cxx-rust-cssparser v1.0.0 released

Rik Mills rikmills at kubuntu.org
Fri May 15 07:25:17 BST 2026


On 15/05/2026 07:06, Luca Beltrame wrote:
> In data venerdì 15 maggio 2026 03:06:41 Ora legale dell’Europa centrale, 
> Justin Zobel ha scritto:
>> Then you'll need to vendor the Rust crates like Angelfish does:
>> https://build.opensuse.org/package/show/KDE:Applications/angelfish
> 
> It's not enough even after vendoring: https://invent.kde.org/libraries/cxx-rust-cssparser/-/merge_requests/18 is also needed, and tests still try to 
> access the network (and if network acces disabled, they complain about a crate 
> missing, although it is vendored).

This is also going to be a breaking issue with K/Ubuntu and Debian,
where buildds are very strictly not allowed to access the internet.
This is essential for security and archive integrity, and it is always
highly concerning when KDE developers think it is ok to download
dependencies on the fly or access servers from what could, given the
nature of the public internet, turn out to be compromised sources.

Rik.


More information about the release-team mailing list