fix: rust-quick-xml0.38: pin to Fedora 43 build commit 592f13a068e5

[binujp]

Pin rust-quick-xml0.38 to upstream commit 592f13a068e585f78e5a3a1c5277eb9a7ed47cfd (Fedora dist-git: rust-quick-xml) to fetch sources from the commit used to build the current f43 package.

Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)

• The toolchain has been rebuilt successfully (or no changes were made to it)
• The toolchain/worker package manifests are up-to-date
• Any updated packages successfully build (or no packages were changed)
• Packages depending on static components modified in this PR (Golang, *-static subpackages, etc.) have had their Release tag incremented.
• Package tests (%check section) have been verified with RUN_CHECK=y for existing SPEC files, or added to new SPEC files
• All package sources are available
• cgmanifest files are up-to-date and sorted (./cgmanifest.json, ./toolkit/scripts/toolchain/cgmanifest.json, .github/workflows/cgmanifest.json)
• LICENSE-MAP files are up-to-date (./LICENSES-AND-NOTICES/SPECS/data/licenses.json, ./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md, ./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)
• All source files have up-to-date hashes in the *.signatures.json files
• sudo make go-tidy-all and sudo make go-test-coverage pass
• Documentation has been updated to match any changes to the build system
• Ready to merge

---

Summary

What does the PR accomplish, why was it needed?

Change Log

• Change
• Change
• Change

Does this affect the toolchain?

YES/NO

Associated issues

• #xxxx

Links to CVEs

• https://nvd.nist.gov/vuln/detail/CVE-YYYY-XXXX

Test Methodology

• Pipeline build id: xxxx

[Copilot]

Pull request overview

Pins the rust-quick-xml0.38 component to a specific Fedora 43 dist-git commit so azldev fetches the exact spec/sources used for the current Fedora 43 build, improving reproducibility while the default Fedora 43 snapshot lags behind.

Changes:

• Added a dedicated rust-quick-xml0.38.comp.toml with spec.upstream-commit pinned to 592f13a068e585f78e5a3a1c5277eb9a7ed47cfd.
• Removed the now-redundant empty component entry from components-full.toml.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
base/comps/rust-quick-xml0.38/rust-quick-xml0.38.comp.toml	Adds an upstream commit pin for Fedora 43 to ensure deterministic spec/source selection.
base/comps/components-full.toml	Removes the empty rust-quick-xml0.38 entry since it now has a dedicated component file.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The pin comment should include a full reference URL to the Fedora dist-git commit being pinned (consistent with other upstream-commit pins). This makes it easy to audit/compare against Fedora and later decide when to drop the override.

Suggested change

	# in distro/azurelinux.distro.toml advances past this commit.
	# in distro/azurelinux.distro.toml advances past this commit.
	# Fedora dist-git commit: https://src.fedoraproject.org/rpms/rust-quick-xml/c/592f13a068e585f78e5a3a1c5277eb9a7ed47cfd