[From nobody Wed Jul 22 14:47:07 2026
Received: (at submit) by bugs.debian.org; 6 Mar 2021 00:00:41 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
 (2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-21.1 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,HAS_PACKAGE,
 MURPHY_DRUGS_REL8,PGPSIGNATURE,SPF_HELO_NONE,SPF_PASS,TXREP
 autolearn=ham autolearn_force=no
 version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 150; neutral, 160; spammy,
 0. spammytokens: hammytokens:0.000-+--HAutocrypt:keydata,
 0.000-+--HAutocrypt:addr, 0.000-+--HAutocrypt:mutual,
 0.000-+--HAutocrypt:prefer-encrypt, 0.000-+--H*ct:pgp-sha256
Return-path: &lt;dkg@fifthhorseman.net&gt;
Received: from che.mayfirst.org ([2001:470:1:116::7]:42701)
 by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.92) (envelope-from &lt;dkg@fifthhorseman.net&gt;)
 id 1lIKN7-0005A3-2W
 for submit@bugs.debian.org; Sat, 06 Mar 2021 00:00:41 +0000
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple;
 d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019;
 t=1614988831; h=from : to : subject : date : message-id : mime-version
 : content-type : from;
 bh=wTF0fehYCt44CMewxc0+UlgSoLVo5p60MuJ6G/qn120=;
 b=Nrh7omJMvO81Ej/sZH97k+RMeTLAKvP53tXl05RBaZJZbIhS2nIfWx9ululI3cOWMSE8a
 tgt3923F3jUwCblCw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net;
 i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1614988831; h=from : to
 : subject : date : message-id : mime-version : content-type : from;
 bh=wTF0fehYCt44CMewxc0+UlgSoLVo5p60MuJ6G/qn120=;
 b=DnUfCrL87DAhoR7eS2xF/AO1+ZDeFdKexKq6HbWHrMzrEcraE3BrxHwDO00NOeoZRDW0P
 qit4x0YGCeZsrNG0wa8RkrW1qxY03VcoVS4eZIsZg3J0SXV4rZPv/ff4U3M7zfuCjQhRxLI
 5trT6GwebFnHpJ2TpsymRWLv1gQbJUu0hsmjWcZ4KmJqrV0O7g24oIIMtkcg3we4ELqnZ0M
 FjFfE9GLm8a4CbKoXC4LQxyYeXWqgKZ3hlXkBx1Mqj0k4LPYKM5glP8t5cLm73im7wzgH7f
 cRVpiB5Oxq+UKE9YneOtoiZPhWLkiRy7AqJE/NSIA+ZFRj4fJhBWd6HTdWug==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
 (No client certificate requested)
 by che.mayfirst.org (Postfix) with ESMTPSA id 69798F9A6
 for &lt;submit@bugs.debian.org&gt;; Fri,  5 Mar 2021 19:00:30 -0500 (EST)
Received: by fifthhorseman.net (Postfix, from userid 1000)
 id 5231620572; Fri,  5 Mar 2021 19:00:20 -0500 (EST)
From: Daniel Kahn Gillmor &lt;dkg@fifthhorseman.net&gt;
To: submit@bugs.debian.org
Subject: debcargo: should ignore build-dependencies that are marked
 cfg(target_env = &quot;msvc&quot;)
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata=
 mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf
 FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl
 cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh
 BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su
 G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u
 bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh
 dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI
 ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4
 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE
 AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ
 BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+
 nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He
 VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+
 jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N
 stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh
 BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk
 eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH
 QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA
 CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b
 J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX
 mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR
 fRxL7Z37WZXoH8AH
Date: Fri, 05 Mar 2021 19:00:19 -0500
Message-ID: &lt;87mtvhb17w.fsf@fifthhorseman.net&gt;
MIME-Version: 1.0
Content-Type: multipart/signed; boundary=&quot;=-=-=&quot;;
 micalg=pgp-sha256; protocol=&quot;application/pgp-signature&quot;
Delivered-To: submit@bugs.debian.org

--=-=-=
Content-Type: text/plain

Package: debcargo
Version: 2.4.4-1
Control: affects -1 src:rust-nettle-sys

in Cargo.toml from nettle-sys 2.0.5, we see:

[target.&quot;cfg(target_env = \&quot;msvc\&quot;)&quot;.build-dependencies.vcpkg]
version = &quot;0.2.9&quot;


But debcargo 2.4.4 translates that into actual Build-Depends: and
Depends: fields, despite the target environment not being the MSVC
compiler.  It generates:

-----
Source: rust-nettle-sys
Section: rust
Priority: optional
Build-Depends: debhelper (&gt;= 12),
 dh-cargo (&gt;= 24),
 cargo:native &lt;!nocheck&gt;,
 rustc:native &lt;!nocheck&gt;,
 libstd-rust-dev &lt;!nocheck&gt;,
 librust-bindgen-0.55-dev &lt;!nocheck&gt; | librust-bindgen-0.54-dev &lt;!nocheck&gt; | librust-bindgen-0.53-dev (&gt;= 0.53.1-~~) &lt;!nocheck&gt;,
 librust-pkg-config-0.3+default-dev &lt;!nocheck&gt;,
 librust-vcpkg-0.2+default-dev (&gt;= 0.2.9-~~) &lt;!nocheck&gt;,
 nettle-dev (&gt;= 3.5.1~~) &lt;!nocheck&gt;,
 llvm
Maintainer: Debian Rust Maintainers &lt;pkg-rust-maintainers@alioth-lists.debian.net&gt;
Uploaders:
 Daniel Kahn Gillmor &lt;dkg@fifthhorseman.net&gt;,
 kpcyrd &lt;git@rxv.cc&gt;
Standards-Version: 4.5.1
Vcs-Git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/nettle-sys]
Vcs-Browser: https://salsa.debian.org/rust-team/debcargo-conf/tree/master/src/nettle-sys
Rules-Requires-Root: no

Package: librust-nettle-sys-dev
Architecture: any
Multi-Arch: same
Depends:
 ${misc:Depends},
 librust-bindgen-0.55-dev | librust-bindgen-0.54-dev | librust-bindgen-0.53-dev (&gt;= 0.53.1-~~),
 librust-pkg-config-0.3+default-dev,
 librust-vcpkg-0.2+default-dev (&gt;= 0.2.9-~~),
 nettle-dev (&gt;= 3.5.1~~)
Provides:

-----

So, i'll probably patch this out of the upstream sources for now, but
debcargo should have handled this more cleanly.

       --dkg

--=-=-=
Content-Type: application/pgp-signature; name=&quot;signature.asc&quot;

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQQttUkcnfDcj0MoY88+nXFzcd5WXAUCYELGFAAKCRA+nXFzcd5W
XDy+AQC0v1Kp9Amr0s2oV0LVSe5EAt//TRcatnXzzOzqs3tg1QD+I0v8xbz1EDyK
7Keeu6QAPw05s+04y9kiDqvfAUaa7wg=
=CWxN
-----END PGP SIGNATURE-----
--=-=-=--
]