Context
sequoia-openpgp 2.4 replaced direct openssl/openssl-sys usage with the ossl crate, which unconditionally pulls in bindgen as a build-dependency. This breaks the current UBI-based container build because clang (required by bindgen) is not yet available in the build toolchain.
Current workaround
In PR #2484 we pinned sequoia-openpgp below 2.4 (with default-features = false to also avoid the nettle backend, whose nettle-sys crate also depends on bindgen). This replaced the initial, ineffective openssl/openssl-sys version pins from PR #2470.
Action needed
Once the build toolchain is updated to include clang, revert the sequoia-openpgp version pin and allow it to update freely.
Tracks: TC-5148
Context
sequoia-openpgp2.4 replaced directopenssl/openssl-sysusage with theosslcrate, which unconditionally pulls inbindgenas a build-dependency. This breaks the current UBI-based container build becauseclang(required bybindgen) is not yet available in the build toolchain.Current workaround
In PR #2484 we pinned
sequoia-openpgpbelow 2.4 (withdefault-features = falseto also avoid thenettlebackend, whosenettle-syscrate also depends onbindgen). This replaced the initial, ineffectiveopenssl/openssl-sysversion pins from PR #2470.Action needed
Once the build toolchain is updated to include
clang, revert thesequoia-openpgpversion pin and allow it to update freely.Tracks: TC-5148