Cargo.bazel.lock is large

[pauldraper]

Cargo.bazel.lock is large, multiple times larger than Cargo.lock. It's very repetitive. Could some things be defaults?

This example Cargo.lock file is <5,000 lines and the Cargo.bazel.lock is >30,000 lines.

Cargo.bazel.lock
Cargo.lock

Most of my repo is Cargo.bazel.lock 😂

[dzbarsky]

Well yes, Cargo.lock is not a real lockfile in that it doesn't actually have enough information to reproduce the build without hitting the network. Cargo.bazel.lock does, though it also intermingles it with a bunch of unnecessary things.

For an alternate take on this problem, check out https://github.com/hermeticbuild/rules_rs which instead integrates the extra information needed for hermetic resolution into the existing MODULE.bazel.lock, which results in many more optimization opportunities for the resolution process.

[illicitonion]

We're hoping to be able to remove the need for Cargo.bazel.lock to exist when we're more confident in how we should be properly generating MODULE.bazel.lock (e.g. through #3946), so hopefully this problem will just go away when that happens.