Package: oxigraph Version: 0.5.5+ds-5 We are in the process of preparing an update to the rust random stack, due to the number of packages involved, we plan to handle this in multiple phases.
In the first phase we plan to update getrandom, rand-core, rand-chacha and rand, while introducing semver-suffix packages for rand-core-0.6 rand-chacha-0.2 and rand-0.8. We do not plan to introduce a semver-suffix package for getrandom. Adapting oxigraph to the new version of getrandom resulted in a reduction in the amount of patching. In terms of rand, you can choose to either update now or later, but whichever you choose you need ot be explicit in your dependencies. I have not investigated what it would take to update oxigraph to rand 0.10 at this time. Debdiff is attatched.
diff -Nru oxigraph-0.5.5+ds/debian/changelog oxigraph-0.5.5+ds/debian/changelog --- oxigraph-0.5.5+ds/debian/changelog 2026-03-10 18:52:43.000000000 +0000 +++ oxigraph-0.5.5+ds/debian/changelog 2026-03-12 10:35:34.000000000 +0000 @@ -1,3 +1,12 @@ +oxigraph (0.5.5+ds-5.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Adjust getrandom Cargo dependency for 0.4. + * Adjust Debian dependencies on getrandom and rand to be explicit + about the versions required. + + -- Peter Michael Green <[email protected]> Thu, 12 Mar 2026 10:35:34 +0000 + oxigraph (0.5.5+ds-5) unstable; urgency=medium * mention support for the RDF/JS datamodel in long descriptions diff -Nru oxigraph-0.5.5+ds/debian/control oxigraph-0.5.5+ds/debian/control --- oxigraph-0.5.5+ds/debian/control 2026-03-10 18:51:45.000000000 +0000 +++ oxigraph-0.5.5+ds/debian/control 2026-03-12 10:35:23.000000000 +0000 @@ -21,7 +21,7 @@ librust-dashmap-dev, librust-dissimilar-dev, librust-flate2-dev, - librust-getrandom-dev, + librust-getrandom-0.4-dev, librust-hex-dev, librust-is-terminal-dev, librust-js-sys-dev, @@ -37,7 +37,7 @@ librust-pkg-config-dev, librust-portable-atomic-dev, librust-quick-xml-dev, - librust-rand-dev, + librust-rand-0.8-dev, librust-rayon-core-dev, librust-rayon-dev, librust-regex-dev, @@ -165,7 +165,7 @@ librust-oxiri-dev, librust-oxsdatatypes-dev (= 0.4.0~really${rust:Version:librust-oxsdatatypes-dev}), librust-quick-xml-dev, - librust-rand-dev, + librust-rand-0.8-dev, librust-ryu-js-dev, librust-sha2-dev, librust-thiserror-dev, @@ -288,7 +288,7 @@ librust-oxrdf-dev (= 0.4.0~really${rust:Version:librust-oxrdf-dev}), librust-oxsdatatypes-dev (= 0.4.0~really${rust:Version:librust-oxsdatatypes-dev}), librust-peg-dev, - librust-rand-dev, + librust-rand-0.8-dev, librust-regex-dev, librust-rustc-hash-dev, librust-sha1-dev, @@ -348,7 +348,7 @@ librust-oxrocksdb-sys-dev (= ${rust:Version:librust-oxrocksdb-sys-dev}), librust-oxsdatatypes-dev (= 0.4.0~really${rust:Version:librust-oxsdatatypes-dev}), librust-portable-atomic-dev, - librust-rand-dev, + librust-rand-0.8-dev, librust-rustc-hash-dev, librust-siphasher-dev, librust-sparesults-dev (= 0.4.0~really${rust:Version:librust-sparesults-dev}), diff -Nru oxigraph-0.5.5+ds/debian/patches/2002_getrandom.patch oxigraph-0.5.5+ds/debian/patches/2002_getrandom.patch --- oxigraph-0.5.5+ds/debian/patches/2002_getrandom.patch 2026-03-09 17:15:22.000000000 +0000 +++ oxigraph-0.5.5+ds/debian/patches/2002_getrandom.patch 2026-03-12 10:34:39.000000000 +0000 @@ -1,7 +1,7 @@ -Description: use older minor version of crate getrandom -Author: Jonas Smedegaard <[email protected]> +Description: use newer minor version of crate getrandom +Author: Peter Michael Green <[email protected]> Forwarded: not-needed -Last-Update: 2026-03-09 +Last-Update: 2026-03-12 --- This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ --- a/Cargo.toml @@ -11,18 +11,7 @@ geo = ">=0.28, <0.32" # TODO: upgrade when the dependency on old getrandom will be dropped geojson = "0.24" -getrandom = "0.3.4" -+getrandom = "0.2.15" ++getrandom = "0.4" hex = "0.4" js-sys = "0.3.85" json-event-parser = "0.2.3" ---- a/lib/oxigraph/Cargo.toml -+++ b/lib/oxigraph/Cargo.toml -@@ -17,7 +17,7 @@ - [features] - default = ["rocksdb"] - rocksdb = ["oxrocksdb-sys"] --js = ["getrandom/wasm_js", "oxsdatatypes/js", "js-sys"] -+js = ["getrandom/js", "oxsdatatypes/js", "js-sys"] - http-client = ["oxhttp"] - http-client-native-tls = ["http-client", "oxhttp/native-tls"] - http-client-rustls-native = ["http-client", "oxhttp/rustls-ring-native"] diff -Nru oxigraph-0.5.5+ds/debian/patches/2010_avoid_spargeo.patch oxigraph-0.5.5+ds/debian/patches/2010_avoid_spargeo.patch --- oxigraph-0.5.5+ds/debian/patches/2010_avoid_spargeo.patch 2026-03-09 17:15:22.000000000 +0000 +++ oxigraph-0.5.5+ds/debian/patches/2010_avoid_spargeo.patch 2026-03-12 10:35:34.000000000 +0000 @@ -23,7 +23,7 @@ flate2 = "1.0" -geo = ">=0.28, <0.32" # TODO: upgrade when the dependency on old getrandom will be dropped -geojson = "0.24" - getrandom = "0.2.15" + getrandom = "0.4" hex = "0.4" js-sys = "0.3.85" @@ -79,7 +76,6 @@
