[Bug 1987640] Re: cargo: track vendored dependencies in source control file

[Launchpad Bug Tracker]

This bug was fixed in the package cargo - 0.60.0ubuntu2-0ubuntu2

---------------
cargo (0.60.0ubuntu2-0ubuntu2) kinetic; urgency=medium

  * d/control: add the XS-Vendored-Sources-Rust field (LP: #1987640)
    This allows precise tracking of vendored sources.
  * d/rules, d/control: use dh-cargo's dh-cargo-vendored-sources script.
    This ensure that the vendoring information stays up-to-date by failing
    early in the build in case of obsolete info.

 -- Simon Chopin <schopin at ubuntu.com>  Thu, 25 Aug 2022 18:51:24 +0200

** Changed in: cargo (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cargo in Ubuntu.
https://bugs.launchpad.net/bugs/1987640

Title:
  cargo: track vendored dependencies in source control file

Status in cargo package in Ubuntu:
  Fix Released

Bug description:
  We need to be able to know exactly which versions of the dependencies
  are shipped with a given cargo package. Since we're vendoring them, we
  cannot use the Built-Using field, and we should instead use a
  dedicated field, i.e. XS-Vendored-Sources-Rust as proposed there:

  https://github.com/cpaelzer/ubuntu-mir/pull/3

  For completeness, we could in addition ship the Cargo.lock in
  /usr/share/doc/cargo

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cargo/+bug/1987640/+subscriptions