cargo: Repleace unmaintained toml with tomlkit

Closes #480

Author: bbhtt

cargo/README.md

@@ -7,7 +7,7 @@ Tool to automatically generate `flatpak-builder` manifest json from a `Cargo.loc
 Poetry users can run `poetry install` and skip this.
 
 Otherwise install Python 3.8+ with these modules:
-- toml
+- tomlkit
 - aiohttp
 - (Optional) PyYAML>=6.0.2 for YAML output instead of JSON
 

cargo/flatpak-cargo-generator.py

@@ -24,7 +24,7 @@
 from urllib.parse import ParseResult, parse_qs, urlparse
 
 import aiohttp
-import toml
+import tomlkit
 
 try:
     import yaml
@@ -112,7 +112,7 @@ async def get_remote_sha256(url: str) -> str:
 
 def load_toml(tomlfile: str = "Cargo.lock") -> _TomlType:
     with open(tomlfile, "r", encoding="utf-8") as f:
-        toml_data = toml.load(f)
+        toml_data = tomlkit.parse(f.read())
     return toml_data
 
 
@@ -348,7 +348,7 @@ async def get_git_package_sources(
         },
         {
             "type": "inline",
-            "contents": toml.dumps(git_pkg.normalized),
+            "contents": tomlkit.dumps(git_pkg.normalized),
             "dest": f"{CARGO_CRATES}/{name}",  # -{version}',
             "dest-filename": "Cargo.toml",
         },
@@ -445,7 +445,7 @@ async def generate_sources(
     sources.append(
         {
             "type": "inline",
-            "contents": toml.dumps(
+            "contents": tomlkit.dumps(
                 {
                     "source": cargo_vendored_sources,
                 }

cargo/poetry.lock

@@ -10,14 +10,13 @@ readme = "README.md"
 requires-python = "<4.0,>=3.9"
 dependencies = [
     "aiohttp<4.0.0,>=3.9.5",
-    "toml<1.0.0,>=0.10.2",
     "PyYAML<7.0.0,>=6.0.2",
+    "tomlkit>=0.13.3,<1.0"
 ]
 
 [tool.poetry.group.dev.dependencies]
 ruff = "^0.6.7"
 mypy = "^1.11.2"
-types-toml = "^0.10.8"
 types-pyyaml = "^6.0.12"
 
 [tool.ruff]