From 66d1bffc854c5aba03d1a799eb91ce3a1c097347 Mon Sep 17 00:00:00 2001
From: Michael Neale <michael.neale@gmail.com>
Date: Tue, 28 Jul 2026 15:23:28 +1000
Subject: [PATCH] chore(deny): allow MIT-0 for goose's borrow-or-share
 transitive dep
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Security job's cargo-deny licenses gate rejected MIT-0 (MIT No
Attribution — OSI approved, strictly more permissive than MIT), newly
pulled in via goose → jsonschema → referencing → fluent-uri →
borrow-or-share.

Signed-off-by: Michael Neale <michael.neale@gmail.com>
---
 deny.toml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/deny.toml b/deny.toml
index d3c5fcd4bc..8c7e679ed9 100644
--- a/deny.toml
+++ b/deny.toml
@@ -41,6 +41,10 @@ allow = [
     # bzip2/libbzip2's permissive BSD-like license. New via desktop zip/bzip2
     # transitive deps; compatible with Apache-2.0 distribution.
     "bzip2-1.0.6",
+    # MIT No Attribution — MIT minus the attribution requirement; OSI approved.
+    # New via the goose dep: goose → jsonschema → referencing → fluent-uri →
+    # borrow-or-share.
+    "MIT-0",
 ]
 confidence-threshold = 0.8