[Pkg-rust-maintainers] Bug#1139011: librust-bigdecimal-dev: bigdecimal depends on libm version 0.2.6; current version of libm is 0.2.15

[Georges Khaznadar]

Package: librust-bigdecimal-dev
Version: 0.4.10-1+b1
Severity: normal
X-Debbugs-Cc: georgesk at debian.org

Hello, I am trying to package cbor2 (https://tracker.debian.org/pkg/cbor2)
whose code used to be in C++ language, and is now in Rust language.

Here is an excerpt of Cargo.toml which applies to cbor2:
---------------------------------8<--------------------------
[dependencies]
bigdecimal = "0.4.10"
half = "2.7.1"
num-bigint = "*"
pyo3 = { version = "0.28.0", features = ["extension-module", "num-bigint",
"bigdecimal"] }
---------------------------------8<--------------------------

So I added packages librust-bigdecimal-dev, librust-half-dev, librust-pyo3-dev
as build-dependencies for package cbor2.

Unfortunately, the build fails, with the following message:

---------------------------------8<--------------------------
error: failed to select a version for the requirement `libm = "^0.2.6"` (locked
to 0.2.16)
candidate versions found which didn't match: 0.2.15
location searched: directory source `/usr/share/cargo/registry` (which is
replacing registry `crates-io`)
required by package `bigdecimal v0.4.10`
    ... which satisfies dependency `bigdecimal = "^0.4.10"` (locked to 0.4.10)
of package `cbor2 v0.1.0 (/build/cbor2-6.1.2/rust)`
perhaps a crate was updated and forgotten to be re-vendored?
As a reminder, you're using offline mode (--offline) which can sometimes cause
surprising resolution failures, if this error is too confusing you may wish to
retry without `--offline`.
error: `cargo metadata --manifest-path rust/Cargo.toml --format-version 1`
failed with code 101
---------------------------------8<--------------------------

Thank you for any help about this.

Best regards,                     Georges.



-- System Information:
Debian Release: forky/sid
  APT prefers stable
  APT policy: (900, 'stable'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'testing'), (50, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 7.0.7+deb14-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages librust-bigdecimal-dev depends on:
ii  librust-autocfg-dev [librust-autocfg-1+default-dev]            1.5.0-1+b1
ii  librust-libm-dev [librust-libm-0.2+default-dev]                0.2.15-1+b1
pn  librust-num-bigint-0.4+std-dev                                 <none>
ii  librust-num-bigint-dev [librust-num-bigint-0.4-dev]            0.4.6-1+b1
pn  librust-num-integer-0.1+std-dev                                <none>
ii  librust-num-integer-dev [librust-num-integer-0.1-dev]          0.1.46-2+b1
pn  librust-num-traits-0.2+std-dev                                 <none>
ii  librust-num-traits-dev [librust-num-traits-0.2-dev]            0.2.19-2+b1
pn  librust-serde-1+derive-dev                                     <none>
ii  librust-serde-dev [librust-serde-1-dev]                        1.0.228-3+b1
pn  librust-serde-json-1+alloc-dev                                 <none>
ii  librust-serde-json-dev [librust-serde-json-1+arbitrary-precis  1.0.149-1
    ion-dev]

librust-bigdecimal-dev recommends no packages.

librust-bigdecimal-dev suggests no packages.

-- no debconf information