112 wires and counting

$ follow Rust

Keep up with Rust in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-15
stories 128

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

docs.rs patches rustls security bug, cuts its own test and 404 costs

By RepoJournal · Filed · About Rust · Composed from the cited sources · methodology

docs.rs carried the day: a security-driven rustls bump plus three infrastructure changes that make its test suite faster and stop bot traffic from hammering the origin, while rust's box internals lost two long-deprecated escape hatches.

update rustls to v0.23.45 due to security issue rust-lang/docs.rs

by Denis Cornehl

docs.rs moved to rustls v0.23.45 to pick up a security fix. Anything else in the stack pinning rustls should follow to the same release.

Faster test database with DDL replay rust-lang/docs.rs

by syphar

Test setup was spending much of its time creating and tearing down a database schema per case, running every migration forward and then in reverse. The new design builds a Postgres template database from the migrations once and clones it per test; it lands alongside the 404 caching work that keeps known-missing release doc pages and unknown about pages from reaching the origin, which the PR aut...

Rollup merge of #162763 - maxdexh:remove-into-unique, r=RalfJung rust-lang/rust

by Jonathan Brouwer

Box::into_unique is gone, with all in-tree uses removed beforehand. It was a private-ish escape hatch; if you reached for it, move to into_raw_with_allocator, which now has a test.

Rollup merge of #162766 - maxdexh:unleak-considered-harmful, r=hanna-kruppe,saethlin rust-lang/rust

by Jonathan Brouwer

Max Dexheimer removed the dubious Box::leak uses from rustc and std, stopping the practice of unleaking &mut references. The opsem discussion behind it explains why leaking was the wrong shape for these cases.

cache 404 errors inside release docs rust-lang/docs.rs

by syphar

docs.rs now caches 404 responses inside release docs and for unknown about pages, so repeated misses stop reaching the origin server.

Quick answers

What shipped in Rust on September 15, 2026?
docs.rs carried the day: a security-driven rustls bump plus three infrastructure changes that make its test suite faster and stop bot traffic from hammering the origin, while rust's box internals lost two long-deprecated escape hatches. In total, 102 commits and 26 pull requests landed.
Who contributed to Rust on September 15, 2026?
5 developers shipped this update, including bors, Denis Cornehl, Jonathan Brouwer, Max Dexheimer, and workflows-miri.
What were the notable Rust updates?
update rustls to v0.23.45 due to security issue, Faster test database with DDL replay, and Rollup merge of #162763 - maxdexh:remove-into-unique, r=RalfJung.