treewide: use new cargo fetcher

[Bot-wxt1221]

TODO: @emilazy suggest my script should be reviewd independently and all output should be reduced.

She has mentioned that FOD hash attack is possible.

This is a tracking issue to replace #356862.

These are from old PR:

Already done. We should run nixpkgs-review to check if some package have different Cargo.lock when building and in nixpkgs, like veloren.

I have writen a script to update it automatically.

Now It can solve:

cargoLock = {
  lockFile = xxx;
  outputhahes = {xxx};
};

cargoLock.lockFile = xxx;
cargoLock.outputHashes = {xxx};

Script: https://github.com/Bot-wxt1221/cargo-rename

Usage:

Compile with gcc. Make sure fetch-cargo can be exec. Exec with a xx/pkgs/by-name/xx/xx/package.nix

cc #327063

#349360

Step to reduce:

1. Generate a file list with cargoLock:

rg "cargoLock" --files-with-matches > filewithcargoLock

cat filewithcargoLock | rev | cut -d / -f 2|rev > packagename

2. run update-all

useFetchCargoVendor

[Bot-wxt1221]

Now All PR have split nixfmt into one.

[Aleksanaa]

@emilazy do you agree with the step of changing to fetchCargoVendor first, before we investigate one lockfile mechanism?