Suricata

Issue with doing this with configure is if make dist is run with newer Rust, a newer version of time is vendored. Which breaks building from the dist archive on systems with the older version of Rust.

Rust package renaming cannot be used due to sem-ver resolution, for example, this looks like it should work:

old-time = { package = "time", version = "=0.3.20" }
time = { package = "time", version = "=0.3.35" }

Note that this works, and we have used this for Nom:

old-time = { package = "time", version = "=0.2.20" }
time = { package = "time", version = "=0.3.35" }

Even if it did work, its unclear which one would be picked up by our dependencies that also depend on time. Use the patch feature in PR 11406 does handle this case.