diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 687487e..c0b03d1 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -59,6 +59,19 @@ jobs:
         with:
           reporter: 'github-pr-check'
           github_token: ${{ secrets.GITHUB_TOKEN }}
+  semver:
+    runs-on: ubuntu-latest
+    name: semver
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: true
+      - name: Install stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt
+      - name: cargo-semver-checks
+        uses: obi1kenobi/cargo-semver-checks-action@v2
   doc:
     # run docs generation on nightly rather than stable. This enables features like
     # https://doc.rust-lang.org/beta/unstable-book/language-features/doc-cfg.html which allows an
@@ -71,10 +84,10 @@ jobs:
           submodules: true
       - name: Install nightly
         uses: dtolnay/rust-toolchain@nightly
-      - name: cargo doc
-        run: cargo doc --no-deps --all-features
-        env:
-          RUSTDOCFLAGS: --cfg docsrs
+      - name: Install cargo-docs-rs
+        uses: dtolnay/install@cargo-docs-rs
+      - name: cargo docs-rs
+        run: cargo docs-rs
   deny:
     runs-on: ubuntu-latest
     name: cargo-deny
diff --git a/deny.toml b/deny.toml
index d25d512..89d01f6 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,15 +1,16 @@
 [advisories]
-vulnerability = "deny"
-unmaintained = "warn"
-notice = "warn"
+version = 2
 ignore = []
 
 [licenses]
-unlicensed = "deny"
-allow = []
-deny = []
-copyleft = "warn"
-allow-osi-fsf-free = "either"
+version = 2
+allow = [
+    "MIT",
+    "BSD-2-Clause",
+    "CC0-1.0",
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+]
 confidence-threshold = 0.8
 
 [bans]