Add cargo deny check to Nightly build

.github/workflows/check.yaml

@@ -52,13 +52,11 @@ jobs:
     - uses: actions/checkout@v4
       with:
         submodules: "recursive"
-    - uses: dtolnay/rust-toolchain@master
+    - uses: EmbarkStudios/cargo-deny-action@v2
       with: 
-        toolchain: ${{ env.RUST_TOOLCHAIN }}
-    - uses: taiki-e/install-action@cargo-deny
-    - name: Run cargo deny check
-      run: |
-        cargo deny check
+        rust-version: ${{ env.RUST_TOOLCHAIN }}
+        command: check
+        arguments: --all-features
 
   # [impl->req~up-language-ci-build~1]
   check:

.github/workflows/nightly.yaml

@@ -25,10 +25,25 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+env:
+  RUST_TOOLCHAIN: ${{ vars.RUST_TOOLCHAIN || 'stable' }}
+
 jobs:
   check-msrv:
     uses: ./.github/workflows/verify-msrv.yaml
 
+  deny:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        submodules: "recursive"
+    - uses: EmbarkStudios/cargo-deny-action@v2
+      with: 
+        rust-version: ${{ env.RUST_TOOLCHAIN }}
+        command: check
+        arguments: --all-features
+
   test-all-features:
     uses: ./.github/workflows/test-featurematrix.yaml
 

deny.toml

@@ -19,6 +19,8 @@
 allow = ["Apache-2.0", "BSD-3-Clause", "MIT"]
 private = { ignore = true }
 exceptions = [{ name = "unicode-ident", allow = ["Unicode-DFS-2016"] }]
+unused-allowed-license = "allow"
 
 [bans]
-multiple-versions = "allow"
+multiple-versions = "deny"
+wildcards = "deny"