Incorrect version resolving with git dependencies

[Ddystopia]

Problem

Hello, crate pinned-init has changed its name to pin-init inside the git repo and will later be published in place of pin-init crate that currently has that name. The problem is, when I try publish crate that depends on pin-init as a git repo I need to specify a version, and there are problems. If I specify a version from repo, it tells only versions from crates.io are available, and if I use versions from crates.io... It lists versions from git repo... So I just can't publish anything!

Steps

No response

Possible Solution(s)

No response

Notes

No response

Version

cargo version --verbose
cargo 1.93.0-nightly (344c4567c 2025-10-21)
release: 1.93.0-nightly
commit-hash: 344c4567c634a25837e3c3476aac08af84cf9203
commit-date: 2025-10-21
host: x86_64-unknown-linux-gnu
libgit2: 1.9.1 (sys:0.20.2 vendored)
libcurl: 8.15.0-DEV (sys:0.4.83+curl-8.15.0 vendored ssl:OpenSSL/3.5.4)
ssl: OpenSSL 3.5.4 30 Sep 2025
os: Arch Linux Rolling Release [64-bit]

[epage]

Please include reproduction steps when reporting a problem and the exact output of those steps so we can better evaluate what is going on. I can try to guess what is happening but that is the best quality we can offer with what little information is provided.

It sounds like your reproduction steps are

$ cargo new cargo-16269
$ cd cargo-16269
$ cargo add --git https://github.com/Rust-for-Linux/pin-init.git

at this point you have

[dependencies]
pin-init = { git = "https://github.com/Rust-for-Linux/pin-init.git", version = "0.0.10" }

It builds locally fine but when you publish, the git field is removed and you have:

[dependencies]
pin-init = { version = "0.0.10" }

but that version doesn't exist for pin-init, see https://crates.io/crates/pin-init/versions

only for pinned-init, see https://crates.io/crates/pinned-init/versions

What you likely need is to have

[dependencies]
pinned-init = { version = "0.0.10" }

[patches.crates-io]
pinned-init = { package = "pin-init", git = "https://github.com/Rust-for-Linux/pin-init.git" }

but that isn't supported today. You would need a combination of #9227, #5640, and mixing of sources. In the mean time, you will need either downgrade to pinned-init or wait for the new version to be published.

[Ddystopia]

I think it is different from both those issues. And why must git be stripped, is there a reason a package MUST depend on some registry instead of git?

[epage]

The intention of removing git dependencies is to ensure the registry is full self-contained to avoid left-pad style problems.

[epage]

I think it is different from both those issues.

If we have #9227, then we have the ability to also patch with a different name from different sources. Then the problem is version numbers which is covered by #5640.