cargo update fails when multiple crates have the same dep

[OGKevin]

How are you running Renovate?

A Mend.io-hosted app

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

43.94.1

Please tell us more about your question or problem

The fact that 2 crates define the same dep is causing this failure is an assumption.

---

OGKevin/cadmus#310

It seems when multiple crates define the same dep, that renovate fails to perform the update.

running:

cargo update -p toml@1.0.7+spec-1.1.0

manually in workspace root performs the update without error.

But the renovate logs indicate that this same command is ran twice, and on the second run it fails due to the version no longer being there.

---

There is nothing similar reported atm: https://github.com/renovatebot/renovate/discussions?discussions_q=label%3Amanager%3Acargo

Logs (if relevant)

Logs

{
  "command": "cargo update --config net.git-fetch-with-cli=true --manifest-path crates/core/Cargo.toml --package toml@1.0.7+spec-1.1.0 --precise 1.1.0",
  "msg": "Executing command",
  "time": "2026-03-27T17:35:40.973Z"
}
{
  "durationMs": 2069,
  "stderr": "    Updating crates.io index\n    Updating serde_spanned v1.0.4 -> v1.1.0\n    Updating toml v1.0.7+spec-1.1.0 -> v1.1.0+spec-1.1.0\n    Updating toml_datetime v1.0.1+spec-1.1.0 -> v1.1.0+spec-1.1.0\n    Updating toml_parser v1.0.10+spec-1.1.0 -> v1.1.0+spec-1.1.0\n    Updating toml_writer v1.0.7+spec-1.1.0 -> v1.1.0+spec-1.1.0\n",
  "msg": "exec completed",
  "time": "2026-03-27T17:35:43.042Z"
}
{
  "command": "cargo update --config net.git-fetch-with-cli=true --manifest-path crates/core/Cargo.toml --workspace",
  "msg": "Executing command",
  "time": "2026-03-27T17:35:43.043Z"
}
{
  "stderr": "     Locking 0 packages to latest compatible versions\n",
  "msg": "exec completed",
  "time": "2026-03-27T17:35:43.818Z"
}
{
  "command": "cargo update --config net.git-fetch-with-cli=true --manifest-path xtask/Cargo.toml --package toml@1.0.7+spec-1.1.0 --precise 1.1.0",
  "msg": "Executing command",
  "time": "2026-03-27T17:35:44.347Z"
}
{
  "err": {
    "stderr": "error: package ID specification `toml@1.0.7+spec-1.1.0` did not match any packages\nhelp: there are similar package ID specifications:\n\n  toml@0.5.11\n  toml@1.1.0+spec-1.1.0\n"
  },
  "msg": "rawExec err",
  "time": "2026-03-27T17:35:44.421Z"
}
{
  "msg": "Failed to update Cargo lock file",
  "time": "2026-03-27T17:35:44.521Z"
}