`Cargo.lock` missing?

[mgorny]

I'm not a Rust expert but the vast majority of Rust packages I've seen are pinning Rust dependencies via Cargo.lock both in the source distributions and in the VCS. Perhaps you should consider doing the same.

[jelmer]

On Mon, Aug 04, 2025 at 08:28:35PM -0700, Michał Górny wrote: mgorny created an issue (breezy-team/fastbencode#121) I'm not a Rust expert but the vast majority of Rust packages I've seen are pinning Rust dependencies via `Cargo.lock` both in the source distributions and in the VCS. Perhaps you should consider doing the same.

It is common to version Cargo.lock for leaf packages (e.g. binaries), but not for libraries (since downstream users will have their own Cargo.lock files). Since fastbencode is a leaf package, we can indeed version Cargo.lock - though the number of dependencies is so small that it is unlikely to change much. Jelmer