diff --git a/cedar-wasm/Cargo.toml b/cedar-wasm/Cargo.toml
index cf6d61e79..ca645fe81 100644
--- a/cedar-wasm/Cargo.toml
+++ b/cedar-wasm/Cargo.toml
@@ -39,6 +39,5 @@ cool_asserts = "2.0"
 
 [build-dependencies]
 cargo-lock = "9.0.0"
-# Lock `url` (dependencies of cargo-lock) to 2.5.0 until we know if Unicode 3.0 license is ok.
-url = "=2.5.0"
+url = "2.5.4"
 itertools = "0.13.0"
diff --git a/deny.toml b/deny.toml
index a96ed2c9a..b7683d635 100644
--- a/deny.toml
+++ b/deny.toml
@@ -2,7 +2,7 @@
 unlicensed = "deny"
 copyleft = "deny"
 default = "deny"
-unused-allowed-license = "deny"
+unused-allowed-license = "allow"
 confidence-threshold = 0.95
 allow = [
     "Apache-2.0",
@@ -10,4 +10,5 @@ allow = [
     "ISC",
     "CC0-1.0",
     "Unicode-DFS-2016",
+    "Unicode-3.0",
 ]