diff --git a/deny.toml b/deny.toml
index 38b454a247b..78f19321476 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,3 +1,4 @@
+[graph]
 targets = [
     { triple = "x86_64-unknown-linux-musl" },
     { triple = "x86_64-pc-windows-msvc" },
@@ -5,12 +6,8 @@ targets = [
 ]
 
 [licenses]
-unlicensed = "deny"
+version = 2
 allow = ["MIT", "Apache-2.0", "Apache-2.0 WITH LLVM-exception"]
-deny = ["AGPL-1.0", "AGPL-3.0"]
-copyleft = "warn"
-allow-osi-fsf-free = "either"
-default = "deny"
 confidence-threshold = 0.8
 exceptions = []
 private = { ignore = false, registries = [] }
@@ -37,7 +34,6 @@ deny = [
 ]
 
 skip = [
-    { name = "tracing-log", version = "0.1.3" },
     # wasmer 0.17 and wasmtime 0.17 uses older versions of some crates
     { name = "generic-array", version = "=0.12.4" },
 
@@ -66,7 +62,6 @@ skip = [
     { name = "object", version = "=0.30.4" },
     { name = "memoffset", version = "=0.6.5" },
     { name = "memoffset", version = "=0.8.0" },
-    { name = "linux-raw-sys", version = "=0.3.8" },
     { name = "addr2line", version = "=0.19.0" },
     { name = "gimli", version = "=0.27.2" },
 
@@ -89,13 +84,8 @@ skip = [
     { name = "windows_x86_64_msvc", version = "=0.36.1" },
 
     # old version of rustix, wasmtime, is-terminal, etc.
-    { name = "rustix", version = "0.36.6" },
-    { name = "rustix", version = "0.37.20" },
-    { name = "linux-raw-sys", version = "0.1.4" },
     { name = "windows-sys", version = "=0.42.0" },
-    { name = "windows-sys", version = "=0.45.0" },
     { name = "windows_x86_64_msvc", version = "=0.42.2" },
-    { name = "windows-targets", version = "=0.42.1" },
 
     # ed25519-dalek uses older versions of rand and rand_core
     { name = "rand_core", version = "=0.5.1" },
@@ -116,9 +106,6 @@ skip = [
     { name = "rustc_version", version = "=0.2.3" },
     { name = "errno", version = "=0.2.8" },
 
-    # paperclip-macros, strum_macros, walrus-macro depend on this while clap3.1.6 uses heck=0.4.0
-    { name = "heck", version = "=0.3.3" },
-
     # Bolero requires a newer version and the rest of the ecosystem hasn't caught up yet.
     { name = "hashbrown", version = "0.11.0" },
     { name = "hashbrown", version = "0.12.0" },
@@ -129,9 +116,6 @@ skip = [
     # prometheus depends on an old version of protobuf
     { name = "protobuf", version = "=2.27.1" },
 
-    # opentelemetry-otlp depends on an old version of tonic which depends on an old version of tokio-util
-    { name = "tokio-util", version = "=0.6.10" },
-
     # rust-s3 is using an old version of smartstring
     { name = "smartstring", version = "=0.2.10" },