Happy to announce a new project: OxiSH, a modern, memory-safe SSH server. dirkjan.ochtman.nl/writing/2026... Prossimo has three criteria for suggesting memory-safe rewrites: (1) widely used, (2) on a security boundary and (3) performing a critical function. This is clearly true for SSH servers.

OpenSSH 10.4 has just been released This release includes a number of security and bug fixes, as well as a handful of new features - most notable experimental support for a hybrid post-quantum signature scheme (ML-DSA 44 with Ed25519). www.openssh.org/releasenotes...

Do you use #rustlang hyper/h2 at scale? Would you be able to easily try out a performance run using a PR that is meant to significantly reduce contention with multi-threaded HTTP/2? It would be a big help! github.com/hyperium/h2/...

Refactor big mutex to reduce contention by seanmonstar · Pull Request #917 · hyperium/h2

This refactor puts the big internal shared mutex on a diet. The goal is to reduce contention, providing performance improvements when h2 is used on multi-threaded runtimes. WarningThis is a large i...

github.com

I released Graviola 0.4.0 yesterday, with a new and quite quick ML-KEM-768 implementation. More perf work to do on this, but it is already quicker than libcrux-ml-kem, and competitive with mlkem-native on ARM64. And still builds mega fast! Consider supporting this work on github.com/sponsors/ctz

Oh. After many long years... HTTP now officially has a standard QUERY method. Think: cacheable, idempotent GET that can carry a meaningful payload. We can now all stop bastardizing POST. auth48-transition.rfc-editor.org/authors/rfc1...

WHEEEEEEEEEE github.com/rust-lang/ru...

alloc: stabilise `Allocator` by nia-e · Pull Request #156882 · rust-lang/rust

Stabilise a bare-minimum (dyn-incompatible, but could be in the future) Allocator trait, alongside Box::new_in(), Vec::new_in(), the System Allocator impl, and a blanket impl of Allocator for T: Gl...

github.com

nia (cia asset)@nia.is.fckn.gay · 3mo ago

CHAT WE HAVE STABLE ALLOCATORS

Three pillars becomes four. The #OpenTelemetry project is excited to share that profiles are now alpha! With #OTel profiles, you get an industry-wide standard for production profiling, with true vendor neutrality and powered by community support. Read more in our latest post! buff.ly/DfYetYF

The <Suspense> is over. Solid 2.0 Beta is now released (next tag on npm). 🎉 github.com/solidjs/soli...

Release v2.0.0 Beta - The <Suspense> is Over · solidjs/solid

I know you all probably weren't expecting this announcement next. But after reviewing the roadmap, we spent so long iterating in the Experimental phase, most of the goalposts within Alpha don't app...

github.com

Starting tomorrow, you will be able (on linux without cross-compilation) to install and use the Rust GCC backend directly from rustup! To do so: rustup component add rustc-codegen-gcc Thanks a lot to @jberanek.bsky.social for all their work to make it a reality! github.com/rust-lang/ru...

Add GCC and the GCC codegen backend to build-manifest and rustup by Kobzol · Pull Request #151156 · rust-lang/rust

This PR adds the GCC codegen backend, and the GCC (libgccjit) component upon which it depends, to build-manifest, and thus also to (nightly) Rustup. I added both components in a single PR, because ...

github.com

Created some tree-sitter grammars for Cedar and CedarSchema: github.com/DuskSystems/... #treesitter #cedar

GitHub - DuskSystems/tree-sitter-cedar: Cedar grammars for tree-sitter.

Cedar grammars for tree-sitter. Contribute to DuskSystems/tree-sitter-cedar development by creating an account on GitHub.

github.com

Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1. This has some breaking changes, the biggest was switching to rustls by default. I'd appreciate if you gave it a spin 🙏 github.com/seanmonstar/...

Release v0.13.0-rc.1 · seanmonstar/reqwest

👀 Discussion here if you give it try, thanks! Main breaking changes rustls is now default instead of native-tls rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you...

github.com

cargo-shear v1.8.0 now reports unused .rs files. github.com/Boshen/carg... Thank you @cathal.dev for spending a long time implementing this.

The Proton Pass CLI, which was recently released as a beta, is now officially launched! Enable faster workflows, reduce context switching, and implement secure automation across local development, servers, and CI/CD environments with this new and secure Command Line Interface.

Includes a new "Optimizing Build Performance" section added to the Cargo Book!

Rust Language@rust-lang.org · 8mo ago

Rust 1.92.0 has been released! 🌈 🦀 This version adds RwLockWriteGuard::downgrade(), adds Location::file_as_c_str(), improves diagnostic and validation for various attributes, no longer warns for unused Result<(), Infallible>, and more! Check out the announcement: blog.rust-lang.org/2025/12/11/R...

🚀 We just shipped v0.216.0! Word-level diffing just landed. 🎉 It's been a night-and-day difference for us—seeing exactly what changed within each line.

Earlier this year, LWN.net featured an excellent article named "Linux's missing CRL infrastructure", and today Canonical announced it will be working with me and @jbp.io over the coming weeks to start bridging the PKI infrastructure gap. discourse.ubuntu.com/t/addressing...

Addressing Linux's Missing PKI Infrastructure

Earlier this year, LWN featured an excellent article titled “Linux’s missing CRL infrastructure”. The article highlighted a number of key issues surrounding traditional Public Key Infrastructure (PKI)...

discourse.ubuntu.com

Fit width text in 1 line of CSS `text-grow: per-line scale;` nerdy.dev/css-text-grow (prototype in Canary 165+)

Latest `cargo-shear` release now uses `miette` for its output, and has some new diagnostics around optional dependencies. cargo-shear: Detect and fix unused/misplaced dependencies in Rust projects crates.io/crates/cargo... #rust #rustlang

A perfect CVSS 10 🧑🏻‍🍳💋 CVE-2025-55182: Unauthenticated remote code execution vulnerability in React Server Components The vuln is in versions 19.0, 19.1.0, 19.1.1, and 19.2.0: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Upgrade immediately!

Critical Security Vulnerability in React Server Components – React

The library for web and native user interfaces

react.dev

Announcing @hyper.rs composable pool layers! We took the various aspects of a connection pool and made them into individual layers to combine as needed. This is something I've been thinking about for years, I'm so glad it's finally coming out. #rustlang seanmonstar.com/blog/hyper-u...

hyper-util Composable Pools

Announcing connection pool layers allowing advanced composition in Rust.

seanmonstar.com

cargo-shear now runs 1.5× faster, a total of 2x than older versions. Thank you @cathal.dev and @permutans.bsky.social! cargo-shear: Detect and remove unused dependencies from Cargo.toml github.com/Boshen/cargo...

Release v1.7.0 · Boshen/cargo-shear

Added improve redundant ignore warning messages (#333) Performance collect import syntax tokens not string (#328) Process packages in parallel using rayon (#329) Refactor Replace cargo_toml wi...

github.com

Boshen@boshen.github.io · 9mo ago

cargo-shear now runs 1.3x faster and accepts nightly syntax features, after switching parser from `syn` to `ra_ap_syntax` (rust-analyzer's parser). github.com/Boshen/carg...

cargo-shear now runs 1.3x faster and accepts nightly syntax features, after switching parser from `syn` to `ra_ap_syntax` (rust-analyzer's parser). github.com/Boshen/carg...

Release v1.6.6 · Boshen/cargo-shear

Features Fix detection of redundant workspace ignores (#324) Switch from syn to ra_ap_syntax for parsing (#322) Fixed fix incorrect --version output (#326) At least 1.3x performance improvemen...

github.com

Recently contributed some features to cargo-shear: github.com/boshen/cargo... It can now detect dependencies that should be dev-dependencies (and fix them), better handles feature-gated deps, and handles platform-specific deps now too.

GitHub - Boshen/cargo-shear: Detect and remove unused dependencies from Cargo.toml

Detect and remove unused dependencies from Cargo.toml - Boshen/cargo-shear

github.com

I'm excited to announce the first @hyper.rs user survey! If you've used hyper (or related libraries) just a little or a whole bunch, providing feedback is invaluable and should take less than 5 minutes. Give it a go! seanmonstar.com/blog/hyper-u... #rustlang

hyper User Survey 2025

I’m excited to announce the inaugural hyper user survey!

seanmonstar.com

🦀 I've improved the implementation behind all the string formatting macros in Rust: println, panic, format, write, log::info, etc. (Everything using format_args!().) They will compile a bit faster, use a bit less memory while compiling, result in smaller binaries, and produce more efficient code! 🎉

The @firefoxdevtools.bsky.social JSON viewer got better in @firefoxnightly.bsky.social : the console offers access to the original json data via `$json`. This allows to easily manipulate the underlying data to get what you want

Exciting news! Today, we announced the Rust Foundation Maintainers Fund: an initiative to provide consistent, transparent, long-term support for the developers who make Rust possible. Supporting maintainers = supporting Rust’s future. Learn more: rustfoundation.org/media/announ...

Announcing the Rust Foundation Maintainers Fund

rustfoundation.org

New #rust blog post on how we could get types that cannot be forgotten, types that must be moved, async and const drop, and other fun stuff: smallcultfollowing.com/babysteps/bl...

Igalia is excited to announce a new commission from the Sovereign Tech Fund to advance the Servo web engine. www.igalia.com/2025/10/09/I...

Igalia, Servo, and the Sovereign Tech Fund | Igalia

Igalia is an open source consultancy specialised in the development of innovative projects and solutions. Our engineers have expertise in a wide range of technological areas, including browsers and cl...

igalia.com

Temporal_rs has been released!!! This is the first public release of Temporal_rs, a Rust implementation of the Temporal API powering Boa, Kiesel, V8 plus other engines. This will be shipping in Chromium soon More info in our blog post: boajs.dev/blog/2025/09...