diff --git a/.buildkite/linux/entrypoint b/.buildkite/linux/entrypoint
index 0c79088f3..9a971266c 100755
--- a/.buildkite/linux/entrypoint
+++ b/.buildkite/linux/entrypoint
@@ -22,8 +22,8 @@ echo "--- Ensure libs importable"
 SKIP_RUN=1 ./run
 
 echo "--- Check Rust libs"
-cargo install cargo-deny
-cargo deny check -A duplicate
+cargo install cargo-deny --version 0.14.12
+cargo deny check
 
 echo "--- Cleanup"
 rm -rf /tmp/* || true
diff --git a/.deny.toml b/.deny.toml
index 523414296..ccf9b8aa6 100644
--- a/.deny.toml
+++ b/.deny.toml
@@ -1,24 +1,15 @@
 # all-features = true
 # features = []
-no-default-features = false
-feature-depth = 1
 
 [advisories]
 db-path = "~/.cargo/advisory-db"
 db-urls = ["https://github.com/rustsec/advisory-db"]
-vulnerability = "deny"
-unmaintained = "warn"
-yanked = "warn"
-notice = "warn"
 ignore = [
-
+  # safemem only used by makeapp
+  "RUSTSEC-2023-0081",
 ]
 
 [licenses]
-unlicensed = "deny"
-copyleft = "deny"
-allow-osi-fsf-free = "neither"
-default = "deny"
 allow = [
   "MIT",
   "Apache-2.0",
@@ -54,10 +45,10 @@ unknown-git = "warn"
 allow-registry = ["https://github.com/rust-lang/crates.io-index"]
 
 [sources.allow-org]
-github = ["ankitects", "open-spaced-repetition"]
+github = ["ankitects"]
 
 [bans]
-multiple-versions = "warn"
+multiple-versions = "allow"
 wildcards = "allow"
 highlight = "all"
 workspace-default-features = "allow"
diff --git a/Cargo.lock b/Cargo.lock
index aa38db293..0a851ad29 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2595,9 +2595,9 @@ dependencies = [
 
 [[package]]
 name = "iana-time-zone"
-version = "0.1.59"
+version = "0.1.60"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6a67363e2aa4443928ce15e57ebae94fd8949958fd1223c4cfc0cd473ad7539"
+checksum = "e7ffbb5a1b541ea2561f8c41c087286cc091e21e556a4f09a8f6cbf17b69b141"
 dependencies = [
  "android_system_properties",
  "core-foundation-sys",
diff --git a/cargo/licenses.json b/cargo/licenses.json
index 3fe3fb01d..1ffa84359 100644
--- a/cargo/licenses.json
+++ b/cargo/licenses.json
@@ -1801,7 +1801,7 @@
   },
   {
     "name": "iana-time-zone",
-    "version": "0.1.59",
+    "version": "0.1.60",
     "authors": "Andrew Straw <strawman@astraw.com>|René Kijewski <rene.kijewski@fu-berlin.de>|Ryan Lopopolo <rjl@hyperbo.la>",
     "repository": "https://github.com/strawlab/iana-time-zone",
     "license": "Apache-2.0 OR MIT",
diff --git a/tools/minilints/src/main.rs b/tools/minilints/src/main.rs
index a5d46d4e6..9836d7483 100644
--- a/tools/minilints/src/main.rs
+++ b/tools/minilints/src/main.rs
@@ -203,8 +203,8 @@ impl LintContext {
 }
 
 fn check_cargo_deny() -> Result<()> {
-    Command::run("cargo install cargo-deny@0.13.5")?;
-    Command::run("cargo deny check -A duplicate")?;
+    Command::run("cargo install cargo-deny@0.14.12")?;
+    Command::run("cargo deny check")?;
     Ok(())
 }