Miri copied the whole CI environment into target/, where caches leaked it
The Rust Security Response Team has patched cargo miri after finding that its saved environment ends up in cached build directories that pull-request runs are allowed to read.
Languages
Quarkdown adds functions and variables to Markdown
A Markdown superset with a real language inside it, sandboxed system access, and a comparison table that names LaTeX as the thing it is competing with.
A Rust developer rebuilds his JSONPath library in Zig
Seven years of Rust, one reimplementation of RFC 9535, and the thing that changed his workflow was the missing IDE rather than the borrow checker.
JDK 28 targets six JEPs, including a JSON parser
Build 16 is tagged. The targeted list now includes a Simple JSON API in incubator, generational Shenandoah by default, and the deprecation of the macOS/x64 port.
Rust maintainers targeted by phishing through fake job calls
The Rust project warns of an ongoing campaign against maintainers of popular crates. The target is the publish token, not the laptop.