Dear Release Team,
Due to #1131007, I'd like to request a trixie-pu for src:rust-xh, adding a
Recommends for an effective dependency.
[ Reason ]
#1131007 reported that, in a fresh debian:slim container, xh(1) from
src:rust-xh would produce a confusing "OpenSSL error" even when fetching
non-HTTPS URLs (`xh https://example.com`).
The culprit is that the reqwest crate used to make HTTP(S) requests
unconditionally initiates a TLS context, which requires loading certificates,
essentially mandating a certificate bundle.
In anticipation that the user might install other certificates, it's set to
Recommends rather than Depends.
[ Impact ]
If this update doesn't land, users would continue to see the confusing error
unless manually installing certificates.
[ Tests ]
A manual test of installing ca-certificates alongside xh solves the issue.
[ Risks ]
The change is trivial; only package metadata is touched.
The alternative would be to require users to install ca-certificates alongside
xh in slim containers, which is arguably the sensible thing to do if they ever
wish to access websites of today, but still incorrect.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
[ Changes ]
Add Recommends: ca-certificates.
[ Other info ]
None.