chore(deny): skip some duplicate dependencies

cratelyn · cratelyn · commit fe5cb0238e1f · 2026-06-04T12:13:42.000-04:00
`rand@0.9` leaves a pair of duplicate dependencies that we can acknowledge and skip. see open-telemetry/opentelemetry-rust#3536. Signed-off-by: katelyn martin <kate@buoyant.io>
diff --git a/deny.toml b/deny.toml
@@ -45,14 +45,15 @@ deny = [
     # aws-lc-rs should be used instead.
     { name = "ring" }
 ]
-skip = []
+skip = [
+    { name = "getrandom", version = "0.2.17" },
+    { name = "cpufeatures", version = "0.2.17" }
+]
 skip-tree = [
     # rand v0.10 is still propagating through the ecosystem
     #
     # see https://github.com/open-telemetry/opentelemetry-rust/pull/3536.
     { name = "rand", version = "0.9" },
-    # `pprof` uses a number of old dependencies. for now, we skip its subtree.
-    { name = "pprof" },
     # zerocopy v0.8 is still propagating through the ecosystem
     { name = "zerocopy", version = "0.7" },
 ]

Original file line number	Diff line number	Diff line change
`@@ -45,14 +45,15 @@ deny = [`
`45`	`45`	`# aws-lc-rs should be used instead.`
`46`	`46`	`{ name = "ring" }`
`47`	`47`	`]`
`48`		`-skip = []`
	`48`	`+skip = [`
	`49`	`+ { name = "getrandom", version = "0.2.17" },`
	`50`	`+ { name = "cpufeatures", version = "0.2.17" }`
	`51`	`+]`
`49`	`52`	`skip-tree = [`
`50`	`53`	`# rand v0.10 is still propagating through the ecosystem`
`51`	`54`	`#`
`52`	`55`	`# see https://github.com/open-telemetry/opentelemetry-rust/pull/3536.`
`53`	`56`	`{ name = "rand", version = "0.9" },`
`54`		- # `pprof` uses a number of old dependencies. for now, we skip its subtree.
`55`		`- { name = "pprof" },`
`56`	`57`	`# zerocopy v0.8 is still propagating through the ecosystem`
`57`	`58`	`{ name = "zerocopy", version = "0.7" },`
`58`	`59`	`]`