deny.toml

# RENDERED by `busbar-release plugin sync` from GetBusbar/busbar-release template/ and busbar's
# `.github/fleet/deps.toml` at 8fc3b1b2a6d123575a77ce505e501b595fb24cef; a hand edit is overwritten by the next sync. CI runs
# `cargo deny check` on it (busbar's plugin-ci.yml at the pin). The license allowlist is busbar's own;
# the one reviewed git source is busbar itself, at the pin.
[graph]
all-features = false

[advisories]
version = 2

[licenses]
version = 2
allow = [
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "MIT",
    "MIT-0",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Unicode-3.0",
    "Unicode-DFS-2016",
    "Zlib",
    "MPL-2.0",
    "CC0-1.0",
    "OpenSSL",
    "BSL-1.0",
    "CDLA-Permissive-2.0",
    "Unlicense",
]
confidence-threshold = 0.9

[bans]
multiple-versions = "deny"
wildcards = "deny"
allow-wildcard-paths = true
# busbar .github/fleet/deps.toml [bans].deny (one stack per concern), then ONE VERSION OF EVERYTHING
# BUSBAR USES (OWNER 2026-10-02): every version of a shared crate outside the line busbar's own
# Cargo.lock resolves it to, at the pin.
deny = [
    # ONE Ed25519 = ed25519-dalek 2 (ARCHITECT ruling 2026-10-02; mirrors busbar deny.toml): no older
    # dalek and no other Ed25519 implementation may enter a plugin's closure.
    { crate = "ed25519-dalek@1", reason = "ONE Ed25519: ed25519-dalek 2" },
    { crate = "ed25519-dalek@0", reason = "ONE Ed25519: ed25519-dalek 2" },
    { crate = "ed25519-compact", reason = "ONE Ed25519: ed25519-dalek 2" },
    { crate = "ed25519-zebra", reason = "ONE Ed25519: ed25519-dalek 2" },
    { crate = "ed25519-consensus", reason = "ONE Ed25519: ed25519-dalek 2" },
    { crate = "openssl", reason = "TLS is rustls (core-only); no OpenSSL anywhere in the fleet" },
    { crate = "openssl-sys", reason = "TLS is rustls (core-only); no OpenSSL anywhere in the fleet" },
    { crate = "native-tls", reason = "TLS is rustls (core-only); no platform TLS anywhere in the fleet" },
    { crate = "hyper:<1", reason = "HTTP is hyper 1; no hyper 0.14 stack" },
    { crate = "rustls:<0.23", reason = "one rustls major (0.23) fleet-wide" },
    { crate = "ring:<0.17", reason = "one ring major (0.17) fleet-wide" },
    { crate = "serde_yaml", reason = "unmaintained; busbar uses serde_yaml_ng" },
    { crate = "a2a-lf:<0.3.0", reason = "busbar resolves a2a-lf to 0.3.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "a2a-lf:>=0.4.0", reason = "busbar resolves a2a-lf to 0.3.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "a2a-pb:<0.2.0", reason = "busbar resolves a2a-pb to 0.2.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "a2a-pb:>=0.3.0", reason = "busbar resolves a2a-pb to 0.2.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "arc-swap:<1.0.0", reason = "busbar resolves arc-swap to 1.9.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "arc-swap:>=2.0.0", reason = "busbar resolves arc-swap to 1.9.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "async-trait:<0.1.0", reason = "busbar resolves async-trait to 0.1.92; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "async-trait:>=0.2.0", reason = "busbar resolves async-trait to 0.1.92; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "axum:<0.8.0", reason = "busbar resolves axum to 0.8.9; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "axum:>=0.9.0", reason = "busbar resolves axum to 0.8.9; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "base64:<0.22.0", reason = "busbar resolves base64 to 0.22.1, 0.23.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "base64:>=0.24.0", reason = "busbar resolves base64 to 0.22.1, 0.23.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "bumpalo:<3.0.0", reason = "busbar resolves bumpalo to 3.20.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "bumpalo:>=4.0.0", reason = "busbar resolves bumpalo to 3.20.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "bytes:<1.0.0", reason = "busbar resolves bytes to 1.12.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "bytes:>=2.0.0", reason = "busbar resolves bytes to 1.12.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "core_affinity:<0.8.0", reason = "busbar resolves core_affinity to 0.8.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "core_affinity:>=0.9.0", reason = "busbar resolves core_affinity to 0.8.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "crc32fast:<1.0.0", reason = "busbar resolves crc32fast to 1.5.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "crc32fast:>=2.0.0", reason = "busbar resolves crc32fast to 1.5.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "criterion:<0.7.0", reason = "busbar resolves criterion to 0.7.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "criterion:>=0.8.0", reason = "busbar resolves criterion to 0.7.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "dimpl:<0.7.0", reason = "busbar resolves dimpl to 0.7.4; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "dimpl:>=0.8.0", reason = "busbar resolves dimpl to 0.7.4; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "ed25519-dalek:<2.0.0", reason = "busbar resolves ed25519-dalek to 2.2.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "ed25519-dalek:>=3.0.0", reason = "busbar resolves ed25519-dalek to 2.2.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "flate2:<1.0.0", reason = "busbar resolves flate2 to 1.1.10; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "flate2:>=2.0.0", reason = "busbar resolves flate2 to 1.1.10; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "futures:<0.3.0", reason = "busbar resolves futures to 0.3.34; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "futures:>=0.4.0", reason = "busbar resolves futures to 0.3.34; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "getrandom:<0.2.0", reason = "busbar resolves getrandom to 0.2.17, 0.3.4, 0.4.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "getrandom:>=0.5.0", reason = "busbar resolves getrandom to 0.2.17, 0.3.4, 0.4.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "h2:<0.4.0", reason = "busbar resolves h2 to 0.4.18; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "h2:>=0.5.0", reason = "busbar resolves h2 to 0.4.18; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hex:<0.4.0", reason = "busbar resolves hex to 0.4.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hex:>=0.5.0", reason = "busbar resolves hex to 0.4.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hmac:<0.13.0", reason = "busbar resolves hmac to 0.13.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hmac:>=0.14.0", reason = "busbar resolves hmac to 0.13.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "http:<1.0.0", reason = "busbar resolves http to 1.4.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "http:>=2.0.0", reason = "busbar resolves http to 1.4.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "http-body:<1.0.0", reason = "busbar resolves http-body to 1.1.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "http-body:>=2.0.0", reason = "busbar resolves http-body to 1.1.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "http-body-util:<0.1.0", reason = "busbar resolves http-body-util to 0.1.5; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "http-body-util:>=0.2.0", reason = "busbar resolves http-body-util to 0.1.5; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "httpdate:<1.0.0", reason = "busbar resolves httpdate to 1.0.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "httpdate:>=2.0.0", reason = "busbar resolves httpdate to 1.0.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hyper:<1.0.0", reason = "busbar resolves hyper to 1.11.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hyper:>=2.0.0", reason = "busbar resolves hyper to 1.11.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hyper-rustls:<0.27.0", reason = "busbar resolves hyper-rustls to 0.27.9; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hyper-rustls:>=0.28.0", reason = "busbar resolves hyper-rustls to 0.27.9; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hyper-util:<0.1.0", reason = "busbar resolves hyper-util to 0.1.20; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "hyper-util:>=0.2.0", reason = "busbar resolves hyper-util to 0.1.20; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "indexmap:<2.0.0", reason = "busbar resolves indexmap to 2.14.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "indexmap:>=3.0.0", reason = "busbar resolves indexmap to 2.14.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "jsonschema:<0.49.0", reason = "busbar resolves jsonschema to 0.49.9; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "jsonschema:>=0.50.0", reason = "busbar resolves jsonschema to 0.49.9; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "libc:<0.2.0", reason = "busbar resolves libc to 0.2.189; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "libc:>=0.3.0", reason = "busbar resolves libc to 0.2.189; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "libloading:<0.9.0", reason = "busbar resolves libloading to 0.9.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "libloading:>=0.10.0", reason = "busbar resolves libloading to 0.9.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "log:<0.4.0", reason = "busbar resolves log to 0.4.30; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "log:>=0.5.0", reason = "busbar resolves log to 0.4.30; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "loom:<0.7.0", reason = "busbar resolves loom to 0.7.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "loom:>=0.8.0", reason = "busbar resolves loom to 0.7.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "memchr:<2.0.0", reason = "busbar resolves memchr to 2.8.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "memchr:>=3.0.0", reason = "busbar resolves memchr to 2.8.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "metrics:<0.24.0", reason = "busbar resolves metrics to 0.24.6; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "metrics:>=0.25.0", reason = "busbar resolves metrics to 0.24.6; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "metrics-exporter-prometheus:<0.18.0", reason = "busbar resolves metrics-exporter-prometheus to 0.18.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "metrics-exporter-prometheus:>=0.19.0", reason = "busbar resolves metrics-exporter-prometheus to 0.18.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "metrics-util:<0.20.0", reason = "busbar resolves metrics-util to 0.20.4; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "metrics-util:>=0.21.0", reason = "busbar resolves metrics-util to 0.20.4; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "oauth-as:<1.0.0", reason = "busbar resolves oauth-as to 1.0.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "oauth-as:>=2.0.0", reason = "busbar resolves oauth-as to 1.0.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "opentelemetry-proto:<0.32.0", reason = "busbar resolves opentelemetry-proto to 0.32.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "opentelemetry-proto:>=0.33.0", reason = "busbar resolves opentelemetry-proto to 0.32.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "proc-macro2:<1.0.0", reason = "busbar resolves proc-macro2 to 1.0.106; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "proc-macro2:>=2.0.0", reason = "busbar resolves proc-macro2 to 1.0.106; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "proptest:<1.0.0", reason = "busbar resolves proptest to 1.11.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "proptest:>=2.0.0", reason = "busbar resolves proptest to 1.11.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "prost:<0.14.0", reason = "busbar resolves prost to 0.14.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "prost:>=0.15.0", reason = "busbar resolves prost to 0.14.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rcgen:<0.14.0", reason = "busbar resolves rcgen to 0.14.10; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rcgen:>=0.15.0", reason = "busbar resolves rcgen to 0.14.10; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "reqwest:<0.12.0", reason = "busbar resolves reqwest to 0.12.28; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "reqwest:>=0.13.0", reason = "busbar resolves reqwest to 0.12.28; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "ring:<0.17.0", reason = "busbar resolves ring to 0.17.14; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "ring:>=0.18.0", reason = "busbar resolves ring to 0.17.14; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rmcp:<3.0.0", reason = "busbar resolves rmcp to 3.1.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rmcp:>=4.0.0", reason = "busbar resolves rmcp to 3.1.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rustls:<0.23.0", reason = "busbar resolves rustls to 0.23.45; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rustls:>=0.24.0", reason = "busbar resolves rustls to 0.23.45; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rustls-pki-types:<1.0.0", reason = "busbar resolves rustls-pki-types to 1.15.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rustls-pki-types:>=2.0.0", reason = "busbar resolves rustls-pki-types to 1.15.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "schemars:<1.0.0", reason = "busbar resolves schemars to 1.2.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "schemars:>=2.0.0", reason = "busbar resolves schemars to 1.2.2; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde:<1.0.0", reason = "busbar resolves serde to 1.0.229; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde:>=2.0.0", reason = "busbar resolves serde to 1.0.229; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde_json:<1.0.0", reason = "busbar resolves serde_json to 1.0.151; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde_json:>=2.0.0", reason = "busbar resolves serde_json to 1.0.151; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde_urlencoded:<0.7.0", reason = "busbar resolves serde_urlencoded to 0.7.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde_urlencoded:>=0.8.0", reason = "busbar resolves serde_urlencoded to 0.7.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde_yaml_ng:<0.10.0", reason = "busbar resolves serde_yaml_ng to 0.10.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "serde_yaml_ng:>=0.11.0", reason = "busbar resolves serde_yaml_ng to 0.10.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "sha2:<0.10.0", reason = "busbar resolves sha2 to 0.10.9, 0.11.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "sha2:>=0.12.0", reason = "busbar resolves sha2 to 0.10.9, 0.11.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "smallvec:<1.0.0", reason = "busbar resolves smallvec to 1.16.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "smallvec:>=2.0.0", reason = "busbar resolves smallvec to 1.16.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "socket2:<0.6.0", reason = "busbar resolves socket2 to 0.6.4; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "socket2:>=0.7.0", reason = "busbar resolves socket2 to 0.6.4; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "sonic-rs:<0.5.0", reason = "busbar resolves sonic-rs to 0.5.10; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "sonic-rs:>=0.6.0", reason = "busbar resolves sonic-rs to 0.5.10; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "syn:<2.0.0", reason = "busbar resolves syn to 2.0.117, 3.0.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "syn:>=4.0.0", reason = "busbar resolves syn to 2.0.117, 3.0.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tar:<0.4.0", reason = "busbar resolves tar to 0.4.46; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tar:>=0.5.0", reason = "busbar resolves tar to 0.4.46; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tikv-jemalloc-ctl:<0.6.0", reason = "busbar resolves tikv-jemalloc-ctl to 0.6.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tikv-jemalloc-ctl:>=0.7.0", reason = "busbar resolves tikv-jemalloc-ctl to 0.6.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tikv-jemallocator:<0.6.0", reason = "busbar resolves tikv-jemallocator to 0.6.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tikv-jemallocator:>=0.7.0", reason = "busbar resolves tikv-jemallocator to 0.6.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio:<1.0.0", reason = "busbar resolves tokio to 1.53.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio:>=2.0.0", reason = "busbar resolves tokio to 1.53.1; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio-rustls:<0.26.0", reason = "busbar resolves tokio-rustls to 0.26.5; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio-rustls:>=0.27.0", reason = "busbar resolves tokio-rustls to 0.26.5; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio-tungstenite:<0.29.0", reason = "busbar resolves tokio-tungstenite to 0.29.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio-tungstenite:>=0.30.0", reason = "busbar resolves tokio-tungstenite to 0.29.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio-util:<0.7.0", reason = "busbar resolves tokio-util to 0.7.18; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tokio-util:>=0.8.0", reason = "busbar resolves tokio-util to 0.7.18; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tonic:<0.14.0", reason = "busbar resolves tonic to 0.14.6; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tonic:>=0.15.0", reason = "busbar resolves tonic to 0.14.6; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tonic-types:<0.14.0", reason = "busbar resolves tonic-types to 0.14.6; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tonic-types:>=0.15.0", reason = "busbar resolves tonic-types to 0.14.6; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tower:<0.5.0", reason = "busbar resolves tower to 0.5.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tower:>=0.6.0", reason = "busbar resolves tower to 0.5.3; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing:<0.1.0", reason = "busbar resolves tracing to 0.1.44; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing:>=0.2.0", reason = "busbar resolves tracing to 0.1.44; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing-core:<0.1.0", reason = "busbar resolves tracing-core to 0.1.36; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing-core:>=0.2.0", reason = "busbar resolves tracing-core to 0.1.36; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing-log:<0.2.0", reason = "busbar resolves tracing-log to 0.2.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing-log:>=0.3.0", reason = "busbar resolves tracing-log to 0.2.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing-subscriber:<0.3.0", reason = "busbar resolves tracing-subscriber to 0.3.23; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tracing-subscriber:>=0.4.0", reason = "busbar resolves tracing-subscriber to 0.3.23; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tungstenite:<0.29.0", reason = "busbar resolves tungstenite to 0.29.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "tungstenite:>=0.30.0", reason = "busbar resolves tungstenite to 0.29.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "url:<2.0.0", reason = "busbar resolves url to 2.5.8; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "url:>=3.0.0", reason = "busbar resolves url to 2.5.8; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rustls-webpki:<0.103.0", reason = "busbar resolves rustls-webpki to 0.103.15; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "rustls-webpki:>=0.104.0", reason = "busbar resolves rustls-webpki to 0.103.15; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "webpki-roots:<1.0.0", reason = "busbar resolves webpki-roots to 1.0.7; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "webpki-roots:>=2.0.0", reason = "busbar resolves webpki-roots to 1.0.7; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "zeroize:<1.0.0", reason = "busbar resolves zeroize to 1.9.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
    { crate = "zeroize:>=2.0.0", reason = "busbar resolves zeroize to 1.9.0; a plugin may not pull a second version (OWNER 2026-10-02)" },
]
# The duplicates busbar itself accepts: deps.toml [bans].skip, then every duplicate busbar's own
# Cargo.lock holds at the pin. Nothing else may appear twice (multiple-versions = "deny").
skip = [
    { crate = "base64@0.22.1", reason = "busbar's own lock holds this duplicate" },
    { crate = "base64@0.23.1", reason = "busbar's own lock holds this duplicate" },
    { crate = "bit-vec@0.8.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "bit-vec@0.9.1", reason = "busbar's own lock holds this duplicate" },
    { crate = "block-buffer@0.10.4", reason = "busbar's own lock holds this duplicate" },
    { crate = "block-buffer@0.12.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "const-oid@0.10.2", reason = "busbar's own lock holds this duplicate" },
    { crate = "const-oid@0.9.6", reason = "busbar's own lock holds this duplicate" },
    { crate = "cpufeatures@0.2.17", reason = "busbar's own lock holds this duplicate" },
    { crate = "cpufeatures@0.3.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "crypto-common@0.1.7", reason = "busbar's own lock holds this duplicate" },
    { crate = "crypto-common@0.2.2", reason = "busbar's own lock holds this duplicate" },
    { crate = "digest@0.10.7", reason = "busbar's own lock holds this duplicate" },
    { crate = "digest@0.11.3", reason = "busbar's own lock holds this duplicate" },
    { crate = "foldhash@0.1.5", reason = "busbar's own lock holds this duplicate" },
    { crate = "foldhash@0.2.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "getrandom@0.2.17", reason = "busbar's own lock holds this duplicate" },
    { crate = "getrandom@0.3.4", reason = "busbar's own lock holds this duplicate" },
    { crate = "getrandom@0.4.3", reason = "busbar's own lock holds this duplicate" },
    { crate = "hashbrown@0.15.5", reason = "busbar's own lock holds this duplicate" },
    { crate = "hashbrown@0.16.1", reason = "busbar's own lock holds this duplicate" },
    { crate = "hashbrown@0.17.1", reason = "busbar's own lock holds this duplicate" },
    { crate = "itertools@0.13.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "itertools@0.14.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "nom@7.1.3", reason = "busbar's own lock holds this duplicate" },
    { crate = "nom@8.0.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "r-efi@5.3.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "r-efi@6.0.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "rand@0.10.2", reason = "busbar's own lock holds this duplicate" },
    { crate = "rand@0.9.4", reason = "busbar's own lock holds this duplicate" },
    { crate = "rand_core@0.10.1", reason = "busbar's own lock holds this duplicate" },
    { crate = "rand_core@0.6.4", reason = "busbar's own lock holds this duplicate" },
    { crate = "rand_core@0.9.5", reason = "busbar's own lock holds this duplicate" },
    { crate = "sha2@0.10.9", reason = "busbar's own lock holds this duplicate" },
    { crate = "sha2@0.11.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "syn@2.0.117", reason = "busbar's own lock holds this duplicate" },
    { crate = "syn@3.0.3", reason = "busbar's own lock holds this duplicate" },
    { crate = "windows-sys@0.52.0", reason = "busbar's own lock holds this duplicate" },
    { crate = "windows-sys@0.61.2", reason = "busbar's own lock holds this duplicate" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = ["https://github.com/GetBusbar/busbar"]