Package: rust-yamux Version: 0.13.9+ds-1 Tags: patch We plan to update the rust-rand package to version 0.10 soon and introduce a rust-rand-0.8 semver-suffix package. rust-yamux's debian dependencies allow the new version but it's cargo dependencies do not.
Looking at the code it seems rust-yamux only uses the rand::random function from the rand crate, which is unchanged in 0.10, so I think the sensible thing to do is simply to widen the version range on the cargo dependency.
diff -Nru rust-yamux-0.13.9+ds/debian/changelog rust-yamux-0.13.9+ds/debian/changelog --- rust-yamux-0.13.9+ds/debian/changelog 2026-03-02 10:47:31.000000000 +0000 +++ rust-yamux-0.13.9+ds/debian/changelog 2026-03-15 22:17:14.000000000 +0000 @@ -1,3 +1,10 @@ +rust-yamux (0.13.9+ds-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Accept rand 0.10. + + -- Peter Michael Green <[email protected]> Sun, 15 Mar 2026 22:17:14 +0000 + rust-yamux (0.13.9+ds-1) unstable; urgency=medium [ upstream ] diff -Nru rust-yamux-0.13.9+ds/debian/patches/2001_rand.patch rust-yamux-0.13.9+ds/debian/patches/2001_rand.patch --- rust-yamux-0.13.9+ds/debian/patches/2001_rand.patch 2025-10-02 18:37:40.000000000 +0000 +++ rust-yamux-0.13.9+ds/debian/patches/2001_rand.patch 2026-03-15 22:16:53.000000000 +0000 @@ -1,4 +1,4 @@ -Description: accept older minor version of crate rand +Description: accept older and newer minor version of crate rand Author: Jonas Smedegaard <[email protected]> Forwarded: not-needed Last-Update: 2025-10-02 @@ -11,7 +11,7 @@ nohash-hasher = "0.2" parking_lot = "0.12" -rand = "0.9.0" -+rand = ">= 0.8.5, <= 0.9" ++rand = ">= 0.8.5, <= 0.10" static_assertions = "1" pin-project = "1.1.0" web-time = "1.1.0"
