Package: librust-rustls-native-certs-dev
Version: 0.6.3-5
Severity: important

Hi Jonas,

thanks for your recent upload of rust-rustls-native-certs. Looking at https://tracker.debian.org/pkg/rust-rustls-native-certs, it appears that it would benefit from additional Breaks relationships to help the migration tools. Essentially, rust-ureq and librust-ureq-dev need to migrate with rust-rustls-pemfiles and a bunch of other packages together.

Thanks for considering
-rt


-- System Information:
Debian Release: trixie/sid
APT prefers testing
APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64)

Kernel: Linux 6.12.17-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages librust-rustls-native-certs-dev depends on:
pn librust-openssl-probe-0.1+default-dev <none>
pn librust-rustls-pemfile-1+default-dev <none>
pn librust-rustls-pemfile-2+default-dev <none>
pn librust-rustls-pki-types-1+default-dev <none>

librust-rustls-native-certs-dev recommends no packages.

Versions of packages librust-rustls-native-certs-dev suggests:
ii ca-certificates 20241223

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Control: tags -1 moreinfo

Hi Reinhard,

Quoting Reinhard Tartler (2025-03-24 23:31:08)

thanks for your recent upload of rust-rustls-native-certs. Looking at https://tracker.debian.org/pkg/rust-rustls-native-certs, it appears
that it would benefit from additional Breaks relationships to help the migration tools. Essentially, rust-ureq and librust-ureq-dev need to
migrate with rust-rustls-pemfiles and a bunch of other packages
together.

I disagree: rust-rustls-native-certs does not depend on rust-ureq, so
there is nothing meaningful to break.

If debci is caught in a circular build-dependency loop, then that loop
needs to be broken somewhere meaningful - or debci simply bypassed.

Please do elaborate, if you think I am mistaken and
rust-rustls-native-certs really does directly (not only transitively)
depend or build-depend or autopkgtest-depend on rust-ureq.

- Jonas

--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones

[x] quote me freely [ ] ask before reusing [ ] keep private

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 2025-03-25 02:10, Jonas Smedegaard wrote:

Control: tags -1 moreinfo

Hi Reinhard,

Quoting Reinhard Tartler (2025-03-24 23:31:08)

thanks for your recent upload of rust-rustls-native-certs. Looking at
https://tracker.debian.org/pkg/rust-rustls-native-certs, it appears
that it would benefit from additional Breaks relationships to help the
migration tools. Essentially, rust-ureq and librust-ureq-dev need to
migrate with rust-rustls-pemfiles and a bunch of other packages
together.

I disagree: rust-rustls-native-certs does not depend on rust-ureq, so
there is nothing meaningful to break.

If debci is caught in a circular build-dependency loop, then that loop
needs to be broken somewhere meaningful - or debci simply bypassed.

Please do elaborate, if you think I am mistaken and
rust-rustls-native-certs really does directly (not only transitively)
depend or build-depend or autopkgtest-depend on rust-ureq.

No, it is the other way around. rust-ureq depends on librust-rustls-native-certs-0.6+default-dev
(cf.
https://sources.debian.org/src/rust-ureq/2.12.1-5/debian/control/#L23)
and therefore
debci schedules tests for rust-ureq in testing with the rust-rustls-native-certs package from
unstable. This evidently fails, and has been addressed in the rust-ureq
package in unstable.

However, neither debci nor britney detect that situation by themselves.
The most straight-forward
way to resolve is by adding Breaks relationships as suggested above.

Please let me know if this makes sense.
-rt

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Quoting Reinhard Tartler (2025-03-25 14:11:48)

On 2025-03-25 02:10, Jonas Smedegaard wrote:

Control: tags -1 moreinfo

Hi Reinhard,

Quoting Reinhard Tartler (2025-03-24 23:31:08)

thanks for your recent upload of rust-rustls-native-certs. Looking at
https://tracker.debian.org/pkg/rust-rustls-native-certs, it appears
that it would benefit from additional Breaks relationships to help the
migration tools. Essentially, rust-ureq and librust-ureq-dev need to
migrate with rust-rustls-pemfiles and a bunch of other packages
together.

I disagree: rust-rustls-native-certs does not depend on rust-ureq, so
there is nothing meaningful to break.

If debci is caught in a circular build-dependency loop, then that loop needs to be broken somewhere meaningful - or debci simply bypassed.

Please do elaborate, if you think I am mistaken and rust-rustls-native-certs really does directly (not only transitively) depend or build-depend or autopkgtest-depend on rust-ureq.

No, it is the other way around. rust-ureq depends on librust-rustls-native-certs-0.6+default-dev
(cf.
https://sources.debian.org/src/rust-ureq/2.12.1-5/debian/control/#L23)
and therefore
debci schedules tests for rust-ureq in testing with the rust-rustls-native-certs package from
unstable. This evidently fails, and has been addressed in the rust-ureq package in unstable.

However, neither debci nor britney detect that situation by themselves.
The most straight-forward
way to resolve is by adding Breaks relationships as suggested above.

Please let me know if this makes sense.

Makes sense. Thanks.

- Jonas

--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones

[x] quote me freely [ ] ask before reusing [ ] keep private --==============12669236960427700=MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Description: signature
Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

-----BEGIN PGP SIGNATURE-----

wsG7BAABCgBvBYJn4s8UCRAsfDFGwaABIUcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmdu193vQchUKFF0771hvTiO2mPw8MCD3x/X7Ks9AOFd OhYhBJ/j6cNmkaaf9TzGhCx8MUbBoAEhAAAX0RAAmdTCTT2oP/9Kk7AopZakO8y/ Mw4TyzaVAPZOEuV3zerSIOJTGWaOmh2TTsVOjQH4F7zTngbFMDC1fax8SA9H3tV3 9bdSXbmfL9xEojz7d9l2lhhG0rG6/D0xGJQmI8XTYAGuzu71CLV8FTwHmdKDSHCS Efb10Gh6RO41UhjMU8dwW4EpGBciREg9jNYddGZFTGW3NmRoLLLnO0JVrAQnO7Sq 3hKawtZ5T9keSR9T1okZChOADFjO1z4FCnX3KPscL1UQutP2gENQNIeUeCxyMMOn wIiEkcC2iGk+NyJC5VHwx+IjCL5Pi0zyPTaT+ZkEwyjzEBJtw6gh1/2zMUFBWB4D 8bCRVh9a1ZLJRoK3/96c3Y9zemOgca6Hd5mwzom4