fix(manager/cargo): only warn for non-locked on crates

lib/modules/manager/cargo/artifacts.spec.ts

@@ -11,6 +11,7 @@ import type { RepoGlobalConfig } from '../../../config/types';
 import * as docker from '../../../util/exec/docker';
 import { ExecError } from '../../../util/exec/exec-error';
 import * as _hostRules from '../../../util/host-rules';
+import { CrateDatasource } from '../../datasource/crate';
 import type { UpdateArtifactsConfig } from '../types';
 import * as cargo from '.';
 
@@ -132,6 +133,7 @@ describe('modules/manager/cargo/artifacts', () => {
         packageName: 'dep1',
         lockedVersion: '1.0.0',
         newVersion: '1.0.1',
+        datasource: CrateDatasource.id,
       },
     ];
     expect(
@@ -290,18 +292,21 @@ describe('modules/manager/cargo/artifacts', () => {
         packageName: 'dep1',
         lockedVersion: '1.0.0',
         newVersion: '1.0.1',
+        datasource: CrateDatasource.id,
       },
       {
         depName: 'dep2',
         packageName: 'dep2',
         lockedVersion: '1.0.0',
         newVersion: '1.0.2',
+        datasource: CrateDatasource.id,
       },
       {
         depName: 'dep3',
         packageName: 'dep3',
         lockedVersion: '1.0.0',
         newVersion: '1.0.3',
+        datasource: CrateDatasource.id,
       },
     ];
 

lib/modules/manager/cargo/artifacts.ts

@@ -12,6 +12,7 @@ import {
 } from '../../../util/fs';
 import { getGitEnvironmentVariables } from '../../../util/git/auth';
 import { regEx } from '../../../util/regex';
+import { CrateDatasource } from '../../datasource/crate';
 import type { UpdateArtifact, UpdateArtifactsResult, Upgrade } from '../types';
 import { extractLockFileContentVersions } from './locked-version';
 
@@ -130,13 +131,23 @@ async function updateArtifactsImpl(
         config.constraints?.rust,
       );
     } else {
-      const missingDep = updatedDeps.find((dep) => !dep.lockedVersion);
-      if (missingDep) {
-        // If there is a dependency without a locked version then log a warning
-        // and perform a regular workspace lockfile update.
-        logger.warn(
-          `Missing locked version for dependency \`${missingDep.depName}\``,
-        );
+      const nonCrateDep = updatedDeps.find(
+        (dep) => dep.datasource !== CrateDatasource.id,
+      );
+      const crateDepWithoutLockedVersion = updatedDeps.find(
+        (dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id,
+      );
+      // Non-crate dependencies (like git ones) do not have locked versions.
+      // For crate dependencies, not having a locked version is not expected.
+      // In both situations, perform a regular workspace lockfile update.
+      if (nonCrateDep || crateDepWithoutLockedVersion) {
+        if (crateDepWithoutLockedVersion) {
+          // Only warn when a crate dependency has no locked version, as this is
+          // not an expected situation.
+          logger.warn(
+            `Missing locked version for dependency \`${crateDepWithoutLockedVersion.depName}\``,
+          );
+        }
         await cargoUpdate(
           packageFileName,
           false,