It seems like cargo does a lot of heavy lifting w.r.t. dependencies which Bazel does not like. Do you have to vendor your dependencies- and your dependencies dependencies. Ad infinitum.

I'm really hoping bzlmod helps in this case: https://www.youtube.com/watch?v=TxOCKtU39Fs

The story for external deps is indeed extremely painful right now.