#1118494 rust-object: please upgrade to v0.37

#1118494#5
Date:
2025-10-21 11:26:52 UTC
From:
To:
Please upgrade crate object to v0.37.
-----BEGIN PGP SIGNATURE-----
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=/Rfa
-----END PGP SIGNATURE-----

#1118494#16
Date:
2026-06-08 11:22:35 UTC
From:
To:
Hi,

A personal note first, since I'm a fairly new face here. I've spent the last several days on this quite intensively, and I've found it genuinely intricate, far more so than I expected when I started. I'm still inexperienced with debcargo and Debian packaging, so I've tried hard to follow the team's conventions and to actually understand why each step is what it is, rather than just going through the motions. I hope I've gotten it right, and I'd genuinely welcome corrections where I haven't. My motivation is twofold: I have a downstream package that needs ruzstd 0.8, but I also want to learn to contribute here properly and durably, not just push one thing through.

What I've prepared, sbuild-verified on unstable (unshare) and installability-checked against the archive, is a single debcargo-conf change covering the whole stack plus every reverse dependency in the archive that hard-pins an old version (this also covers #1125883, ruzstd 0.8):

- Stack updated to ruzstd 0.8.3, gimli 0.32.3, object 0.37.3, addr2line 0.25.1, backtrace 0.3.76
- Reverse deps relaxed to the new versions: aya, aya-obj, implib, elfx86exts (object 0.37); framehop (gimli 0.32); xh (ruzstd 0.8)

Two things worth flagging from the work:

- backtrace 0.3.76 wants cpp_demangle 0.5, which isn't in the archive. Since addr2line still uses 0.4, I relaxed backtrace back to cpp_demangle 0.4 rather than pull a new crate into the transition.
- xh needed a one-line source change: ruzstd 0.8 moved FrameDecoder/StreamingDecoder into the decoding module.

The floaters (wasmtime, walrus, sccache, espflash, repro-env, dwarf2sources) build-depend on the unversioned virtuals, so they should only need a give-back at migration.

I've opened this as MR !1168 in debcargo-conf (https://salsa.debian.org/rust-team/debcargo-conf/-/merge_requests/1168). I notice the request has been open for a while and, from what I could find, no one else is currently working on the stack. I can't upload, so it would need a sponsor, and I'm happy to pass the work on in whatever way proves most amenable.

Greg Lamberson

#1118494#21
Date:
2026-06-09 12:28:05 UTC
From:
To:
The object 0.37 upgrade is prepared in debcargo-conf MR !1168:
https://salsa.debian.org/rust-team/debcargo-conf/-/merge_requests/1168

It bumps object to 0.37.3 as part of the wider backtrace stack
(gimli 0.32, addr2line 0.25, ruzstd 0.8, backtrace 0.3.76) and relaxes
every reverse dependency in the archive that hard-pins object 0.36
(aya, aya-obj, implib, elfx86exts) to 0.37, so the transition is
self-contained. All packages are sbuild-verified against unstable, and
the resulting binaries were checked for installability against the
archive. plugwash has offered to verify and upload it once the current
semver transitions settle.

Greg Lamberson