From e984aa397408e84ac69a9055fca4aecbe05d02d7 Mon Sep 17 00:00:00 2001 From: hi-rustin Date: Thu, 16 Mar 2023 10:48:40 +0800 Subject: [PATCH 1/3] Update CHANGELOG for v1.26.0 Signed-off-by: hi-rustin --- CHANGELOG.md | 63 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 095ba25596..1ac2682786 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,68 @@ # Changelog +## [1.26.0] - unreleased + +This version of Rustup involves a significant number of internal refactors, both in terms +of the Rustup code and its tests. + +The headlines for this release are: + +1. Add [rust-analyzer] as a [proxy] of rustup. Now you can call `rust-analyzer` and it will + be proxied to the rust-analyzer component for the current toolchain. +2. Bump the [clap] dependency from 2.x to 3.x. It's a major version bump, so there are some + help text changes, but the command line interface is unchanged. + +In addition to a lot of work on the codebase itself, due to the length of time since the last +release this one has a record number of contributors and we thank you all for your efforts and time. + +Rather than list every single merged PR since the last release, we have pulled out +a number of highlights to include in this changelog entry. For everything else, +please review the repository. + +### Added + +- Added `rust-analyzer` as a proxy of rustup [pr#3022] +- Added DisplayVersion for rustup to registry on Windows [pr#3047] +- Build Rustup for Windows arm64 on stable [pr#3232] +- Added `up` as an alias of the `update` command [pr#3044] +- Added details of each setting in the toolchain file in the documentation [pr#3067] +- Added automatic resume flag when retrying download with curl [pr#3089] +- Added UI tests for rustup [pr#3209] + +### Changed + +- Bump the `clap` dependency from 2.x to 3.x [pr#3064] +- Remove use of hard links to symlinks on macOS [pr#3137] +- Avoid deduplicate PATH entries added during build [pr#2848] +- The toolchain name cannot be left blank [pr#2993] +- Correctly propagate subshell failures in rustup-init.sh [pr#3012] +- Enhanced warning message for Rust installation already present [pr#3038] +- Improved error message when there is an error caused by override file [pr#3041] +- Explain [proxy] in terminology documentation [pr#3091] +- Recommend tracking `Cargo.lock` with rust-toolchain file [pr#3054] +- Bump a lot of dependencies to their latest versions [pr#renovate-bot] + +[rust-analyzer]: https://github.com/rust-lang/rust-analyzer +[proxy]: https://rust-lang.github.io/rustup/concepts/proxies.html +[clap]: https://crates.io/crates/clap +[pr#3022]: https://github.com/rust-lang/rustup/pull/3022 +[pr#3047]: https://github.com/rust-lang/rustup/pull/3047 +[pr#3232]: https://github.com/rust-lang/rustup/pull/3232 +[pr#3044]: https://github.com/rust-lang/rustup/pull/3044 +[pr#3067]: https://github.com/rust-lang/rustup/pull/3067 +[pr#3089]: https://github.com/rust-lang/rustup/pull/3089 +[pr#3209]: https://github.com/rust-lang/rustup/pull/3209 +[pr#3064]: https://github.com/rust-lang/rustup/pull/3064 +[pr#3137]: https://github.com/rust-lang/rustup/pull/3137 +[pr#2848]: https://github.com/rust-lang/rustup/pull/2848 +[pr#2993]: https://github.com/rust-lang/rustup/pull/2993 +[pr#3012]: https://github.com/rust-lang/rustup/pull/3012 +[pr#3038]: https://github.com/rust-lang/rustup/pull/3038 +[pr#3041]: https://github.com/rust-lang/rustup/pull/3041 +[pr#3091]: https://github.com/rust-lang/rustup/pull/3091 +[pr#3054]: https://github.com/rust-lang/rustup/pull/3054 +[pr#renovate-bot]: https://github.com/rust-lang/rustup/pulls?q=is:pr+author:app/renovate+is:merged + ## [1.25.2] - 2023-02-01 This version of Rustup changes the signature verification code to continue From 1845eb86fa2d09533b007b01e82ed2d83ac5ac47 Mon Sep 17 00:00:00 2001 From: hi-rustin Date: Thu, 16 Mar 2023 11:11:43 +0800 Subject: [PATCH 2/3] Add all contributors Signed-off-by: hi-rustin --- CHANGELOG.md | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1ac2682786..85ecb26af9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -63,6 +63,39 @@ please review the repository. [pr#3054]: https://github.com/rust-lang/rustup/pull/3054 [pr#renovate-bot]: https://github.com/rust-lang/rustup/pulls?q=is:pr+author:app/renovate+is:merged +Thanks go to: + +- Daniel Silverstone (kinnison) +- Sabrina Jewson (SabrinaJewson) +- Robert Collins (rbtcollins) +- chansuke (chansuke) +- Shamil (shamilsan) +- Oli Lalonde (olalonde) +- 二手掉包工程师 (hi-rustin) +- Eric Huss (ehuss) +- J Balint BIRO (jbalintbiro) +- Easton Pillay (jedieaston) +- zhaixiaojuan (zhaixiaojuan) +- Chris Denton (ChrisDenton) +- Martin Geisler (mgeisler) +- Lucio Franco (LucioFranco) +- Nicholas Bishop (nicholasbishop) +- SADIK KUZU (sadikkuzu) +- darkyshiny (darkyshiny) +- René Dudfield (illume) +- Noritada Kobayashi (noritada) +- Mohammad AlSaleh (MoSal) +- Dustin Martin (dmartin) +- Ville Skyttä (scop) +- Tshepang Mbambo (tshepang) +- Illia Bobyr (ilya-bobyr) +- Vincent Rischmann (vrischmann) +- Alexander (Alovchin91) +- Daniel Brotsky (brotskydotcom) +- zohnannor (zohnannor) +- Joshua Nelson (jyn514) +- Renovate Bot (renovate-bot) + ## [1.25.2] - 2023-02-01 This version of Rustup changes the signature verification code to continue From d7e64230d8f2b6276345700944c2b4404ca27f9e Mon Sep 17 00:00:00 2001 From: hi-rustin Date: Wed, 22 Mar 2023 10:23:43 +0800 Subject: [PATCH 3/3] Mention remove GPG signature support Signed-off-by: hi-rustin --- CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 85ecb26af9..5e3fee64f6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,8 @@ The headlines for this release are: be proxied to the rust-analyzer component for the current toolchain. 2. Bump the [clap] dependency from 2.x to 3.x. It's a major version bump, so there are some help text changes, but the command line interface is unchanged. +3. Remove GPG signature support, which will result in the removal of the `rustup show keys` command. + This change is necessary because the use of SHA-1 for signature verification is [no longer secure], as it has been found to be vulnerable to attacks. However, rest assured that rustup remains safe to use, as we still have checksum verification in place. We plan to reintroduce signature support as soon as we have a more secure solution. In addition to a lot of work on the codebase itself, due to the length of time since the last release this one has a record number of contributors and we thank you all for your efforts and time. @@ -32,6 +34,8 @@ please review the repository. ### Changed - Bump the `clap` dependency from 2.x to 3.x [pr#3064] +- Remove GPG signature support [pr#3277] +- Don't add toolchain bin to PATH on Windows [pr#3178] - Remove use of hard links to symlinks on macOS [pr#3137] - Avoid deduplicate PATH entries added during build [pr#2848] - The toolchain name cannot be left blank [pr#2993] @@ -44,6 +48,7 @@ please review the repository. [rust-analyzer]: https://github.com/rust-lang/rust-analyzer [proxy]: https://rust-lang.github.io/rustup/concepts/proxies.html +[no longer secure]: https://sequoia-pgp.org/blog/2023/02/01/202302-happy-sha1-day [clap]: https://crates.io/crates/clap [pr#3022]: https://github.com/rust-lang/rustup/pull/3022 [pr#3047]: https://github.com/rust-lang/rustup/pull/3047 @@ -53,6 +58,8 @@ please review the repository. [pr#3089]: https://github.com/rust-lang/rustup/pull/3089 [pr#3209]: https://github.com/rust-lang/rustup/pull/3209 [pr#3064]: https://github.com/rust-lang/rustup/pull/3064 +[pr#3277]: https://github.com/rust-lang/rustup/pull/3277 +[pr#3178]: https://github.com/rust-lang/rustup/pull/3178 [pr#3137]: https://github.com/rust-lang/rustup/pull/3137 [pr#2848]: https://github.com/rust-lang/rustup/pull/2848 [pr#2993]: https://github.com/rust-lang/rustup/pull/2993 @@ -94,6 +101,7 @@ Thanks go to: - Daniel Brotsky (brotskydotcom) - zohnannor (zohnannor) - Joshua Nelson (jyn514) +- Prikshit Gautam (gautamprikshit1) - Renovate Bot (renovate-bot) ## [1.25.2] - 2023-02-01