pixi/0.39.4 package update

[octo-sts]

[octo-sts]

Gen AI suggestions to solve the build error:

Let me analyze this build error and provide specific recommendations.

• Detected Error:

error: failed to select a version for `quinn-proto`.
    ... required by package `quinn v0.11.6`
    ... which satisfies dependency `reqwest = "^0.12.9"` (locked to 0.12.9) of package `pixi v0.39.4`

• Error Category: Dependency

• Failure Point: During the rust/cargobump step when trying to resolve dependencies

• Root Cause Analysis: There's a version conflict between quinn-proto and quinn packages. Specifically, quinn v0.11.6 requires quinn-proto with the rustls-ring feature, but the available version (0.11.7) doesn't have this feature.

• Suggested Fix:

1. Update the package.yaml to pin specific versions:

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - cargo-auditable
      - openssl
      - openssl-dev
      - perl
      - rust>=1.83.0
      - wolfi-base

pipeline:
  - uses: git-checkout
    with:
      repository: https://github.com/prefix-dev/pixi
      expected-commit: a343eef1d6b6be5e620a9dc4f156bc3ad837d40a
      tag: v${{package.version}}

  - name: Pre-configure
    runs: |
      cargo update -p quinn-proto --precise 0.11.6
      cargo update -p quinn --precise 0.11.6

  - uses: rust/cargobump

  - name: Configure and build
    runs: |
      cargo auditable build --release
      mkdir -p ${{targets.destdir}}/usr/bin/
      mv target/release/pixi ${{targets.destdir}}/usr/bin/

• Explanation: The error occurs because newer versions of quinn-proto removed the rustls-ring feature. By explicitly pinning the versions of both quinn and quinn-proto to compatible versions, we ensure the build can proceed with matching feature sets.

• Additional Notes:

• This is a common issue when dealing with Rust ecosystem updates where features get reorganized
• The fix ensures compatibility while maintaining security by using recent stable versions
• An alternative approach would be to upgrade quinn to a newer version that doesn't require the rustls-ring feature

• References:

• Quinn Repository: https://github.com/quinn-rs/quinn
• Related Issue: Replace fxhash with rustc_hash, its successor quinn-rs/quinn#1246
• Cargo Documentation on Feature Resolution: https://doc.rust-lang.org/cargo/reference/features.html

[debasishbsws]

🤔 Cargobump automation should cleaning itself