Re: CVS commit: pkgsrc/lang/rust

[pin <voidpin%protonmail.com@localhost>]

-------- Original Message --------
On Wednesday, 07/01/26 at 14:16 Greg Troxel <gdt%lexort.com@localhost> wrote:
"Adam Ciarcinski" <adam%netbsd.org@localhost> writes:

> Module Name:	pkgsrc
> Committed By:	adam
> Date:		Tue Jun 30 15:13:10 UTC 2026
>
> Modified Files:
> 	pkgsrc/lang/rust: Makefile distinfo options.mk
>
> Log Message:
> rust: updated to 1.96.1
>
> Rust 1.96.1 fixes:
>
> Missing retries / timeouts in Cargo's HTTP client
> Miscompilation in a MIR optimization
>
> It also fixes three CVEs affecting libssh2 (which is compiled into Cargo):
>
> CVE-2025-15661
> CVE-2026-55199
> CVE-2026-55200

We have a more or less rule that rust-bin is kept in sync with rust.
What's the plan for getting rust-bin to 1.96.1?


Also, for others, there's a new rust-system-libgit2 option, not
mentioned in the commit message, although I see it's default off.  I am
guessing the intent is to enable it by default at some point, for the
usual vendored-code-bad reasons.


Hopefully not, I'm strongly against changing the default to system-libgit2 because, I've fixed breakage due to mismatching versions too many times already.