[Pkg-rust-maintainers] Bug#1135095: trixie-pu: package rust-xh/0.24.0-1

[Blair Noctis]

Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: rust-xh at packages.debian.org, ncts at debian.org
Control: affects -1 + src:rust-xh
Control: block 1131007 by -1
User: release.debian.org at packages.debian.org
Usertags: pu

Dear Release Team,

Due to #1131007, I'd like to request a trixie-pu for src:rust-xh, adding a
Recommends for an effective dependency.

[ Reason ]

#1131007 reported that, in a fresh debian:slim container, xh(1) from
src:rust-xh would produce a confusing "OpenSSL error" even when fetching
non-HTTPS URLs (`xh https://example.com`).

The culprit is that the reqwest crate used to make HTTP(S) requests
unconditionally initiates a TLS context, which requires loading certificates,
essentially mandating a certificate bundle.

In anticipation that the user might install other certificates, it's set to
Recommends rather than Depends.

[ Impact ]

If this update doesn't land, users would continue to see the confusing error
unless manually installing certificates.

[ Tests ]

A manual test of installing ca-certificates alongside xh solves the issue.

[ Risks ]

The change is trivial; only package metadata is touched.

The alternative would be to require users to install ca-certificates alongside
xh in slim containers, which is arguably the sensible thing to do if they ever
wish to access websites of today, but still incorrect.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]

Add Recommends: ca-certificates.

[ Other info ]

None.

--
    ,Sdrager
Blair Noctis

🇵🇸
-------------- next part --------------
diff -Nru rust-xh-0.24.0/debian/changelog rust-xh-0.24.0/debian/changelog
--- rust-xh-0.24.0/debian/changelog	2025-02-18 14:59:01.000000000 +0000
+++ rust-xh-0.24.0/debian/changelog	2026-04-27 14:01:00.000000000 +0000
@@ -1,3 +1,9 @@
+rust-xh (0.24.0-1+deb13u1) trixie; urgency=medium
+
+  * Add Recommends: ca-certificates, Closes: #1131007
+
+ -- Blair Noctis <ncts at debian.org>  Mon, 27 Apr 2026 14:01:00 +0000
+
 rust-xh (0.24.0-1) unstable; urgency=medium
 
   * Package xh 0.24.0 from crates.io using debcargo 2.7.7
diff -Nru rust-xh-0.24.0/debian/control rust-xh-0.24.0/debian/control
--- rust-xh-0.24.0/debian/control	2025-02-18 14:59:01.000000000 +0000
+++ rust-xh-0.24.0/debian/control	2026-04-27 14:01:00.000000000 +0000
@@ -3,7 +3,8 @@
 Priority: optional
 Build-Depends: debhelper-compat (= 13),
  dh-sequence-cargo,
- cargo:native,
+ dh-shell-completions
+Build-Depends-Arch: cargo:native,
  rustc:native (>= 1.74.0),
  libstd-rust-dev,
  librust-anyhow-1+default-dev (>= 1.0.38-~~),
@@ -61,8 +62,7 @@
  librust-time-0.3+default-dev (>= 0.3.16-~~),
  librust-tracing-0.1+log-dev (>= 0.1.40-~~),
  librust-unicode-width-0.1+default-dev (>= 0.1.9-~~),
- librust-url-2+default-dev (>= 2.2.2-~~),
- dh-shell-completions
+ librust-url-2+default-dev (>= 2.2.2-~~)
 Maintainer: Debian Rust Maintainers <pkg-rust-maintainers at alioth-lists.debian.net>
 Uploaders:
  Blair Noctis <ncts at debian.org>
@@ -75,13 +75,13 @@
 
 Package: xh
 Architecture: any
-Multi-Arch: allowed
 Depends:
  ${misc:Depends},
  ${shlibs:Depends},
  ${cargo:Depends}
 Recommends:
- ${cargo:Recommends}
+ ${cargo:Recommends},
+ ca-certificates
 Suggests:
  ${cargo:Suggests}
 Provides:
diff -Nru rust-xh-0.24.0/debian/copyright.debcargo.hint rust-xh-0.24.0/debian/copyright.debcargo.hint
--- rust-xh-0.24.0/debian/copyright.debcargo.hint	2025-02-18 14:59:01.000000000 +0000
+++ rust-xh-0.24.0/debian/copyright.debcargo.hint	2026-04-27 14:01:00.000000000 +0000
@@ -21,8 +21,8 @@
 
 Files: debian/*
 Copyright:
- 2025 Debian Rust Maintainers <pkg-rust-maintainers at alioth-lists.debian.net>
- 2025 Blair Noctis <ncts at debian.org>
+ 2025-2026 Debian Rust Maintainers <pkg-rust-maintainers at alioth-lists.debian.net>
+ 2025-2026 Blair Noctis <ncts at debian.org>
 License: MIT
 
 License: MIT
diff -Nru rust-xh-0.24.0/debian/debcargo.toml rust-xh-0.24.0/debian/debcargo.toml
--- rust-xh-0.24.0/debian/debcargo.toml	2025-02-18 14:59:01.000000000 +0000
+++ rust-xh-0.24.0/debian/debcargo.toml	2026-04-27 14:01:00.000000000 +0000
@@ -14,3 +14,6 @@
 and friendly frontend for curl, with a focus on improved performance. 
 It's not a curl frontend itself, however.
 '''
+
+# lacking certificates would cause a cryptic "OpenSSL error".
+recommends = ['ca-certificates']