rustc 1.65 and cargo 0.66 required by firefox 110

[Rico Tzschichholz]

Firefox 110+ requires rustc 1.65 and cargo 0.66 to build¹.

The beta phase for Firefox 110.0 begins on 2023-01-16 and release candidates will be available from 2023-02-06.

We will need these in Ubuntu 23.04 and all supported releases: bionic, focal, jammy, kinetic.

¹ https://bugzilla.mozilla.org/show_bug.cgi?id=1807761

Rust toolchain upgrades are usually relatively safe from a FTBFS point of view, since new releases are subjected to a crater run, crater being a tool that compiles the entirety of the crates.io packages.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cargo - 0.66.0+ds1-1ubuntu1

---------------
cargo (0.66.0+ds1-1ubuntu1) lunar; urgency=medium

  * Merge from Debian unstable (LP: #2000839):
    Remaining changes:
    - Add an explicit mechanism to customize the vendoring process
    - d/p/proxy-skip-tests.patch: skip a test when there's a proxy configured
      to accommodate Ubuntu autopkgtest setup
    - d/p/i386-crossbuild-tests.patch: disable some failing tests for
      cross-building from i386
    - d/p/remove-badges.patch: remove badges from documentation for privacy
      reasons (refreshed)
    - autopkgtests: test on all arches on Ubuntu
    - d/control: update the Vcs fields to point to Launchpad
    - make_orig_multi.sh: fix orig tarball compression to xz on Ubuntu
    - Track vendored dependencies
    - Bump the libgit2-related crates to get libgit2 1.5.0 bindings
    - make_orig_multi.sh: only use xz for vendor orig tarball on Ubuntu
  * Update vendored sources information

cargo (0.66.0+ds1-1) unstable; urgency=medium

  [ Fabian Grünbichler ]
  * fix CVE-2022-46176 (Thanks Peter Green!)
  * repack vendored sources with required libgit2-sys/git2/git2-curl versions
  * update unsuspicious files

cargo (0.66.0-1) unstable; urgency=medium

  * new upstream version 0.66

  [ Blair Noctis ]
  * Update debcargo-conf.patch, unapply tempfile patch to match vendored
  * Refresh patches and remove upstream applied CVE patches
  * Patch test macro to work around qemu vfork bug when command not found

  [ Fabian Grünbichler ]
  * no longer pin git2/libgit2-sys
  * update debcargo-conf.patch (concolor, clap)
  * update unsuspicious files
  * d/control: depend on rustc 1.63
  * drop armel workaround

  [ Rob Shearman ]
  * d/control: update minimum cargo, rustc and libstd-rust-dev versions

 -- Simon Chopin <email address hidden> Tue, 17 Jan 2023 14:48:37 +0100

[Simon Chopin (schopin)]

The packages for older releases are available in the ubuntu-mozilla-security/rust-updates PPA as usual.

[Launchpad Janitor (janitor)]

This bug was fixed in the package rustc - 1.65.0+dfsg0ubuntu1-0ubuntu3

---------------
rustc (1.65.0+dfsg0ubuntu1-0ubuntu3) lunar; urgency=medium

  * d/p/ubuntu-Set-exec-env-RUST_BACKTRACE-0-in-const-eval-select-t.patch:
    Cherry-picked from upstream to fix some failing tests on ppc64el and arm64

 -- Simon Chopin <email address hidden> Mon, 23 Jan 2023 10:20:30 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package rustc - 1.65.0+dfsg0ubuntu1-0ubuntu0.22.10.1

---------------
rustc (1.65.0+dfsg0ubuntu1-0ubuntu0.22.10.1) kinetic; urgency=medium

  * Backport to kinetic (LP: #2000839)

 -- Simon Chopin <email address hidden> Fri, 20 Jan 2023 18:17:44 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package rustc - 1.65.0+dfsg0ubuntu1-0ubuntu0.22.04.1

---------------
rustc (1.65.0+dfsg0ubuntu1-0ubuntu0.22.04.1) jammy; urgency=medium

  * Backport to jammy (LP: #2000839)
  * Comment out vendored source tracking

 -- Simon Chopin <email address hidden> Fri, 20 Jan 2023 18:17:44 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package rustc - 1.65.0+dfsg0ubuntu1~llvm2-0ubuntu0.20.04

---------------
rustc (1.65.0+dfsg0ubuntu1~llvm2-0ubuntu0.20.04) focal; urgency=medium

  * Update the vendored LLVM 15 to the latest bugfix release to fix ppc64el
    build.
  * Cherry-pick upstream patch to fix FTBFS on ppc64el and arm64

 -- Simon Chopin <email address hidden> Wed, 25 Jan 2023 18:02:05 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package cargo - 0.66.0+ds0ubuntu0.libgit2-0ubuntu0.22.10

---------------
cargo (0.66.0+ds0ubuntu0.libgit2-0ubuntu0.22.10) kinetic; urgency=medium

  * Backport to Kinetic (LP: #2000839)
  * Re-enable libgit2 vendoring:
    - d/control: remove libgit2-dev and libhttp-parser-dev from B-D
    - include Rust provided patches to fix CVE-2022-46176

 -- Zixing Liu <email address hidden> Wed, 18 Jan 2023 13:42:34 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package cargo - 0.66.0+ds0ubuntu0.libgit2-0ubuntu0.22.04

---------------
cargo (0.66.0+ds0ubuntu0.libgit2-0ubuntu0.22.04) jammy; urgency=medium

  * Backport to Jammy (LP: #2000839)
  * Re-enable libgit2 vendoring:
    - d/control: remove libgit2-dev and libhttp-parser-dev from B-D
    - include Rust provided patches to fix CVE-2022-46176
  * Remove the need of dh-cargo

 -- Zixing Liu <email address hidden> Wed, 18 Jan 2023 13:42:34 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package cargo - 0.66.0+ds0ubuntu0.libgit2-0ubuntu0.18.04

---------------
cargo (0.66.0+ds0ubuntu0.libgit2-0ubuntu0.18.04) bionic; urgency=medium

  * Backport to Bionic (LP: #2000839)
  * Re-enable libgit2 vendoring:
    - d/control: remove libgit2-dev and libhttp-parser-dev from B-D
    - include Rust provided patches to fix CVE-2022-46176
  * Remove the need of dh-cargo
  * Downgrade the debhelper requirements

 -- Zixing Liu <email address hidden> Wed, 18 Jan 2023 13:42:34 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package rustc - 1.65.0+dfsg0ubuntu1~llvm2-0ubuntu0.18.04

---------------
rustc (1.65.0+dfsg0ubuntu1~llvm2-0ubuntu0.18.04) bionic; urgency=medium

  * Update the vendored LLVM 15 to the latest bugfix release to fix ppc64el
    build.
  * Cherry-pick upstream patch to fix FTBFS on ppc64el and arm64

 -- Simon Chopin <email address hidden> Wed, 25 Jan 2023 18:02:05 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package cargo - 0.66.0+ds0ubuntu0.libgit2-0ubuntu0.20.04

---------------
cargo (0.66.0+ds0ubuntu0.libgit2-0ubuntu0.20.04) focal; urgency=medium

  * Backport to Focal (LP: #2000839)
  * Re-enable libgit2 vendoring:
    - d/control: remove libgit2-dev and libhttp-parser-dev from B-D
    - include Rust provided patches to fix CVE-2022-46176
  * Remove the need of dh-cargo

 -- Zixing Liu <email address hidden> Wed, 18 Jan 2023 13:42:34 -0700