[rpms/rust-cargo-deny] rawhide: Update to version 0.19.9; Fixes RHBZ#2427919

[Benjamin A. Beasley <code@musicinmybrain.net>]

A new commit has been pushed.

Repo   : rpms/rust-cargo-deny
Branch : rawhide
Commit : 747a25cf74cedbbf8ee606d5aa6efd766301fad1
Author : Benjamin A. Beasley <code@musicinmybrain.net>
Date   : 2026-06-29T11:29:10+01:00
Stats  : +18/-53 in 5 file(s)
URL    : https://src.fedoraproject.org/rpms/rust-cargo-deny/c/747a25cf74cedbbf8ee606d5aa6efd766301fad1?branch=rawhide

Log:
Update to version 0.19.9; Fixes RHBZ#2427919

---
diff --git a/.gitignore b/.gitignore
index 99de006..ea864cf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@
 /cargo-deny-0.16.4.crate
 /cargo-deny-0.18.2.crate
 /cargo-deny-0.18.9.crate
+/cargo-deny-0.19.9.crate

diff --git a/cargo-deny-fix-metadata.diff b/cargo-deny-fix-metadata.diff
deleted file mode 100644
index af2ac1a..0000000
--- a/cargo-deny-fix-metadata.diff
+++ /dev/null
@@ -1,17 +0,0 @@
---- cargo-deny-0.18.9/Cargo.toml	1970-01-01T00:00:01+00:00
-+++ cargo-deny-0.18.9/Cargo.toml	2026-06-28T05:57:45.091916+00:00
-@@ -105,12 +105,13 @@
- version = "0.7"
- 
- [dependencies.gix]
--version = "0.75"
-+version = "0.83"
- features = [
-     "blocking-http-transport-reqwest",
-     "blocking-network-client",
-     "interrupt",
-     "worktree-mutation",
-+    "sha1",
- ]
- default-features = false
- 

diff --git a/rust-cargo-deny.spec b/rust-cargo-deny.spec
index 6a03ed9..c1a0fed 100644
--- a/rust-cargo-deny.spec
+++ b/rust-cargo-deny.spec
@@ -4,16 +4,13 @@
 %global crate cargo-deny
 
 Name:           rust-cargo-deny
-Version:        0.18.9
+Version:        0.19.9
 Release:        %autorelease
 Summary:        Cargo plugin to help you manage large dependency graphs
 
 License:        MIT OR Apache-2.0
 URL:            https://crates.io/crates/cargo-deny
 Source:         %{crates_source}
-# Manually created patch for downstream crate metadata changes
-# * bump gix to version 0.83
-Patch:          cargo-deny-fix-metadata.diff
 
 BuildRequires:  cargo-rpm-macros >= 24
 
@@ -24,25 +21,17 @@ Cargo plugin to help you manage large dependency graphs.}
 
 %package     -n %{crate}
 Summary:        %{summary}
-# (Apache-2.0 OR MIT) AND BSD-3-Clause
 # (MIT OR Apache-2.0) AND Apache-2.0 AND CC0-1.0
 # (MIT OR Apache-2.0) AND Unicode-3.0
 # (MIT OR Apache-2.0) AND Unicode-DFS-2016
-# 0BSD OR MIT OR Apache-2.0
 # Apache-2.0
 # Apache-2.0 AND ISC AND (MIT OR Apache-2.0)
-# Apache-2.0 OR BSL-1.0
-# Apache-2.0 OR ISC OR MIT
 # Apache-2.0 OR MIT
 # Apache-2.0 WITH LLVM-exception
-# Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
-# BSD-3-Clause
-# CDLA-Permissive-2.0
 # ISC
 # MIT
 # MIT OR Apache-2.0
 # MIT OR Apache-2.0 OR Zlib
-# MIT OR Zlib OR Apache-2.0
 # Unicode-3.0
 # Unlicense OR MIT
 # Zlib
@@ -50,23 +39,18 @@ Summary:        %{summary}
 License:        %{shrink:
     Apache-2.0 AND
     Apache-2.0 WITH LLVM-exception AND
-    BSD-3-Clause AND
     CC0-1.0 AND
-    CDLA-Permissive-2.0 AND
     ISC AND
     MIT AND
     Unicode-3.0 AND
     Unicode-DFS-2016 AND
     Zlib AND
-    (0BSD OR MIT OR Apache-2.0) AND
-    (Apache-2.0 OR BSL-1.0) AND
-    (Apache-2.0 OR ISC OR MIT) AND
-    (Apache-2.0 OR MIT OR Zlib) AND
     (Apache-2.0 OR MIT) AND
-    (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND
-    (Unlicense OR MIT)
+    (Apache-2.0 OR MIT OR Zlib) AND
+    (MIT OR Unlicense)
 }
 # LICENSE.dependencies contains a full license breakdown
+Requires:       git-core
 
 %description -n %{crate} %{_description}
 
@@ -119,18 +103,6 @@ use the "default" feature of the "%{crate}" crate.
 %files       -n %{name}+default-devel
 %ghost %{crate_instdir}/Cargo.toml
 
-%package     -n %{name}+native-certs-devel
-Summary:        %{summary}
-BuildArch:      noarch
-
-%description -n %{name}+native-certs-devel %{_description}
-
-This package contains library source intended for building other packages which
-use the "native-certs" feature of the "%{crate}" crate.
-
-%files       -n %{name}+native-certs-devel
-%ghost %{crate_instdir}/Cargo.toml
-
 %prep
 %autosetup -n %{crate}-%{version} -p1
 %cargo_prep

diff --git a/rust2rpm.toml b/rust2rpm.toml
index 0f6acbd..ecee513 100644
--- a/rust2rpm.toml
+++ b/rust2rpm.toml
@@ -1,7 +1,4 @@
 [package]
-cargo-toml-patch-comments = [
-    "bump gix to version 0.83"
-]
 license-files.exclude = [
     "benches/license_data.rs",
     "src/licenses.rs",
@@ -17,6 +14,18 @@ package-extra = """
 %endif
 """
 
+[requires]
+# Since 0.19.0, cargo-deny shells out to git in order to update the advisory
+# database. This uses git show and git clone, so git-core suffices. There are
+# some tests for this, but they all require network access, so we don’t add
+# git-core as a test dependency. Any programs that use the crate as a library
+# might need git-core for the same reason, but they would need to add the
+# dependency themselves since it’s a runtime dependency rather than a
+# build-time one.
+bin = [
+    "git-core",
+]
+
 [tests]
 skip = [
     "advisories::cfg::test::deserializes_advisories_cfg",

diff --git a/sources b/sources
index 9cccec2..2a980f9 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (cargo-deny-0.18.9.crate) = 427b3b2f95e5429c9fe5fae6c8aaa7d6b87b80b4fd19d6b545f1aa63c5bb3deb5397078dc6b1a101d338a5d84d4227196eb6084ce1e6a7185b6ad4faebae9bd3
+SHA512 (cargo-deny-0.19.9.crate) = 5a5ad4c833d17ddced195b4fc2c85f82c1c9819689808916442f2d5653a014a610b0d34b246a872995747b1688b9598b134260f5f590389ee3d8f4fedb4ee676