debcargo somewhat recently started adding +dfsg or +ds (or other
arbitrary) repack suffixes if it repacks the orig/crate tarball as part of
preparing the source package.

dh-cargo-built-using mishandles such packages in the default sbuild
config, since the upstream version (with suffix) is part of the build
path, and only emits the rustc dependency for Built-Using and
Static-Built-Using, instead of the full dependency information.

one example from current unstable:

Package: broot
Version: 1.56.4+dfsg-1
Built-Using: rustc (= 1.94.1+dfsg1-1)
Static-Built-Using: rustc (= 1.94.1+dfsg1-1)

We believe that the bug you reported is fixed in the latest version of
dh-cargo, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1138508@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Fabian Grünbichler <debian@fabian.gruenbichler.email> (supplier of updated dh-cargo package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 31 May 2026 09:02:44 +0200
Source: dh-cargo
Architecture: source
Version: 34
Distribution: unstable
Urgency: medium
Maintainer: Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed-By: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Closes: 1138508
Changes:
 dh-cargo (34) unstable; urgency=medium
 .
   * d/control: add myself to Uploaders
   * dh-cargo-built-using: fix build paths with special characters
     (Closes: #1138508)
   * d/control: update standards version to 4.7.4
Checksums-Sha1:
 a71110c0f973c4c02f6e28d5c8ddacef9b225609 1761 dh-cargo_34.dsc
 6d1bb113cb8863b7a9cafd915cf45cbc0a1d6cf1 10712 dh-cargo_34.tar.xz
 0053693423b3796ea72c907184bfaea6dff4f8a8 5569 dh-cargo_34_amd64.buildinfo
Checksums-Sha256:
 eeef14a3872ba4c095704b1f5193195fdbeef46875411fa736c4fec9bb3f14af 1761 dh-cargo_34.dsc
 4d69fb46b3c5436e27c3d0147c9b87055d536531d3cebb60143fc843ae99725c 10712 dh-cargo_34.tar.xz
 653d06c5b2ebe072ee0ab565f18b2f3cb39487b940c9911fa069aba8bb8c36d8 5569 dh-cargo_34_amd64.buildinfo
Files:
 180a41387ae28c7f9fcd128116ebd321 1761 devel optional dh-cargo_34.dsc
 aa0e353bec1fff79360a8c7a61df9547 10712 devel optional dh-cargo_34.tar.xz
 aac664f1707ed41c32dbefd2c1dc77e1 5569 devel optional dh-cargo_34_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJVBAEBCgA/FiEEbdkGe7ToK0Amc9ppdh5TKjcTRTAFAmob7EEhHGRlYmlhbkBm
YWJpYW4uZ3J1ZW5iaWNobGVyLmVtYWlsAAoJEHYeUyo3E0Uwog8QAIue1/6Qzuj3
9egB3J3atShGD2W/pkZ4zGhTKmb9pgWu91oLBn3AaTQVPR+DfKRayTSrqzhVZICq
KLCZd8wwm5kCLpbJcSTevplWxAXeDQc+bFhdMTEZdtnwNeqpK/BOJ03Lg5sM8L9c
Y0nJBAqWUkDt+pso06n4fECdf3MAaz22pyGBIDtJvDvCkGY4J5Qb103/tObc/Fw7
nKtyZ6v6Wa/XSRsuuQ3wzg8ExiFiQVZemkVIIzvm/Lcg/xpABDweGo6d1N9OHo/H
6aMF9POZCWv0R1pZQdQ1L0h3HF7RSrarn4nXgCM1mLX9Ei2dts3jDEN3CEs/NejO
rsKu4KW9VyFYEtslPLZZkl7GBNtZxemIJ9UoHeLedKxYsTXLQ/WrWWp8ybY5R/rj
9jK0hmTEDYh9akl/lU/iPrdZv+3I/BOM8ZlyiNfOmpvBFQq3HabFDNJ40gqwjk52
KW6IyK4TVh9VMgCPhE+YSm+3n5qNjPOFDlyZPnFCFquSg7eXHDsRQycVd6YskXP8
bcAHX3En1V9jrI5+vZkcY8zq/51letbi2y9JwW5zU/R7PYu4pcsxWYL38y9jBrKY
5pmWwsmDcc9cLawLN1H2n7TQEjQYpKF1ksdaAZ5mzLy9YL/QQpFgvTeih2HGsV/T
qauN5H87BMwE+1VJD/yUYTPo8iJrG+dr
=RN9t
-----END PGP SIGNATURE-----