d58 100644
--- a/native/XPlatLauncher/Cargo.lock
+++ b/native/XPlatLauncher/Cargo.lock
@@ -2170,9 +2170,9 @@ dependencies = [
 
 [[package]]
 name = "mio"
-version = "0.8.8"
+version = "0.8.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "927a765cd3fc26206e66b296465fa9d3e5ab003e651c1b3c060e7956d96b19d2"
+checksum = "a4a650543ca06a924e8b371db273b2756685faae30f8487da1b56505a8f78b0c"
 dependencies = [
  "libc",
  "wasi",
diff --git a/native/XPlatLauncher/about.toml b/native/XPlatLauncher/about.toml
index 214a3b1591c9..39136dd00772 100644
--- a/native/XPlatLauncher/about.toml
+++ b/native/XPlatLauncher/about.toml
@@ -11,3 +11,5 @@ private = { ignore = true }
 # build / dev dependencies are not shipped as part of the launcher
 ignore-build-dependencies = true
 ignore-dev-dependencies = true
+
+no-clearly-defined = true
diff --git a/native/XPlatLauncher/deny.toml b/native/XPlatLauncher/deny.toml
index cb2dfc196d18..0efb6e177cc9 100644
--- a/native/XPlatLauncher/deny.toml
+++ b/native/XPlatLauncher/deny.toml
@@ -17,6 +17,7 @@ confidence-threshold = 0.95
 allow = [
     "MIT",
     "Apache-2.0",
+    "BSD-3-Clause", # reqwest -> encoding_rs
     "ISC", # libloading, MIT / Apache 2.0 alike
     "Unicode-DFS-2016" # serde -> [..] -> unicode-ident
 ]
@@ -37,9 +38,8 @@ allow = [ ]
 deny = [ ]
 skip = [ ]
 skip-tree = [
-    { name = "redox_users" },
-    { name = "redox_syscall" },
-    { name = "windows-sys", version = "0.45.0" }
+    { name = "reqwest" }, # build-time dependency
+    { name = "tar" }, # build-time dependency
 ]
 
 [sources]