Bug#1049413: librsvg: Update to 2.56 or later

[Matthias Geiger]

On 15.08.23 14:25, Jeremy Bícha wrote:
> Source: librsvg
> Version: 2.54.7+dfsg-2
> Severity: wishlist
> X-Debbugs-CC: werdahias at riseup.net
>
> It would be nice if we updated librsvg to 2.56 (GNOME 44 series) or
> 2.58 (GNOME 45 series).
>
> But 2.56 drops the vendored Rust crate dependencies, forcing us to
> either revendor librsvg or use the Debian packaged crates. That would
> complicate the packaging since it would tie librsvg into the Rust GTK
> transitions and other Rust library transitions. It's possible; just
> not sure we want to do it.
>
> Matthias (CC'd) did some work earlier on this; I believe there are a
> few more Rust crates that would need to be packaged if we wanted to
> test this more.
>
> See also these related librsvg bugs:
> https://bugs.debian.org/1017892
> https://bugs.debian.org/1017906
>
> One extra detail: my understanding is that current Ubuntu best
> practice is to vendor all Rust crates used as dependencies for
> libraries and apps in Ubuntu main (which includes librsvg). This is
> mentioned at https://github.com/canonical/ubuntu-mir
>
> Alternatively, we could ask the librsvg developers to revendor librsvg.
>
> Thank you,
> Jeremy Bícha

Revisiting: After the recent gtk-rs upload building only with debian 
tooling/ packages might not be that far off.

Crates in debian  that need updating:

- rctree

- data-url

crates that need packaging from scratch:

- rawpointer

- matrixmultiply

- nalgebra

- nalgebra-macros

- simba

- lopdf

- yeslogic-fontconfig-sys


I tend towards packaging all those. Since gtk3-rs is only getting 
security updates upstream future gtk-rs transitions won't be as much 
work. There's already a few GUI programs tied into the stack so tying 
librsvg2 in

doesn't seem too bad imo. re-vendoring the tarball with cargo vendor is 
also an option if you prefer that. The crate librsvg does not get built 
from source yet; I haven't looking into how to do that, but it'll be needed

eventually to enable svg rendering support in Loupe. Let me know if you 
want me to start packaging those missing crates.

best,

-- 
Matthias Geiger <werdahias>
Debian Maintainer
"Freiheit ist immer Freiheit des anders Denkenden" -- Rosa Luxemburg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x18BD106B3B6C5475.asc
Type: application/pgp-keys
Size: 4036 bytes
Desc: OpenPGP public key
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20231007/1578dbec/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20231007/1578dbec/attachment-0001.sig>