$ the-wire · showcase
New Rust Project Director election post, cargo install --locked in dev guide
By RepoJournal · Filed · About Rust
Rust project leadership announced an election for new Project Directors, while the dev guide now instructs locked cargo installs to prevent supply-chain attacks.
The Project Directors election was announced in a new blog post [1], with tentative dates and a follow-up fixing the date . In the rustc-dev-guide, all `cargo install` commands now use `--locked` [2], which, per the commit, reduces supply-chain attack risk to the tool itself by using locked and hashed dependencies. The team repo added lcnr and Joel Marcey as funding advisors [3], and created a goal-owners Zulip group [4]. Miri synchronized with recent rustc changes [5] and documented a chacha20 target feature bug [6]. The query system chapter now emphasizes that queries are demand-driven, not just memoized [7].
Action items
- → Review the new Project Director election announcement for timeline impact rust-lang/blog.rust-lang.org [monitor]
- → Update local tooling to use --locked for cargo installs as recommended rust-lang/rustc-dev-guide [plan]
References
- [1] Add PD election blog post ↗ rust-lang/blog.rust-lang.org
- [2] Install cargo tools with locked dependencies ↗ rust-lang/rustc-dev-guide
- [3] Add lcnr and Joel Marcey to funding advisors ↗ rust-lang/team
- [4] Add goal-owners Zulip group ↗ rust-lang/team
- [5] Automatic Rustup ↗ rust-lang/miri
- [6] add chacha20 target feature bug to trophy case ↗ rust-lang/miri
- [7] touch-ups to "query system" chapter ↗ rust-lang/rustc-dev-guide