# Security update: update a single crate

This approach is suitable for security updates as it doesn't require a change
to the upstream version number. However, it'll make for a very ugly patch, and
might not work if one of the crate has some changes that the quilt patch format
cannot represent.

For commodity, it has been wrapped up in a small shell script that will create a patch
update-$crate-$version.patch and insert it in the series file.

Note that the script might fail at the last stage, indicating that the new
crates conflict with our patch removing unused dependencies. You'll have to
amend said patch manually.

```sh
debian/update-crate.sh openssl 0.10.55
```

# Normal upstream update: refresh the vendor tarball

First, update the package as usual, including the new d/changelog entry.
Then, it's only a matter of using the following command:

```sh
debian/rules vendor-tarball
```
