meson: Don't vendor dependencies in dist

We already had attacks on tarballs on the original package levels with
XZ Utils. If we bundle a lot of tarballs in every of our tarballs, that
makes things even harder to trace.

build-aux/meson/dist-vendor.sh

@@ -1,9 +0,0 @@
-#!/bin/sh
-export DIST="$1"
-export SOURCE_ROOT="$2"
-
-cd "$SOURCE_ROOT"
-mkdir "$DIST"/.cargo
-cargo vendor | sed 's/^directory = ".*"/directory = "vendor"/g' > $DIST/.cargo/config
-# Move vendor into dist tarball directory
-mv vendor "$DIST"

meson.build

@@ -55,13 +55,3 @@ gnome.post_install(
   update_desktop_database: true,
   glib_compile_schemas: true,
 )
-
-meson.add_dist_script(
-  'build-aux/meson/dist-vendor.sh',
-  join_paths(
-    meson.project_build_root(),
-    'meson-dist',
-    meson.project_name() + '-' + meson.project_version(),
-  ),
-  meson.project_source_root(),
-)