feat: sync with upstream 59f354c

.github/workflows/test.yml

@@ -16,7 +16,7 @@ concurrency:
 
 env:
   CARGO_TERM_COLOR: always
-  TARGET_RUST_VERSION: "nightly-2024-09-01"
+  TARGET_RUST_VERSION: "nightly-2024-09-05"
 
 jobs:
   nextest:
@@ -106,7 +106,6 @@ jobs:
 
   zk-cargo-test:
     runs-on: ubuntu-22.04-github-hosted-16core
-
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -145,6 +144,14 @@ jobs:
         run: |
           ZK_DEBUG_HISTORICAL_BLOCK_HASHES=5 cargo nextest run --package '*' --lib --test '*' --filter-expr 'test(~zk) and not test(~test_zk_aave_di)'
 
+  deny:
+    uses: ithacaxyz/ci/.github/workflows/deny.yml@main
+    with:
+      # Clear out arguments to not pass `--all-features` to `cargo deny`.
+      # Many crates have an `openssl` feature which enables banned dependencies.
+      deny-flags: ""
+
+
   check-ci-install:
     name: CI install
     runs-on: ubuntu-22.04
@@ -168,4 +175,4 @@ jobs:
           ./install-foundry-zksync
 
       - name: Verify anvil-zksync installation
-        run: anvil-zksync --version
+        run: anvil-zksync --version