bazelbuild
vendor command modifies Cargo.lock file
it adds dependencies which are then removed by cargo build since they are not actually used by our application. i dont think the vendor command is supposed to modify cargo.lock file
rules_rust: 0.58.0 cargo: 1.85.0
Can you share a repro for this? This is expected depending on your setup
Ive noticed this as well and even with CARGO_BAZEL_ISOLATED=false pulling from private crates fails as well
This would likely be caused by how crates_repository is setup. The Cargo.lock file is expected to be updated if you've defined all your dependencies in starlark. But if you are purely using Manifests then my expectation is the Cargo.lock file wouldn't have any of the Bazel things added to it.