chore(deny): allow MIT-0 for goose's borrow-or-share transitive dep

The Security job's cargo-deny licenses gate rejected MIT-0 (MIT No
Attribution — OSI approved, strictly more permissive than MIT), newly
pulled in via goose → jsonschema → referencing → fluent-uri →
borrow-or-share.

Signed-off-by: Michael Neale <michael.neale@gmail.com>
This commit is contained in:
Michael Neale
2026-07-28 15:23:28 +10:00
parent cca05c0ae1
commit 66d1bffc85

View File

@@ -41,6 +41,10 @@ allow = [
# bzip2/libbzip2's permissive BSD-like license. New via desktop zip/bzip2
# transitive deps; compatible with Apache-2.0 distribution.
"bzip2-1.0.6",
# MIT No Attribution — MIT minus the attribution requirement; OSI approved.
# New via the goose dep: goose → jsonschema → referencing → fluent-uri →
# borrow-or-share.
"MIT-0",
]
confidence-threshold = 0.8