fix(uv): resolve missing Rust crate dependencies for uv 0.10.12 build

base/comps/components.toml

@@ -4692,7 +4692,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-adler2]
 [components.rust-adler32]
 [components.rust-aead]
-[components.rust-aes]
 [components.rust-aes-gcm]
 [components.rust-afterburn]
 [components.rust-ahash]
@@ -4759,7 +4758,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-astral-reqwest-middleware]
 [components.rust-astral-reqwest-retry]
 [components.rust-astral-tl]
-[components.rust-astral-tokio-tar]
 [components.rust-astral-version-ranges]
 [components.rust-astral_async_http_range_reader]
 [components.rust-astral_async_zip]
@@ -4976,7 +4974,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.'rust-config0.13']
 [components.rust-configparser]
 [components.rust-console]
-[components.rust-const-oid]
 [components.rust-const-random]
 [components.rust-const-random-macro]
 [components.rust-constant_time_eq]
@@ -5082,7 +5079,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-diff]
 [components.rust-difference]
 [components.rust-difflib]
-[components.rust-digest]
 [components.'rust-digest0.9']
 [components.rust-dir-test]
 [components.rust-dir-test-macros]
@@ -5371,7 +5367,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-hickory-resolver]
 [components.'rust-hickory-resolver0.24']
 [components.rust-hkdf]
-[components.rust-hmac]
 [components.'rust-hmac0.11']
 [components.rust-home]
 [components.rust-hostname]
@@ -5439,7 +5434,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-inout]
 [components.'rust-inout0.1']
 [components.rust-input_buffer]
-[components.rust-insta]
 [components.rust-insta-cmd]
 [components.rust-instant]
 [components.rust-interpolate_name]
@@ -5511,7 +5505,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.'rust-libbpf-rs0.23']
 [components.rust-libbpf-sys]
 [components.rust-libbz2-rs-sys]
-[components.rust-libc]
 [components.rust-libcramjam]
 [components.rust-libcryptsetup-rs]
 [components.rust-libcryptsetup-rs-sys]
@@ -5570,7 +5563,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-lz4]
 [components.rust-lz4-sys]
 [components.rust-lzma-rs]
-[components.rust-lzma-rust2]
 [components.rust-lzma-sys]
 [components.rust-mac]
 [components.rust-macro_rules_attribute]
@@ -5592,7 +5584,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-maybe-async]
 [components.rust-maybe-rayon]
 [components.rust-mbox]
-[components.rust-md-5]
 [components.'rust-md-5_0.9']
 [components.rust-md5]
 [components.rust-md5-asm]
@@ -5746,7 +5737,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-path-dedot]
 [components.rust-path-slash]
 [components.rust-pathdiff]
-[components.rust-pbkdf2]
 [components.rust-pcap]
 [components.rust-pcg-mwc]
 [components.rust-pci-driver]
@@ -5844,7 +5834,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.'rust-procfs0.12']
 [components.'rust-procfs0.15']
 [components.rust-prodash]
-[components.rust-proptest]
 [components.rust-proptest-derive]
 [components.rust-proptest-macro]
 [components.rust-prost]
@@ -6132,12 +6121,10 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-sev]
 [components.rust-sevctl]
 [components.rust-sha-1]
-[components.rust-sha1]
 [components.rust-sha1-asm]
 [components.rust-sha1-checked]
 [components.rust-sha1_smol]
 [components.rust-sha1collisiondetection]
-[components.rust-sha2]
 [components.rust-sha2-asm]
 [components.'rust-sha2_0.9']
 [components.rust-sha3]
@@ -6202,7 +6189,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-stats_alloc]
 [components.'rust-stderrlog0.5']
 [components.rust-stfu8]
-[components.rust-streebog]
 [components.'rust-streebog0.9']
 [components.rust-strength_reduce]
 [components.rust-string_cache]
@@ -6551,7 +6537,6 @@ overlay-files = ["overlays/*.overlay.toml"]
 [components.rust-zerotrie]
 [components.rust-zerovec]
 [components.rust-zerovec-derive]
-[components.rust-zip]
 [components.'rust-zip0.6']
 [components.rust-zip2]
 [components.rust-zlib-rs]

base/comps/rust-aes/rust-aes.comp.toml

@@ -0,0 +1,8 @@
+[components.rust-aes]
+# Pinned to Fedora f43 HEAD (past the distro default snapshot) to provide
+# aes 0.9.1, required by rust-zip 8.6.0 in uv 0.10.12's crate-alignment
+# cascade (crate(aes/default) >= 0.9.0). Existing dynamically-generated consumers
+# (rust-aes-gcm, rust-secret-service, rust-sequoia-openpgp, rust-lopdf,
+# rust-pkcs5) which require aes < 0.9.0 are served by the new rust-aes0.8
+# compat package, pinned at the commit this default previously resolved to.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "e194e176071e881f0c537bba923dedb85b0bf8c3" }

base/comps/rust-aes0.8/rust-aes0.8.comp.toml

@@ -0,0 +1,12 @@
+[components.'rust-aes0.8']
+# Version-suffixed compat package providing the OLDER aes 0.8.x, serving its
+# existing dynamically-generated consumers (rust-aes-gcm, rust-secret-service,
+# rust-sequoia-openpgp, rust-lopdf, rust-pkcs5) which require aes < 0.9.0.
+# The default rust-aes is now pinned to Fedora f43 HEAD (0.9.1) to satisfy
+# uv's crate-alignment cascade. This is Fedora's own rust-aes0.8 dist-git
+# package (real upstream import, no rename), not a hand-rolled rename --
+# same convention as the pre-existing rust-nix0.30 compat package. Pinned
+# to its current f43 HEAD (rather than left bare) because this Fedora repo
+# was created after AZL's buildroot snapshot date, so the distro-default
+# rolling snapshot can't resolve it.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "662190332f07ed9635bb919500e3b67bfe4db7bd" }

base/comps/rust-astral-reqwest-middleware0.4/rust-astral-reqwest-middleware0.4.comp.toml

@@ -0,0 +1,16 @@
+[components.'rust-astral-reqwest-middleware0.4']
+# Version-suffixed compat package (same pattern as rust-nix0.30, etc.):
+# provides an older version of the "astral-reqwest-middleware" crate
+# alongside the newer rust-astral-reqwest-middleware (currently 0.5.1,
+# required by rust-ambient-id). uv requires
+# crate(astral-reqwest-middleware/default) >= 0.4.2, < 0.5.0, which 0.5.1
+# does not satisfy, and downgrading the shared component would break
+# rust-ambient-id. Pinned to the exact "Initial package" commit on the same
+# upstream Fedora repo (rust-astral-reqwest-middleware.git), version 0.4.2.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-name = "rust-astral-reqwest-middleware", upstream-commit = "c0fe429470cd62ccf4d20de7f59b24844f11a06a" }
+
+[[components.'rust-astral-reqwest-middleware0.4'.overlays]]
+description = "Rename package to rust-astral-reqwest-middleware0.4 so it can coexist with the newer rust-astral-reqwest-middleware (0.5.1) required by rust-ambient-id"
+type = "spec-set-tag"
+tag = "Name"
+value = "rust-astral-reqwest-middleware0.4"

base/comps/rust-astral-reqwest-retry0.8/rust-astral-reqwest-retry0.8.comp.toml

@@ -0,0 +1,14 @@
+[components.'rust-astral-reqwest-retry0.8']
+# Version-suffixed compat package (same pattern as rust-nix0.30, etc.):
+# provides an older version of the "astral-reqwest-retry" crate alongside
+# the newer rust-astral-reqwest-retry (currently 0.9.1). uv requires
+# crate(astral-reqwest-retry/default) >= 0.8.0, < 0.9.0, which 0.9.1 does
+# not satisfy. Pinned to the exact "Update to version 0.8.0" commit on the
+# same upstream Fedora repo (rust-astral-reqwest-retry.git).
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-name = "rust-astral-reqwest-retry", upstream-commit = "47f8ff9c33ab7e4844e3ae5055104444c3160470" }
+
+[[components.'rust-astral-reqwest-retry0.8'.overlays]]
+description = "Rename package to rust-astral-reqwest-retry0.8 so it can coexist with the newer rust-astral-reqwest-retry (0.9.1)"
+type = "spec-set-tag"
+tag = "Name"
+value = "rust-astral-reqwest-retry0.8"

base/comps/rust-astral-tokio-tar/rust-astral-tokio-tar.comp.toml

@@ -0,0 +1,5 @@
+[components.rust-astral-tokio-tar]
+# Pin past the distro default snapshot (2026-02-24, astral-tokio-tar 0.5.6) to
+# Fedora f43 HEAD, which carries 0.6.4. uv 0.10.12 requires
+# crate(astral-tokio-tar/default) >= 0.6.0, < 0.7.0, which 0.5.6 does not satisfy.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "826ed24acec8b1446e6de76fa1d49ea5e651c835" }

base/comps/rust-astral_async_http_range_reader0.9/rust-astral_async_http_range_reader0.9.comp.toml

@@ -0,0 +1,15 @@
+[components.'rust-astral_async_http_range_reader0.9']
+# Version-suffixed compat package (same pattern as rust-nix0.30, etc.):
+# provides an older version of the "astral_async_http_range_reader" crate
+# alongside the newer rust-astral_async_http_range_reader (currently
+# 0.10.0). uv requires crate(astral_async_http_range_reader/default)
+# >= 0.9.1, < 0.10.0, which 0.10.0 does not satisfy. Pinned to the exact
+# "Initial package" commit (version 0.9.1) on the same upstream Fedora repo
+# (rust-astral_async_http_range_reader.git).
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-name = "rust-astral_async_http_range_reader", upstream-commit = "621304627131768606b089ceef8aada79f07624e" }
+
+[[components.'rust-astral_async_http_range_reader0.9'.overlays]]
+description = "Rename package to rust-astral_async_http_range_reader0.9 so it can coexist with the newer rust-astral_async_http_range_reader (0.10.0)"
+type = "spec-set-tag"
+tag = "Name"
+value = "rust-astral_async_http_range_reader0.9"

base/comps/rust-cmov/rust-cmov.comp.toml

@@ -0,0 +1,7 @@
+[components.rust-cmov]
+# New component: rust-cmov does not exist in AZL. It provides
+# architecture-specific constant-time predication intrinsics and is a
+# dependency of rust-ctutils (crate(cmov/default) >= 0.5.3, < 0.6.0), needed
+# transitively by rust-digest's "mac" feature -> rust-hmac 0.13.0 as part of
+# the uv crate-alignment cascade. Pinned to Fedora f43 HEAD (version 0.5.4).
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "bc3168902de75d99f5e549f37012cffc50fb7711" }

base/comps/rust-const-oid/rust-const-oid.comp.toml

@@ -0,0 +1,9 @@
+[components.'rust-const-oid']
+# Pinned to Fedora f43 HEAD (past the distro default snapshot) to provide
+# const-oid 0.10.2, required by rust-digest's "oid" feature in uv
+# 0.10.12's crate-alignment cascade (crate(const-oid/default) >= 0.10.0).
+# Existing dynamically-generated consumers (rust-der, rust-rsa,
+# rust-sha1collisiondetection) which require const-oid < 0.10.0 are served
+# by the new rust-const-oid0.9 compat package, pinned at the commit this
+# default previously resolved to.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "3838eb7202ea6453f545162fb1d67e6097c6ec7e" }

base/comps/rust-const-oid0.9/rust-const-oid0.9.comp.toml

@@ -0,0 +1,12 @@
+[components.'rust-const-oid0.9']
+# Version-suffixed compat package providing the OLDER const-oid 0.9.x,
+# serving its existing dynamically-generated consumers (rust-der, rust-rsa,
+# rust-sha1collisiondetection) which require const-oid < 0.10.0. The
+# default rust-const-oid is now pinned to Fedora f43 HEAD (0.10.2) to
+# satisfy uv's crate-alignment cascade. This is Fedora's own
+# rust-const-oid0.9 dist-git package (real upstream import, no rename), not
+# a hand-rolled rename -- same convention as the pre-existing rust-nix0.30
+# compat package. Pinned to its current f43 HEAD (rather than left bare)
+# because this Fedora repo was created after AZL's buildroot snapshot date,
+# so the distro-default rolling snapshot can't resolve it.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "47e3ee51179b196d930cc69069ad023b396252d1" }

base/comps/rust-cpubits/rust-cpubits.comp.toml

@@ -0,0 +1,8 @@
+[components.rust-cpubits]
+# New component: rust-cpubits does not exist in AZL. It was first packaged in
+# Fedora after AZL's distro-default snapshot date (2026-02-24), so no commit
+# exists at that snapshot and an explicit upstream-commit pin (Fedora f43
+# HEAD) is required. Needed transitively by rust-aes 0.9.1
+# (crate(cpubits/default) >= 0.1.0, < 0.2.0) as part of the uv
+# crate-alignment cascade.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "4e784900139bc3b9b30c59a0e892319834cca2bb" }

base/comps/rust-ctutils/rust-ctutils.comp.toml

@@ -0,0 +1,8 @@
+[components.rust-ctutils]
+# New component: rust-ctutils does not exist in AZL. It was first packaged in
+# Fedora after AZL's distro-default snapshot date (2026-02-24), so no commit
+# exists at that snapshot and an explicit upstream-commit pin (Fedora f43
+# HEAD, version 0.4.2) is required. Needed transitively by rust-digest's
+# "mac" feature subpackage (crate(ctutils/default) >= 0.4.0, < 0.5.0), which
+# is required by rust-hmac 0.13.0 as part of the uv crate-alignment cascade.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "da9d15459406cc056c9457bafa1779d8a8adaa6e" }

base/comps/rust-digest/rust-digest.comp.toml

@@ -0,0 +1,9 @@
+[components.rust-digest]
+# Pinned to Fedora f43 HEAD (past the distro default snapshot) to provide
+# digest 0.11.3, required by the bumped default sha2/aes/hmac/sha1/md-5/
+# streebog/pbkdf2 crate-alignment cascade for uv 0.10.12
+# (crate(digest/default) >= 0.11.0). The ~30 existing dynamically-generated
+# consumers (rust-blake2, rust-rsa, rust-sha3, rust-ripemd, rust-sm3, rust-uucore, etc.)
+# which require digest < 0.11.0 are served by the new rust-digest0.10 compat
+# package, pinned at the commit this default previously resolved to.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "5183b7700eda8e1c31efd048b9c4746fbc8e134f" }

base/comps/rust-digest0.10/rust-digest0.10.comp.toml

@@ -0,0 +1,12 @@
+[components.'rust-digest0.10']
+# Version-suffixed compat package providing the OLDER digest 0.10.x, serving
+# its ~30 existing dynamically-generated consumers (rust-blake2, rust-rsa,
+# rust-sha3, rust-ripemd, rust-sm3, rust-uucore, etc.) which require
+# digest < 0.11.0. The default rust-digest is now pinned to Fedora f43 HEAD
+# (0.11.3) to satisfy uv's crate-alignment cascade. This is Fedora's own
+# rust-digest0.10 dist-git package (real upstream import, no rename), not a
+# hand-rolled rename -- same convention as the pre-existing rust-nix0.30
+# compat package. Pinned to its current f43 HEAD (rather than left bare)
+# because this Fedora repo was created after AZL's buildroot snapshot date,
+# so the distro-default rolling snapshot can't resolve it.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "604cd28ddc62fb0dd58dc5644aa9576d9a1bbcb8" }

base/comps/rust-hmac/rust-hmac.comp.toml

@@ -0,0 +1,11 @@
+[components.rust-hmac]
+# Pinned to Fedora f43 HEAD (past the distro default snapshot) to provide
+# hmac 0.13.0, required by rust-zip 8.6.0 in uv 0.10.12's crate-alignment
+# cascade (crate(hmac/default) >= 0.13.0). Existing dynamically-generated consumers
+# (rust-hkdf, rust-pbkdf2 default, rust-cookie, rust-rfc6979,
+# rust-async-session, rust-libsystemd, rust-reqsign-core) which require
+# hmac < 0.13.0 are served by the new rust-hmac0.12 compat package, pinned
+# at the commit this default previously resolved to. Distinct from the
+# pre-existing rust-hmac0.11 compat package, which serves an even older
+# hmac 0.11 range.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "1bf863b1cf979a147fbf9a3f6bffc538cc82a591" }

base/comps/rust-hmac0.12/rust-hmac0.12.comp.toml

@@ -0,0 +1,15 @@
+[components.'rust-hmac0.12']
+# Version-suffixed compat package providing the OLDER hmac 0.12.x, serving
+# its existing dynamically-generated consumers (rust-hkdf, rust-pbkdf2
+# default, rust-cookie, rust-rfc6979, rust-async-session, rust-libsystemd,
+# rust-reqsign-core) which require hmac < 0.13.0. The default rust-hmac is
+# now pinned to Fedora f43 HEAD (0.13.0) to satisfy uv's crate-alignment
+# cascade. Distinct from the pre-existing rust-hmac0.11 compat package,
+# which serves an even older hmac 0.11 range. This is Fedora's own
+# rust-hmac0.12 dist-git package (real upstream import, no rename), not a
+# hand-rolled rename -- same convention as the pre-existing
+# rust-nix0.30/rust-hmac0.11 compat packages. Pinned to its current f43
+# HEAD (rather than left bare) because this Fedora repo was created after
+# AZL's buildroot snapshot date, so the distro-default rolling snapshot
+# can't resolve it.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "22666a19753ee1e9df683ead09e72703c33d7207" }

base/comps/rust-insta/rust-insta.comp.toml

@@ -0,0 +1,6 @@
+[components.rust-insta]
+# Pin past the distro default snapshot (2026-02-24, insta 1.45.1) to Fedora f43
+# HEAD, which carries 1.46.3. uv 0.10.12 requires
+# crate(insta/default) >= 1.46.0, < 2.0.0 (dev-dependency, pulled in via
+# %cargo_generate_buildrequires -a -t), which 1.45.1 does not satisfy.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "1e42b427d53ef5919510258e090b969c0c71417d" }

base/comps/rust-libc/rust-libc.comp.toml

@@ -0,0 +1,8 @@
+[components.rust-libc]
+# Pin past the distro default snapshot (2026-02-24, libc 0.2.181) to Fedora f43
+# HEAD, which carries 0.2.189. rust-nix 0.31.3 (bumped alongside uv's crate
+# alignment) requires crate(libc/default) >= 0.2.186, < 0.3.0, which 0.2.181
+# does not satisfy. Verified all other hardcoded libc consumers in-tree
+# (kata-containers, libblkio, libkrun, nmstate, nispor) only require an open
+# `>= 0.2.x, < 0.3.0` range, so this bump is compatible with all of them.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "a1f3270f4f2a755f2a63d9aad2c9a72fe4de5d6d" }

base/comps/rust-lzma-rust2/rust-lzma-rust2.comp.toml

@@ -0,0 +1,8 @@
+[components.rust-lzma-rust2]
+# Pin past the distro default snapshot (2026-02-24, lzma-rust2 0.16.2) to
+# Fedora f43 HEAD, which carries 0.18.0. rust-zip 8.6.0 requires
+# crate(lzma-rust2) >= 0.18.0, < 0.19.0 (default/encoder/optimization/std/xz
+# features), which 0.16.2 does not satisfy. No other in-tree consumer
+# hardcodes a narrower lzma-rust2 range. Upstream Fedora disables %check for
+# this package (most tests require unpackaged binary test-data fixtures).
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "73b2b4d7494c7a480f4eded3747b37fc6581961f" }

base/comps/rust-md-5/rust-md-5.comp.toml

@@ -0,0 +1,9 @@
+[components.'rust-md-5']
+# Pinned to Fedora f43 HEAD (past the distro default snapshot) to provide
+# md-5 0.11.0, required by rust-hmac (default, 0.13.0) in uv 0.10.12's crate-alignment
+# cascade (crate(md-5/default) >= 0.11.0). Existing dynamically-generated consumers
+# (rust-uucore, rust-uuid, rust-lopdf, rust-openssh-keys,
+# rust-sequoia-openpgp) which require md-5 < 0.11.0 are served by the new
+# rust-md-5_0.10 compat package, pinned at the commit this default
+# previously resolved to.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "dbe5d647a6793ce21b796b72417239b87f8ea86b" }

base/comps/rust-md-5_0.10/rust-md-5_0.10.comp.toml

@@ -0,0 +1,14 @@
+[components.'rust-md-5_0.10']
+# Version-suffixed compat package providing the OLDER md-5 0.10.x, serving
+# its existing dynamically-generated consumers (rust-uucore, rust-uuid,
+# rust-lopdf, rust-openssh-keys, rust-sequoia-openpgp) which require
+# md-5 < 0.11.0. The default rust-md-5 is now pinned to Fedora f43 HEAD
+# (0.11.0) to satisfy uv's crate-alignment cascade. Distinct from the
+# pre-existing rust-md-5_0.9 compat package, which serves an even older
+# md-5 0.9 range. This is Fedora's own rust-md-5_0.10 dist-git package
+# (real upstream import, no rename), not a hand-rolled rename -- same
+# convention as the pre-existing rust-nix0.30/rust-md-5_0.9 compat
+# packages. Pinned to its current f43 HEAD (rather than left bare) because
+# this Fedora repo was created after AZL's buildroot snapshot date, so the
+# distro-default rolling snapshot can't resolve it.
+spec = { type = "upstream", upstream-distro = { name = "fedora", version = "43" }, upstream-commit = "eb4c70d04b2536a62b72fc88b414a6feecf32d2a" }