atuin/18.4.0 package update

[octo-sts]

[octo-sts]

Gen AI suggestions to solve the build error:

Based on the error output, I'll analyze and provide specific fixes:

• Detected Error: ```
error: failed to select a version for the requirement idna = "^0.5.0"
candidate versions found which didn't match: 1.0.3

• Error Category: Dependency/Version

• Failure Point: The cargobump step during package build, specifically when trying to resolve the idna package dependency

• Root Cause Analysis: The cargobump tool is unable to find a compatible version of the idna crate. The package requires idna ^0.5.0, but only version 1.0.3 is available, causing a version constraint conflict with the url crate.

• Suggested Fix:
1. Add a specific override in the cargobump-deps.yaml file:
```yaml
dependencies:
  - name: idna
    version: "1.0.3"
  - name: url
    version: "2.5.2"

2. Or update the melange.yaml to pin specific versions:

environment:
  contents:
    packages:
      # ... existing packages ...
      - cargo-auditable
      - openssf-compiler-options
      - protobuf-dev
      - rust
  environment:
    CARGO_NET_GIT_FETCH_WITH_CLI: "true"
    CARGO_TERM_COLOR: "always"
    RUST_VERSION: "1.83.0"

• Explanation: The idna crate has undergone a major version bump to 1.0.3, which is breaking compatibility with older dependencies. By explicitly specifying compatible versions, we ensure the build system can resolve dependencies correctly.

• Additional Notes:

• The url crate 2.5.2 is locked to an older idna version
• This is a common issue when upstream dependencies have version mismatches
• Consider opening an issue upstream about the version constraint

• References:

• fix(deps): pin tiny_bip to 1.0.0 until breaking change resolved atuinsh/atuin#2412 (Similar dependency pinning issue)
• https://doc.rust-lang.org/cargo/reference/specifying-dependencies.html
• https://docs.rs/url/2.5.2/url/