Hi,

I propose an update to rustc introduced as src:rustc-web, as we've done in
the past (e.g. #1110080). The risk is low as it is a new package, which will
be used to build chromium, firefox, clamav... I'm providing a diff from the
version in experimental, which this was based on. Since rustc build-deps on
itself and requires a new enough version, we can't bootstrap it with src:rustc
from trixie. Instead I'll upload binaries, and we can then binNMU it.

I have already uploaded the package and have binary builds for several
architectures waiting. I'll upload them once the package is in proposed-updates
unless you tell me otherwise.

Cheers,
Emilio

Hi,

It's not absolutely critical, but I'll be working on chromium 152 this
weekend and it would be wonderful if this new version of rustc-web were
available in t-pu by then. We've already got the update in bookworm, so
once this gets accepted I can drop some rather large rust workaround
patches.

Thanks,
Andres

Hi,

We are not sure if that felt through the cracks, and excuse if the
ping follows too shortly (I realize it is only two days passing).

I see two options, eithr stable-proposed-updates is enabled for
security builds temporarily until chromium is done (I guess we should
not have it longer, vs. as we discussed for -updates).

Or second option is to relese the llvm-toolchain-22 as needed via a
SUA, would that be an option? I'm explicitly adding Adam here into CC.

I notice there would be another chromium update as there was a new
batch of CVEs yesterday AFAICS.

Regards,
Salvatore

A third option would be:

  llvm-toolchain-22 (1:22.1.8-1~deb13u5) trixie-security; urgency=medium

    * Rebuild for trixie-security.

This would be the most natural solution of uploading to security what is
needed in security.

Among the architectures where chromium is built, the slowest at building
llvm-toolchain-22 is ppc64el with 7-8 hours build time.

cu
Adrian

surely we want no temporary solution (which eg also prevent rebuilds), no?

package release.debian.org
tags 1144966 = trixie pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian trixie.

Thanks for your contribution!

Upload details
==============

Package: rustc-web
Version: 1.96.0+dfsg1-1~deb13u1

Explanation: new package to support browser builds

package release.debian.org
tags 1144966 = trixie pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian trixie.

Thanks for your contribution!

Upload details
==============

Package: rustc-web
Version: 1.96.0+dfsg1-1~deb13u1

Explanation: new package to support browser builds

Hi,

I have just done the change to enable stable-proposed-updates for
security builds in the buildd configuration (pending puppet
propagation). Sorry for the delay.

Regards
Aurelien

Hi Aurelien,

Thank you!

Regards,
Salvatore

This update was released as part of 13.7.

Hi,

Now that the 13.7 point release is out, do we still need this change or
can it be reverted?

Thanks
Aurelien

Hi Aurelien,

Please revert it for now, so that we do not accidentially pick up a
dependency from stable-proposed-updates.

Regards,
Salvatore

+1 from me.

Emilio does have a pending llvm-toolchain-22 build fix for armel, but I
don't know his timeline for uploading that (and 13.8 is only a month away).

Thanks!

Hi Salvatore,

Thanks for the feedback, I reverted it.

Regards
Aurelien