[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
aws-actions/configure-aws-credentials	action	minor	v6.2.4 → v6.3.0
docker/build-push-action	action	minor	v7.3.0 → v7.4.0
docker/setup-buildx-action	action	minor	v4.3.0 → v4.4.1
rust (source, changelog)	uses-with	minor	1.92.0 → 1.99.1
zizmorcore/zizmor-action	action	minor	v0.6.3 → v0.8.1

---

Release Notes

aws-actions/configure-aws-credentials

v6.3.0

Compare Source

Features

• add translate-env-variables option (#​1961) (57b8365)

docker/build-push-action

v7.4.0

Compare Source

• Use the shared error helper for Buildx commands by @​crazy-max in #​1620
• Prevent workflow command injection in metadata logs by @​crazy-max in #​1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in #​1614 #​1618 #​1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​1592
• Bump csv-parse from 7.0.0 to 7.0.2 in #​1613
• Bump js-yaml from 4.3.0 to 4.3.2 in #​1605 #​1615
• Bump nanoid from 3.3.16 to 3.3.18 in #​1611
• Bump postcss from 8.5.10 to 8.5.25 in #​1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​1606
• Bump sigstore from 4.1.0 to 4.1.1 in #​1577
• Bump undici from 6.27.0 to 6.28.0 in #​1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

docker/setup-buildx-action

v4.4.1

Compare Source

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in #​624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Compare Source

• Use official Buildx releases for cloud driver by @​crazy-max in #​606
• Pull BuildKit image before builder creation by @​crazy-max in #​609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in #​620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in #​610 #​618 #​619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​614
• Bump js-yaml from 5.3.0 to 5.4.2 in #​608 #​617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

rust-lang/rust (rust)

v1.99.1

Compare Source

===========================

• library: fix missing symbol wcslen on UEFI and embedded targets
• rustc: fix miscompilation of FFI bool return values on x86_64
• rust-lld: add the rpath for libLLVM on macOS

v1.99.0

Compare Source

==========================

Language

• Add allow-by-default raw_borrows_via_references lint that checks for references that decay immediately into raw borrows
• Extend unconditional_panic lint to function calls that panic when the chunks/windows size is zero
• Stabilize C-variadic function definitions
• Stabilize the ability to use #[unsafe(naked)] functions to define C-variadic functions (#![feature(c_variadic_naked_functions)]).
• Trait methods are now resolved on an adjusted never type (producing a FCW)
• Coerce from inference variables to trait objects if the inference variable is related via subtyping to a type that is known to be Sized
• Stabilize #[my_macro] mod foo;. This allows outlined modules (mod foo;) anywhere in the body of a custom attribute or derive macro.
• Fix the overflowing_literals lint with repeated negation. For instance, it will now no longer lint on --128_i8, which is already detected by the arithmetic_overflow lint.
• Add POSIX symbols to the invalid_runtime_symbol_definitions and suspicious_runtime_symbol_definitions lints
• Lint unused #[path] attributes on inline modules
• Enable unreachable_cfg_select_predicates lint as part of unused lint group
• Stabilize passing 128-bit integers via vector registers with asm! on x86
• Explicitly document that some allocations are allowed to grow in-place (but none are allowed to shrink)
• We now guarantee that the contents of an UnsafeCell can be accessed without going through get
  • The invalid_reference_casting lint was adjusted accordingly
• Account for globally enabled target features in global_asm!
• Warn if an invalid doc attribute is used on a macro invocation

Compiler

• Convert -Ctarget-cpu into a target-modifier for AVR, AMDGCN and NVPTX
• Enable static_position_independent_executables on all gnu targets
• When providing a suggestion about a missing method, rustc now prefers an exactly matching name from a doc alias attribute over a similarity search from other method names. If your new users sometimes expect a method under a different name, adding a doc alias will now help them find it via rustc suggestions, in addition to helping them find it via rustdoc search: When suggesting method names, prefer exact doc aliases over similar names

Platform Support

• Promote riscv64-unknown-linux-musl to Tier 2 with host tools

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Iteration on RangeInclusive (a..=b ranges) is now optimized better in some circumstances. As a side effect of this, the behavior of RangeInclusive values that has already been exhausted (as an iterator) has changed. For example, the return values of start() and end() on such ranges may return different values, and using such ranges as slice indexes may have different behavior. These behaviors were not guaranteed to be stable, so these changes are considered to not be breaking changes.
• Relax transmute_copy to accept ?Sized types
• Update transmute_copy to use a non-unwinding panic
• Don't escape U+FF9E and U+FF9F in escape_debug_ext
• Re-export core::fmt::NumBuffer in alloc (and std)

Stabilized APIs

• IntoIterator for Box<[T; N]>
• IntoIterator for &Box<[T; N]>
• IntoIterator for &mut Box<[T; N]>
• VecDeque::retain_back
• core::ffi::VaList
• Box::into_non_null
• Box::from_non_null
• Vec::into_parts
• Vec::from_parts
• core::mem::size_of_val_raw
• core::mem::align_of_val_raw
• core::alloc::Layout::for_value_raw
• String::from_utf8_lossy_owned
• string::FromUtf8Error::into_utf8_lossy
• FusedIterator for StepBy<I>
• std::fs::set_times
• std::fs::set_times_nofollow
• <LocalKey<Cell<T>>>::update

Cargo

• Add a new built-in profile debug. This is a preparation for transitioning the dev profile away from debugging to give a saner default for faster development iterations. Currently there is no difference between dev and debug profiles. docs #​17214
• Workspace members on edition 2024 or later can now override an inherited workspace dependency's default-features field. For example, serde = { workspace = true, default-features = false } now turns off default features even when the workspace definition enables them. On earlier editions, default-features = false is ignored with a warning. (RFC 3945) #​17126

See also the full Cargo changelog

Rustdoc

• Add new unused_footnote_definition rustdoc lint
• Smarter filtering of trait impls yields performance improvements of 20% on average and up to 40% on some real-world crates. (1, 2, 3, 4, 5)

Compatibility Notes

• Fully deprecate the legacy integral modules. For example, std::i32::MAX should be accessed via i32::MAX instead.
• Upgrade no_mangle_generic_items into hard error
• The Pin::new_unchecked has had its safety invariants changed slightly
• Do not promote references to extern statics
• Ensure that the inferred types of let patterns typecheck
• hermit/fs: Return unsupported() instead of from_raw_os_error(22)
• Fixed a bug where #[repr(simd)] was accidentally allowed on macro invocations on stable Rust
• Abort const-eval when there are generics in the type of the value being produced
• Attributes not applying to anything are now an error in code blocks in doc comments
• Box::leak: tell people to avoid unleaking
• PowerPC inline ASM: Fix scalar floats being in the wrong vector lane on little endian
• Do not take doc(cfg()) into account when filtering doctests
• Infer anonymous lifetimes in the types of associated consts as 'static
• Macros that expand to a semicolon now produce a warning lint (semicolon_in_expressions_from_non_local_macros) even when the macro comes from another crate. Previously, such warnings only appeared for macros from the same crate, to avoid showing warnings that can't be fixed locally; however, this masked problems, as integration tests from the crate providing the macro get compiled as a separate crate, so tests often wouldn't reveal this issue. If you encounter a lint like this, please make sure to report it to the crate providing the macro so they can fix it; don't just silence it in your own crate.
  • semicolon_in_expressions_from_macros: Lint on non-local macros too
  • Split non-local semicolon_in_expressions_from_macros into a separate lint
• In Cargo, incremental compilation is now disabled by default when running in CI. CI is detected via the CI environment variable. #​17220
• The Rust Reference no longer recommends using a single pattern to match a union alongside another value, such as in a manually-written tagged union. This was because it was found that such code would, in some circumstances, result in the compiler reading the contents of the union before checking if the rest of the scrutinee matches the rest of the pattern. This can cause undefined behavior in code similar to what the reference previously recommended.

Internal Changes

These changes do not affect any public interfaces of Rust, but they represent
significant improvements to the performance or internals of rustc and related
tools.

• Update to LLVM 23

v1.98.1

Compare Source

===========================

• rustc: fix miscompilation in generating vtables

v1.98.0

Compare Source

==========================

Language

• Allow shortening lifetime of &mut when unsize-coercing, even in an invariant position. For example, you can now coerce a Cell<&'long mut i32> to a Cell<&'short mut dyn Send>. Such shortenings were already previously allowed when coercing a &mut to a &, or coercing a & to a &.
• Add deny-by-default invalid_runtime_symbol_definitions lint and warn-by-default suspicious_runtime_symbol_definitions lint
  • The lints currently specifically targets core runtime symbols like memcmp, memset, strlen, ... and is planned to be expanded in the next few releases.
• Add warn-by-default c_void_returns lint to check core::ffi::c_void as a return type

Platform Support

• Add powerpc64-unknown-linux-gnuelfv2 as Tier 3
• Add aarch64-unknown-linux-pauthtest as Tier 3 target
• Promote thumbv7a-none-eabi to Tier 2
• Promote thumbv7a-none-eabihf to Tier 2
• Promote thumbv7r-none-eabi to Tier 2
• Promote thumbv7r-none-eabihf to Tier 2
• Promote thumbv8r-none-eabihf to Tier 2

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Change Location<'_> lifetime to 'static in Panic[Hook]Info
• Document panic in RangeInclusive::from(legacy::RangeInclusive)
• Document that ManuallyDrop's Box interaction has been fixed
• Stabilize LoongArch CRC Intrinsics
• The derive macro is available at {core,std}::derive. This was previously unintentionally stabilized in 1.96, but is now explicitly accepted as a stabilized API.
  • Please note that the MSRV for {core,std}::derive will be 1.96, and not 1.98.

Stabilized APIs

• str::substr_range
• [T]::subslice_range
• core::fmt::NumBuffer
• <{integer}>::format_into
• Send/Sync for std::process::CommandArgs
• {fN}::algebraic_add
• {fN}::algebraic_sub
• {fN}::algebraic_mul
• {fN}::algebraic_div
• {fN}::algebraic_rem
• NonZero<{integer}>::from_str_radix
• String::from_utf16le
• String::from_utf16le_lossy
• String::from_utf16be
• String::from_utf16be_lossy
• [T]::strip_circumfix
• str::strip_circumfix
• Atomic<T>::from_mut
• Atomic<T>::get_mut_slice
• Atomic<T>::from_mut_slice
• std::range::legacy
• bool::ok_or
• bool::ok_or_else
• Option::map_or_default
• Result::map_or_default
• Box::as_ptr
• Box::as_mut_ptr
• Path::is_empty
• PathBuf::into_string
• arch::{arm,aarch64}::vdot*: NEON dot product intrinsics

Compatibility Notes

• If fully elided, lifetime bounds of trait object types may now resolve differently or even get rejected in very specific niche scenarios
• Error in more cases of ambiguous imports
• Switch the destructors implementation for thread locals on Windows to use Fiber Local Storage (FLS)
• Convert some cases of the ambiguous_glob_imports lint into a hard error
• Where-bounds of the form Type = Type and Type == Type are no longer syntactically allowed
• Ensure Send/Sync is not implemented for std::env::Vars{,Os}
• Fix that in some attributes, arguments were not properly rejected
• repr(transparent) is now more strict about which fields have "trivial" layout and hence can be ignored: repr(C) types, types with private fields, and #[non_exhaustive] types are no longer considered "trivial"
• Correctly check whether types have equal size in transmute() when some repr attributes are involved.
• More characters are escaped when printing strings and chars
• Implement fast path for derive(PartialOrd) when deriving Ord
  This can break crates in practice where a type's PartialOrd and Ord impls were inconsistent with each other.
• Add temporary scope to assert_eq and assert_ne
• Closed a hole in the pattern matching structural equality check, preventing cases where a match of a constant would be allowed, despite disagreeing with a manually written PartialEq implementation, when a derive(PartialEq) implementation for that type also exists.
• On Emscripten the WASM exception handling ABI is now unconditionally used The -Zemscripten-wasm-eh=false flag to switch back to JS exceptions has been removed.
• The UNSAFE_CODE lint is now consistently emitted for all unsafe attributes
• Solaris: remove File::lock implementation, it has the wrong semantics (return "unsupported" instead)
• Windows-gnu targets now specify baseline tools versions
• rustfmt now discovers module files that are defined in cfg_select!
  This may cause more code to be formatted which was previously ignored.

v1.97.1

Compare Source

==========================

• rustc: Fix miscompilation in LLVM optimization
  This backports an LLVM submodule bump to include the LLVM-side fix and a
  revert of the rustc change that is one known trigger for the bug. The rustc
  side revert should not be strictly necessary but is done out of abundance of caution.

v1.97.0

Compare Source

==========================

Language

• Consider Result<T, Uninhabited> and ControlFlow<Uninhabited, T> to be equivalent to T for must use lint
• Add allow-by-default dead_code_pub_in_binary lint for unused pub items in binary crates
• Stabilize the div32, lam-bh, lamcas, ld-seq-sa and scq target features
• Stabilize cfg(target_has_atomic_primitive_alignment)
• Allow trailing self in imports in more cases

Platform Support

• nvptx64-nvidia-cuda: drop support for old architectures and old ISAs

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Stabilized APIs

• Default for RepeatN
• Copy for ffi::FromBytesUntilNulError
• Send for std::fs::File on UEFI
• <{integer}>::isolate_highest_one
• <{integer}>::isolate_lowest_one
• <{integer}>::highest_one
• <{integer}>::lowest_one
• <{integer}>::bit_width
• NonZero<{integer}>::isolate_highest_one
• NonZero<{integer}>::isolate_lowest_one
• NonZero<{integer}>::highest_one
• NonZero<{integer}>::lowest_one
• NonZero<{integer}>::bit_width

These previously stable APIs are now stable in const contexts:

• char::is_control

Cargo

• Stabilize build.warnings config. This controls how lint warnings from local packages are treated. Useful for enforcing a warning-free build in CI, replacing -Dwarnings. docs
• Stabilize resolver.lockfile-path config. This allows specifying the path to the lockfile to use when resolving dependencies. Useful when working with read-only source directories. docs
• cargo-clean: Error when --target-dir doesn't look like a Cargo target directory. This prevents accidental deletion of non-target directories.
• Add -m shorthand for --manifest-path
• Remove curl dependency from crates-io crate

Rustdoc

• Stabilize --emit flag
• Stabilize --remap-path-prefix

Compatibility Notes

• Emit a future-compatibility warning when relying on f32: From<{float}> to constrain {float}
• Rust will use the v0 symbol mangling scheme by default. This may cause some tools (such as debuggers or profilers, especially with old versions) to fail to demangle symbols emitted by Rust. It may also cause the formatting of text in backtraces to change.
• Prevent deref coercions in pin!, in order to prevent unsoundness. The most likely case where this might impact users is: writing pin!(x) where x has type &mut T will now always correctly produce a value of type Pin<&mut &mut T>, instead of sometimes allowing a coercion that produces a value of type Pin<&mut T>. This coercion was previously incorrectly allowed since Rust 1.88.0.
• Deprecate std::char constants and functions
• Warn on linker output by default
• Remove hidden f64 methods which have been deprecated since 1.0
• report the varargs_without_pattern lint in deps
• Forbid passing generic arguments to module path segments even if the module reexports a generic enum variant
• Error on invalid macho link_section specifier
• The encoding of certain enums have changed. This is not a breaking change, as it only applies to enums without layout guarantees, but is noted here as we've seen people impacted from having made assumptions about the layout algorithm.
• Error on #[export_name = "..."] where the name is empty
• Syntactically reject tuple index shorthands in struct patterns
• validate #[link_name = "..."] & #[link(name = "...")] parameters
• On Windows, after calling shutdown on a socket to shut down the write side, attempting to write to the socket will now produce a BrokenPipe error rather than Other. Map WSAESHUTDOWN to io::ErrorKind::BrokenPipe

v1.96.1

Compare Source

===========================

• Cargo: fix timeout/retry behavior
• Cargo: apply patches for CVE-2025-15661, CVE-2026-55199, and CVE-2026-55200 to libssh2
• rustc: fix miscompilation in MIR optimization

v1.96.0

Compare Source

==========================

Language

• Allow passing expr metavariable to cfg
• Always coerce never types in tuple expressions
• Avoid incorrect inference guidance of function arguments in rare cases
• Support s390x vector registers in inline assembly
• Allow using constants of type ManuallyDrop as patterns (fixing a regression introduced in 1.94.0)

Compiler

• Enable link relaxation feature for LoongArch Linux targets
• Update riscv64gc-unknown-fuchsia baseline to RVA22 + vector

Libraries

• Support iterating over ranges of NonZero integers
• refactor 'valid for read/write' definition: exclude null; add that as an exception on individual methods instead
• Fix SGX delayed host lookup via ToSocketAddr

Stabilized APIs

• assert_matches!
• debug_assert_matches!
• From<T> for AssertUnwindSafe<T>
• From<T> for LazyCell<T, F>
• From<T> for LazyLock<T, F>
• core::range::RangeToInclusive
• core::range::RangeToInclusiveIter
• core::range::RangeFrom
• core::range::RangeFromIter
• core::range::Range
• core::range::RangeIter

Cargo

• Allow a dependency to specify both a git repository and an alternate registry. Just like with crates.io, the git repository will be used locally, but the registry version will be used when published.
• Added target.'cfg(..)'.rustdocflags support in configuration.
• Fixed CVE-2026-5222 and CVE-2026-5223.

Rustdoc

• Deprecation notes are now rendered like any other documentation. Previously they used the css white-space: pre-wrap; property and stripped any <p> elements from the rendered html, however this caused issues and unintuitive behavior. The new behavior should be more predictable, however some multi-line deprecation notes will now be rendered as as single lines. If this is undesirable, you can use the standard markdown method of forcing a linebreak, which is two spaces followed by a newline ("\n").
• Don't emit rustdoc missing_doc_code_examples lint on impl items
• Separate methods and associated functions in sidebar

Compatibility Notes

• Fix layout of #[repr(Int)] enums in some edge cases involving fields of uninhabited zero-sized types
• Prevent unsize-coercing into Pin<Foo> where Foo doesn't implement Deref. Some such coercions were previously allowed, but produce a type with no useful public API.
• rustc: Stop passing --allow-undefined on wasm targets
• Gate the accidentally stabilized #![reexport_test_harness_main] attribute
• Error on return-position-impl-trait-in-traits whose types are too private
• Report the uninhabited_static lint in dependencies and make it deny-by-default
• Distributed builds now contain non-split debuginfo for windows-gnu
  This appears to improve the quality of backtraces. This change has no effect on the defaults for the output of rustc/cargo on these targets.
• Check const generic arguments are correctly typed in more positions
• Remove -Csoft-float
• Importing structs with ::{self [as name]}, e.g., struct S {}; use S::{self as Other};, is now no longer permitted because {self} imports require a module parent.
• For export_name, link_name, and link_section attributes, if multiple of the same attribute is present, the first one now takes precedence.
• Update the minimum external LLVM to 21
• On avr targets, C's double type is 32-bit by default, so change c_double to f32 on avr targets to match. This is a breaking change, but necessary to make c_double match C's double.
• BTreeMap::append() was optimized, which may now cause panics for types with incorrect Ord impls

Internal Changes

These changes do not affect any public interfaces of Rust, but they represent
significant improvements to the performance or internals of rustc and related
tools.

• JSON targets: aarch64 softfloat targets now have to have rustc_abi set to "softfloat"
• target specs: stricter checks for LLVM ABI values, and correlate that with cfg(target_abi)

v1.95.0

Compare Source

===========================

Language

• Stabilize if let guards on match arms
• irrefutable_let_patterns lint no longer lints on let chains
• Support importing path-segment keywords with renaming
• Stabilize inline assembly for PowerPC and PowerPC64
• const-eval: be more consistent in the behavior of padding during typed copies
• Const blocks are no longer evaluated to determine if expressions involving fallible operations can implicitly be constant-promoted.. Expressions whose ability to implicitly be promoted would depend on the result of a const block are no longer implicitly promoted.
• Make operational semantics of pattern matching independent of crate and module

Compiler

• Stabilize --remap-path-scope for controlling the scoping of how paths get remapped in the resulting binary
• Apply patches for CVE-2026-6042 and CVE-2026-40200 to vendored musl

Platform Support

• Promote powerpc64-unknown-linux-musl to Tier 2 with host tools
• Promote aarch64-apple-tvos to Tier 2
• Promote aarch64-apple-tvos-sim to Tier 2
• Promote aarch64-apple-watchos to Tier 2
• Promote aarch64-apple-watchos-sim to Tier 2
• Promote aarch64-apple-visionos to Tier 2
• Promote aarch64-apple-visionos-sim to Tier 2

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• thread::scope: document how join interacts with TLS destructors
• Speed up str::contains on aarch64 targets with neon target feature enabled by default

Stabilized APIs

• MaybeUninit<[T; N]>: From<[MaybeUninit<T>; N]>
• MaybeUninit<[T; N]>: AsRef<[MaybeUninit<T>; N]>
• MaybeUninit<[T; N]>: AsRef<[MaybeUninit<T>]>
• MaybeUninit<[T; N]>: AsMut<[MaybeUninit<T>; N]>
• MaybeUninit<[T; N]>: AsMut<[MaybeUninit<T>]>
• [[MaybeUninit<T>; N]: From<MaybeUninit<[T; N]>>](https://doc.rust-lang.org/stable/std/mem/union.MaybeUninit.html#impl-From%3C%5BMaybeUninit%3CT%3E

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.