Dear maintainer,

I'm about to upgrade the prost family from 0.12 to 0.13.

For your convenience,
a full upgrade of tonic has been prepared,
with all tests passing,
at https://salsa.debian.org/ncts/rust-tonic
Please feel free to adapt as you see fit.

rust-tonic currently only has one dependent, netavark,
for which I have verified that,
simply bumping versions would work,
and filed a bug noting so.

Please let me know when you are ready so I can proceed.

Here: https://people.debian.org/~ncts/rust-prost-0.13-deps/
There is a Packages file generated by `apt-ftparchive packages`.

Quoting Blair Noctis (2025-04-10 21:26:26)

That sounds like a "large or disruptive changes to unstable" which the
release team as explicitly stated is not ok during freeze, so please
refrain from doing that, or if needed then please ask the release team
for an exception.

 - Jonas

Dear RT,

(Please consider this specific issue low priority,
but I think it's useful to clarify a general question.)

prost family, target of this upgrade:

- rust-prost-build
- rust-prost-types
- rust-prost
- rust-prost-derive

Dependents:

- rust-parsec-service
- rust-parsec-interface
- rust-pprof
- rust-tonic
- rust-axum
- rust-cast-sender
- rust-prometheus-client
- netavark
- gnome-authenticator

I have prepared all of them for this upgrade.
All build and pass tests.

I regret to have not noticed this chance and prepared earlier.
But:
I argue this is not "disruptive":
Updates of the prost family only affect listed dependents.
Updates of said dependents don't introduce breaking changes.
The whole upgrade is self-contained and does not "leak" to other packages.
Also not "large":
All considered, the "blast radius" is 13 packages.
This is fairly small IMO.
All rust-* packages besides rust-tonic and rust-axum are maintained in the Rust team,
of which I'm a member, thus in the position to handle.
In rust-tonic and rust-axum,
maintained by Jonas whose words are quoted above,
the former received a prepared upgrade for the former (#1102599, this bug),
and the latter requires only a version bump (#1102597).
netavark is maintained by Reinhard Tartler (siretart),
and gnome-authenticator by Jeremy Bícha (jbicha),
both also requiring only a version bump,
and both gave approval (netavark #1102598, g-a on IRC).
This is a fairly small circle.

So:
If all packages affected are handled ("self-contained"),
the blast radius is rather small,
and I have the go from all affected maintainers,
is it still considered large/disruptive?

Thanks.

Btw, when asked on IRC,
Ramacher said it depends on the size of debdiffs,
so here they are:
https://people.debian.org/~ncts/rust-prost-0.13-affected-debdiffs/
(Cargo.lock stripped as it's basically dead weight)

Hi Blair,


This is indeed good.


In transition context, we generally consider "small" when numbers are in
the low single digit. Otherwise we'd want to be involved/informed. That
always true, but more so during the transition freeze of course. By the
way, our definition of transition is broader than the classical
C-library transition, and covers changes to packages that require
changes to or rebuilds of other packages.


That's obviously also good.


It's at least against the spirit of the freeze, see our definition of
transition above.


If you want to request an exception, please file a bug and attach
debdiffs to the report. That way they are stored in the BTS. Having said
that, the size of those debdiffs don't look good. That's not really
reviewable. So you better have a good explanation of why the new version
is so much better than the current version in trixie. Otherwise consider
this request as just too late.

Paul

Hi Paul,

Thanks for the explanation and clarification.
Especially the "low single digit" one.
This is the main point of confusion here, I think.
I can't give a strong enough argument of "why the new version is so much better",
other than "it fixes some problems (*shows upstream changelog*)",
so it's probably not that important,
thus not worth an exception.

Thanks for the review!

As time passes, both upstreams went a version further to 0.14.
I've thus updated my fork of rust-tonic packaging at
https://salsa.debian.org/ncts/rust-tonic
to target them.

For your convenience, dependencies are uploaded to
https://people.debian.org/~ncts/transitions/rust-prost-stack-0.14/
so you can pull them and verify the build.
My build and autopkgtest logs of rust-tonic are also there.

Note this is part of a larger transition for the prost stack to 0.14.
It would be nice if you could grant me the permission to upload this one,
so it could be closely coordinated.

Quoting Blair Noctis (2025-10-26 15:41:32)

You're welcome!

 - Jonas

-> Jonas Smedegaard <dr@jones.dk>, 2025-10-29T17:47:42+0100 ->

Thanks! (It might need a little while though)

(...)

Just so you know, the prost transition is now under way and I plan to upgrade
tonic soon.

Quoting Blair Noctis (2026-07-29 16:53:32)

Excellent!

 - Jonas

It now builds. See https://salsa.debian.org/ncts/rust-tonic.

Note that I only did it for 0.14.5.

0.14.6 happened after upstream moved to https://github.com/grpc/grpc-rust and a
per-crate-tag release model, which means a new source package and potential
need for change in packaging handling, and I can't quite afford it when atuin
has already stalled for over a quarter, in part waiting for the prost and tonic
stacks to transition.

Please let me know if you would like anything be changed.

We believe that the bug you reported is fixed in the latest version of
rust-tonic, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1102599@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Smedegaard <dr@jones.dk> (supplier of updated rust-tonic package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 14 Aug 2026 09:36:39 +0200
Source: rust-tonic
Architecture: source
Version: 0.14.5+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Jonas Smedegaard <dr@jones.dk>
Changed-By: Jonas Smedegaard <dr@jones.dk>
Closes: 1102599
Changes:
 rust-tonic (0.14.5+dfsg-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release(s);
     closes: bug#1102599, thanks to Blair Noctis
 .
   [ Jonas Smedegaard ]
   * update git-buildpackage config:
     + stop superfluously filter out .git* files
   * declare compliance with Debian Policy 4.7.4
   * bump project versions in virtual packages and autopkgtests
   * update and unfuzz patches
   * update copyright info: update coverage
   * provide and autopkgtest tonic features
     deflate tls-connect-info tls-ring;
     stop provide or autopkgtest tonic features prost tls tls-root,
     or tonic-build feature prost,
     dropped upstream;
     update (build-, autopkgtest-)dependencies
   * skip failing tests in generated code,
     and drop workarounds for other seemingly obsolete test failures
Checksums-Sha1:
 f936647aabc546269170c9d55819db458300b99a 3305 rust-tonic_0.14.5+dfsg-1.dsc
 96a9e4d121433a72eb67c8f3e0ec79cf0ae080be 916700 rust-tonic_0.14.5+dfsg.orig.tar.xz
 e505d333be63b0e0bf223ebb436db5890c22f572 10984 rust-tonic_0.14.5+dfsg-1.debian.tar.xz
 c0f3039bad5a494f51599abec5f7844b8c4834f7 29009 rust-tonic_0.14.5+dfsg-1_amd64.buildinfo
Checksums-Sha256:
 8837bdc81d6d3f4f3c19d8e6ac65098badd7395fd7034420033abf92d67b874f 3305 rust-tonic_0.14.5+dfsg-1.dsc
 17a366a5b79bf4a87dfd8a3cf71ae38dd816827ad73f4e6520cb4a12739aaf54 916700 rust-tonic_0.14.5+dfsg.orig.tar.xz
 9489e6af9a27a51372a2505bd310da935894166f8500f238438bd3f9fc1c70e0 10984 rust-tonic_0.14.5+dfsg-1.debian.tar.xz
 e4855f813387a222fceeef50a4f5fd275102c251b7550adf3df74b533cb8cdd1 29009 rust-tonic_0.14.5+dfsg-1_amd64.buildinfo
Files:
 96860e710ffa43335dbf22e2630f3d13 3305 rust optional rust-tonic_0.14.5+dfsg-1.dsc
 ef92293785b2be59569a07cadeaeab8a 916700 rust optional rust-tonic_0.14.5+dfsg.orig.tar.xz
 3ab9e9f1cda760f938d94519d7a02761 10984 rust optional rust-tonic_0.14.5+dfsg-1.debian.tar.xz
 209117d5aaed8633b9bab5bd3f660352 29009 rust optional rust-tonic_0.14.5+dfsg-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJABAEBCgAqFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmp+1U4MHGRyQGpvbmVz
LmRrAAoJECx8MUbBoAEhRIAP/3C8kiyfXIBQ90eGO0dNE2wIJ732qobI17V2CaD0
GLM40VtQbN/sBycPLNWH1bRudxyOdBrrh64VlTR2/S4k9GyXUgd+cpJSWV0fsp6R
hCqLkwJ0WVEJ3ACOK/weJoGAbVnAN/mWkf8VW9Ar0vzSIdQtjipZOzAt6NANwbsr
LnhPT4W3Vf38Jk9vVeQT9rdsSeW3ra6gjb/1VMFL6ITBjlmZ0OtyUHrlMhX/Xvmt
Mmk79TFIJfIA+eXY9DID/9IMqQVgFJCYWHDnPoBQ3GHs7qJpXmfPL1DuQI+VOCOL
X6hednPmVSchA1OEtT9iOvUiTT+BWQjy5nt4yv9mm6ERbgpqUAZD+x3X0DGv8XF6
gye2f4fHM3fy9OlD+xsa/kN5whO8JXfttE3lGtMWPBqCqm0VhGRqBZZoky6aA7Lx
0nvMKWBe8p3K8SUUcBgUg2nNwsPiEZbRXL3N4EhBTKmYSVOEdTO+cO0tMbthcHDW
sZXPMwqjH/7o/KmsZINNqa9xcIyKASjegvTm7Eajm07qjcaKRQvLGq+sQVy9/2Zs
vvBMAykjQNLBfmLp5lAEQ4WINddZuejy5sZmmo88UVCBsYOU1rTHJtcXCRTn8VMg
RdexACuJ6UIxN+n+iQUJVadbSwCBl93W/JJuW37svd0yhAS/mCwBktaZley/l9Er
YiZU
=9o1y
-----END PGP SIGNATURE-----