Canonicalized args (#129)

* Update dependencies
* Change lockfile to v2
* Update krates to latest
* Change krate source type

Swap out cargo_metadata::Source for [cargo_lock::SourceId](https://docs.rs/cargo-lock/4.0.1/cargo_lock/package/source/struct.SourceId.html), as cargo_metadata::Source just got in the way.

This also changes the advisories check to remove packages that cargo_lock gathered that were filtered out, so that we don't have to handle reporting advisories for crates the user has said they don't care about.

* Add new top-level arguments
* Update CHANGELOG

CHANGELOG.md

@@ -6,6 +6,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- next-header -->
 ## [Unreleased] - ReleaseDate
+### Added
+- Added the `--manifest-path` option to specify the Cargo.toml you want to use as the context for the operation to fit with how other cargo subcommands work. Takes precedence over the (deprecated) `--context`.
+- Added the `--workspace` flag to give the user a workaround in cases where a manifest is both a package and a workspace.
+- Added the `--exclude` option to allow users to explicitly remove packages from the final crate graph.
+
+### Changed
+- The configuration used for the command is recursively searched for in parent directories starting in the same directory as the `Cargo.toml` (unless explicitly specified).
+
+### Fixed
+- Resolved [#122](https://github.com/EmbarkStudios/cargo-deny/issues/122) by pruning the packages that are checked against the advisory database to the same set used by all other checks
+
+### Deprecated
+- `--context` has been deprecated in favor of `--manifest-path`, to align cargo-deny more with all other cargo subcommands
+
 ## [0.6.2] - 2020-01-25
 ### Added
 - Resolved [#116](https://github.com/EmbarkStudios/cargo-deny/issues/116) by adding the `[licenses.default]` field, which allows you to configure how to handle licenses that don't match any other predicate