https://blog.rust-lang.org/ Events collected by UnlimitedPipe 0.3.0 UnlimitedPipe 0.3.0 Thu, 24 Sep 2026 10:05:27 +0000 https://blog.rust-lang.org/2026/09/22/announcing-a-maintainer-in-residence-scott-schafer-for-the-cargo-team/ 9559d1c91928f8071f8e Thu, 24 Sep 2026 10:05:27 +0000 At the end of August, we announced our first Maintainers in Residence, Rust Project contributors who are funded for their upstream contributions and maintenance work from the Rust Foundation Maintainers Fund (RFMF). Since then, the Rust Leadership Council has dedicated more funds from its Project Priorities budget to RFMF, and together with AWS also providing additional funds, this allowed us to open a new full-time Maintainer in Residence (MiR) position to support the Cargo team. We would like… https://blog.rust-lang.org/2026/09/21/github-actions-leaking-secrets-when-miri-output-is-cached/ d3fd80b3c3486e325d1c Thu, 24 Sep 2026 10:05:27 +0000 The Rust Security Response Team was notified that Miri stores all environment variables to target/ , allowing secrets to persist in caches. While not necessary a vulnerability in and of itself, when paired with GitHub Actions caching behavior, it is possible for this to expose secrets to PRs. Overview GitHub Actions makes it possible to cache directories between runs. Typical setups allow CI runs on main (and other branches) to write to cache, and PRs can only read from cache (preventing cache… https://blog.rust-lang.org/2026/09/17/targeted-attacks/ d46093cad200139fd53f Thu, 24 Sep 2026 10:05:27 +0000 We believe that there is an ongoing campaign targeting rust-lang members and owners of popular crates that is attempting to compromise devices and accounts in order to use them to publish malware. What we've seen A video call is set up for something positive — maybe for a job, maybe for a project, maybe for a contract opportunity — and then that's used as a vector to either get the target to install something on their computer (such as a purportedly missing audio codec) or execute another… https://blog.rust-lang.org/2026/09/07/rust-debugging-survey-2026-results/ 7b9c453985ed1378e93c Thu, 24 Sep 2026 10:05:27 +0000 One of the biggest challenges Rust developers report in our annual surveys is a subpar debugging experience. So, back in February, we ran our first Rust Debugging Survey , in the hopes of identifying how Rust developers are using debuggers and what problems they are facing when doing so. We received over 2,300 responses, and we'd like to thank everyone who took the time to participate in the survey! In this report, we'll go over some of the results of the survey. If you'd like, you can also… https://blog.rust-lang.org/2026/09/03/Rust-1.98.1/ f1f68b508b52d53a8243 Thu, 24 Sep 2026 10:05:27 +0000 The Rust team has published a new point release of Rust, 1.98.1. Rust is a programming language that is empowering everyone to build reliable and efficient software. If you have a previous version of Rust installed via rustup, getting Rust 1.98.1 is as easy as: rustup update stable If you don't have it already, you can get rustup from the appropriate page on our website. What's in 1.98.1 Rust 1.98.1 fixes a miscompilation in vtable generation . In Rust 1.98.0, in some circumstances, rustc would… https://blog.rust-lang.org/2026/09/01/Rustup-1.29.1/ 80b5b5a3a1f56cd7cec3 Thu, 24 Sep 2026 10:05:27 +0000 The rustup team is happy to announce the release of rustup version 1.29.1. Rustup is the recommended tool to install Rust , a programming language that empowers everyone to build reliable and efficient software. What's new in rustup 1.29.1 The headlines of this release are: Concurrency in certain rustup operations has been improved: When running rustup update , rustup will first check for possible updates in parallel. pr#4752 When running rustup component add with multiple components, they will… https://blog.rust-lang.org/2026/08/26/announcing-our-first-maintainers-in-residence/ 3eea82068368004d2dfd Thu, 24 Sep 2026 10:05:27 +0000 We are very happy to announce the Rust Project's first round of Maintainers in Residence: Gen Li ( @rami3l ), Chris Denton ( @ChrisDenton ), Alejandra González ( @blyxyas ), León Liehr ( @fmease ), and Maintainer Grant recipients: Jason Newcomb ( @Jarcho ) and Jonas Böttiger ( @joboet ). These contributors will be funded for their rust-lang maintenance activities for (at least) the following 12 months! The funding of the Maintainer in Residence (MiR) and Maintainer Grantee roles is possible… https://blog.rust-lang.org/2026/08/21/enabling-next-solver-on-nightly/ dead2a29a7b3b52708b7 Thu, 24 Sep 2026 10:05:27 +0000 After nearly 4 years of active development, the next-generation trait solver is close to stabilization. We are enabling it by default on nightly to surface any remaining issues and plan to stabilize it in the next months. This is the largest single change to the Rust compiler since its initial release. It completely replaces how we prove where-clauses, normalize associated types, and much more. Please try out the latest nightly and open an issue if you encounter any bugs or regressions. This is… https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/ 29acd9cc896b5315a263 Thu, 24 Sep 2026 10:05:27 +0000 What happened On 2026-08-20 at 7:15 UTC we got a report that the proc-macro1 crate was malicious. The Rust Security Response Team verified this to be the case: the crate had a build script that was downloading a malicious payload. This crate proc-macro1 and others like it ( proc-macro-en , aovine , arone , aronenao , tinymember ) have been deleted. Furthermore, we discovered that the popular arrayref crate had recently been republished and made to depend on this crate, with the most recent… https://blog.rust-lang.org/2026/08/20/Rust-1.98.0/ 4268a8373d9277feaef4 Thu, 24 Sep 2026 10:05:27 +0000 The Rust team is happy to announce a new version of Rust, 1.98.0. Rust is a programming language empowering everyone to build reliable and efficient software. If you have a previous version of Rust installed via rustup , you can get 1.98.0 with: $ rustup update stable If you don't have it already, you can get rustup from the appropriate page on our website, and check out the detailed release notes for 1.98.0 . If you'd like to help us out by testing future releases, you might consider updating…