RepoJournal
Rust

@rust-lang

The Rust language, Cargo, and the standard library

Keep up with Rust in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Sat 27 jun
  2. Sun 28 jun
  3. Mon 29 jun
  4. Tue 30 jun
  5. Wed 1 jul
  6. Thu 2 jul
  7. Fri 3 jul
  8. Sat 4 jul
  9. Sun 5 jul
  10. Mon 6 jul
  11. Tue 7 jul
  12. Wed 8 jul
  13. Thu 9 jul
  14. Fri 10 jul
  15. Sat 11 jul
  16. Sun 12 jul
  17. Mon 13 jul
  18. Tue 14 jul
  19. Wed 15 jul
  20. Thu 16 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: Rust Full archive →

The Wire · Showcase

CRATES.IO REFACTORS GITHUB AUTH, LIBC FIXES WASM64 PTHREAD CORRUPTION

By RepoJournal · Filed · About Rust

Turbo87 gergelyvagujhelyi chitao1234
3 people shipped this
Turbo87 @Turbo87 1 cited gergelyvagujhelyi @gergelyvagujhelyi 1 cited chitao1234 @chitao1234 1 cited

Crates.io collapsed its scattered GitHub authentication patterns into a single enum while libc patches a critical memory corruption bug in wasm64 pthread initialization.

The crates.io team shipped a significant auth refactor [1] that replaces scattered bearer tokens and basic auth patterns with a unified `GitHubAuth` enum, eliminating redundant auth-closure parameters and simplifying the entire client surface. This work continues through two follow-up commits [2] [3] that migrate from `oauth2::AccessToken` to `secrecy::SecretString`, dropping the oauth2 dependency entirely and tightening secret handling across the stack.

Meanwhile, libc addressed a show-stopping bug in wasm64-unknown-emscripten where hardcoded wasm32 pthread type sizes were overrunning stack-allocated structures during thread spawn, causing silent corruption [4] [5]. The fix makes pthread sizes pointer-width-aware, doubling the size of pthread_attr_t and pthread_mutex_t on MEMORY64 targets. The libc team also landed a companion PR [6] adding conditional compiler flag support to ctest so future platform-specific fixes can be tested cleanly.

On the compiler side, rust merged quality-of-life improvements: better error messages for invalid cfg predicates [7], fixes to match expression diagnostic output [8], and a documentation clarification for weak lock sentinels in Arc [9]. The rustdoc team fixed a regression where hidden aliased items were being completely stripped instead of preserved as placeholders [10].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Replace `GitHubClient` auth args with `GitHubAuth` enum ↗ rust-lang/crates.io
  2. [2] util/gh_token_encryption: Return `SecretString` from `decrypt()` rust-lang/crates.io
  3. [3] github: Use `SecretString` for `GitHubAuth::Bearer` token rust-lang/crates.io
  4. [4] emscripten: fix pthread type sizes for wasm64 (MEMORY64) rust-lang/libc
  5. [5] emscripten: fix pthread type sizes for wasm64 (MEMORY64) ↗ rust-lang/libc
  6. [6] ctest: probe optional compiler flags ↗ rust-lang/libc
  7. [7] Rollup merge of #157613 - evavh:invalid-predicate-error, r=JonathanBrouwer rust-lang/rust
  8. [8] Match expressions had not been updated to also show the match_source, since the time that was added rust-lang/rust
  9. [9] Auto merge of #157858 - JonathanBrouwer:rollup-TnNKRa4, r=JonathanBrouwer rust-lang/rust
  10. [10] Rollup merge of #157838 - qaijuang:rustdoc-hidden-aliased-fields, r=GuillaumeGomez,Urgau rust-lang/rust

Quick answers

What shipped in Rust on June 14, 2026?
Crates.io collapsed its scattered GitHub authentication patterns into a single enum while libc patches a critical memory corruption bug in wasm64 pthread initialization. In total, 97 commits and 37 pull requests landed.
Who contributed to Rust on June 14, 2026?
3 developers shipped this update, including Turbo87, gergelyvagujhelyi, and chitao1234.
What were the notable Rust updates?
Replace `GitHubClient` auth args with `GitHubAuth` enum, util/gh_token_encryption: Return `SecretString` from `decrypt()`, and github: Use `SecretString` for `GitHubAuth::Bearer` token.

More from @rust-lang

Rust @rust-lang

MIRI SUBTREE LANDS ALONGSIDE UNSAFE EII ENFORCEMENT IN COMPILER

The Rust compiler just got stricter about unsafe trait implementations, while the core interpreter received a major update across 105 commits.

bors RalfJung mejrs nnethercote +7
rust 152 shipped 1-min read
Rust @rust-lang

DEBUGGER DISCOVERY NOW OPT-IN, CODEGEN BUG FIXED

GDB and LLDB no longer auto-discover in bootstrap, forcing developers to explicitly configure debuggers or skip debuginfo tests entirely.

许杰友 Jieyou Xu (Joe) joshlf bors Kobzol +3
rust 64 shipped 1-min read
Rust @rust-lang

CARGO PATCHES LIBGIT2 VULNERABILITIES, NIGHTLY BUILD LAYOUT SHIPS

Cargo bumped libgit2-sys to pull in v1.9.6 vulnerability fixes [ref:10], while nightly users get the new build-dir layout v2 by default [ref:12].

bors jhpratt nikic Ed Page +3
rust 62 shipped 1-min read
Rust @rust-lang

CLIPPY CUTS COMPILE TIME WITH TAB-GROUP REWRITE, UBUNTU 26.04 LANDS IN BUILD ENV

Clippy killed a vector allocation that was hitting every doc comment in the crate, shaving up to 1.61% off compile time while the ecosystem upgrades to Ubuntu 26.04 LTS across build infrastructure.

bors Jacob Pratt flip1995 sbernauer +4
rust 123 shipped 2-min read

Daily updates, in your inbox

Follow Rust

Keep up with Rust in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.