RepoJournal
Rust

@rust-lang

The Rust language, Cargo, and the standard library

Pick a date

The Wire · Showcase

RUST LANDS STRICT PROVENANCE WIN, CLIPPY FIXES DUPLICATIONS

By RepoJournal · Filed · About Rust

The SGX environment code just ditched unsafe violations by switching to OnceLock, while Clippy patched false positives that were firing on gen blocks and respecting MSRV limits.

Rust shipped a critical safety win by replacing unsafe `AtomicPtr` code in SGX environment storage with `OnceLock`, eliminating strict provenance violations that predated the API's existence [1]. The rollup landed eight merges including MSVC DLL export improvements, test parallelization fixes, and delegation support for `Self` mappings [2], while the toolchain also removed an unnecessary `rand v0.8` dependency by stripping features from `twox-hash` in sanitizers [3]. On the Clippy front, the linter fixed duplicate emissions in `suspicious_operation_groupings` [4], killed an overly broad `lower_ty` check in `uninhabited_reference` that was slowing analysis [5], and patched a false positive where `infinite_loop` was incorrectly flagging yields inside gen blocks [6]. The most dangerous fix came to `manual_is_variant_and`, which was ignoring MSRV settings and suggesting methods like `is_none_or` (1.82+) to projects locked at 1.81, a `cargo clippy --fix` footgun that could break builds [7]. crates.io dependency updates are routine: prettier 3.9.1 [8], ammonia 4.1.3 [9], eslint 10.6.0 [10], comrak 0.53.0 with API changes [11], and indicatif 0.18.6 [12].

Action items

References

  1. [1] Rollup merge of #158180 - joboet:sgx_env_oncelock, r=Darksonn rust-lang/rust
  2. [2] Auto merge of #158663 - JonathanBrouwer:rollup-vypSRyC, r=JonathanBrouwer rust-lang/rust
  3. [3] rustc_sanitizers: use twox-hash without default features rust-lang/rust
  4. [4] fix suspicious_operation_groupings duplications ↗ rust-lang/rust-clippy
  5. [5] Remove `lower_ty` in `uninhabited_reference` (#17293) rust-lang/rust-clippy
  6. [6] fix infinite_loop false positive inside gen blocks ↗ rust-lang/rust-clippy
  7. [7] Respect the configured MSRV in `manual_is_variant_and`'s `map() == Some(_)` rewrite ↗ rust-lang/rust-clippy
  8. [8] Update dependency prettier to v3.9.1 ↗ rust-lang/crates.io
  9. [9] Update Rust crate ammonia to v4.1.3 ↗ rust-lang/crates.io
  10. [10] Update dependency eslint to v10.6.0 ↗ rust-lang/crates.io
  11. [11] Update Rust crate comrak to v0.53.0 ↗ rust-lang/crates.io
  12. [12] Update Rust crate indicatif to v0.18.6 ↗ rust-lang/crates.io

FAQ

What changed in Rust on July 2, 2026?
The SGX environment code just ditched unsafe violations by switching to OnceLock, while Clippy patched false positives that were firing on gen blocks and respecting MSRV limits.
What should Rust teams do about it?
Review and merge Clippy MSRV fix before running clippy --fix on projects with configured minimums • Merge SGX OnceLock refactor and sanitizers dependency cleanup to drop rand v0.8 • Merge crates.io dependency updates, especially ammonia and comrak with API changes
Which Rust repositories shipped on July 2, 2026?
rust-lang/rust, rust-lang/rust-clippy, rust-lang/crates.io

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • 14 famous open source orgs
  • One wire per day
  • Public, generic
  • Read on the web, when you remember

Your wire

  • Up to 1,500 of your repos - orgs, deps, vendors
  • Morning and evening briefs
  • Action items routed to your team
  • Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.