diff --git a/deny.toml b/deny.toml
index b7d5e52b..feeb63b7 100644
--- a/deny.toml
+++ b/deny.toml
@@ -51,6 +51,7 @@ allow = [
 	"BSD-3-Clause",
 	"BSL-1.0",
 	"CC0-1.0",
+	"CDLA-Permissive-2.0",
 	"GPL-3.0-only WITH Classpath-exception-2.0",
 	"GPL-3.0-only",
 	"GPL-3.0-or-later WITH Classpath-exception-2.0",
@@ -59,13 +60,12 @@ allow = [
 	"MIT",
 	"MIT-0",
 	"MPL-2.0",
+	"NCSA",
 	"OpenSSL",
 	"Unicode-3.0",
 	"Unicode-DFS-2016",
 	"Unlicense",
 	"Zlib",
-	"NCSA",
-	"CDLA-Permissive-2.0",
 ]
 exceptions = [
 	# ring uses a custom ISC-style license