<p><strong>TLDR:</strong> Git 2.55-rc0 ships with Rust enabled by default for the first time, with full removal of the opt-out planned for Git 3.0. A new X11 server called yserver, written in Rust with heavy AI assistance, boots MATE, Xfce, and Cinnamon on real hardware including Apple Silicon. The ‘onering’ crate on <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> was found to contain a malicious <a href="http://build.rs" target="_blank" rel="noopener nofollow">build.rs</a> that exfiltrates source code at build time — worth checking your dependency tree. Redox OS had a strong month with a new EEVDF scheduler, 4x I/O event performance gains, and Xfce now running more stably than MATE.</p>
<hr>
<h2>Git 2.55-rc0 ships Rust enabled by default</h2>
<p>Git 2.55-rc0 is the first release where Rust support is on by default — no more WITH_RUST flag. You can still opt out via NO_RUST or the Meson rust option, but that escape hatch is explicitly slated for removal in Git 3.0. The release also includes groundwork to make the xdiff code work with Rust. For anyone packaging Git or maintaining build pipelines, now is the time to verify your toolchain includes a Rust compiler. <a href="https://app.daily.dev/posts/NeXGxsEoo" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>yserver: a new Rust-written X11 server using Vulkan and DRM/KMS</h2>
<p>Jos Dehaes released yserver, an MIT-licensed X11 display server written in Rust that drops Xorg’s legacy baggage entirely. It uses DRM/KMS and Vulkan for hardware access, libseat for rootless seat management, and already boots MATE, Xfce, and Cinnamon on AMD, Intel, NVIDIA, and Apple Silicon via Asahi Linux. The project passes 66.2% of the <a href="http://X.Org" target="_blank" rel="noopener nofollow">X.Org</a> X Test Suite and has no multi-monitor support yet. It’s early — one contributor, incomplete security model — but it’s a credible alternative path for users who don’t want Wayland and don’t want to maintain Xorg. <a href="https://app.daily.dev/feed-by-ids?id=l2G3IQwZl&amp;id=dyOxMpdiN" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>‘onering’ crate compromised: <a href="http://build.rs" target="_blank" rel="noopener nofollow">build.rs</a> exfiltrates source code at build time</h2>
<p>The ‘onering’ crate v1.4.1 on <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> contains a malicious <a href="http://build.rs" target="_blank" rel="noopener nofollow">build.rs</a> that runs git diff HEAD^ HEAD on the consuming project and POSTs the diff to an attacker-controlled Sentry endpoint, disguised as telemetry. The attack fires automatically at build time with no function calls required. Both the <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> package and the maintainer’s GitHub repo are compromised. If onering is anywhere in your dependency graph, treat your recent commit history as potentially exposed. <a href="https://app.daily.dev/posts/OBeHBcYEx" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Redox OS: EEVDF scheduler, 4x I/O event performance, Xfce port</h2>
<p>Redox OS had a productive May. The DWRR scheduler was replaced with EEVDF, yielding roughly 200 FPS gains in benchmarks. poll/epoll I/O event performance improved 4x, and RedoxFS inode operations got 3.6x faster via caching. Xfce was ported and proved more stable than MATE for X11 use. The Rust compiler was updated to 1.98 nightly and incremental compilation was fixed for the package server. <a href="https://app.daily.dev/feed-by-ids?id=kxKSov76V&amp;id=EhLCzlU61" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Rust’s new ‘only’ bounds syntax targets ARM SVE and extern types:</strong> Niko Matsakis posted a design for ‘only’ bounds, a replacement for the limited ?Sized opt-out that scales to a full sizedness hierarchy (Sized, MetadataSized, MaybeSized) needed for ARM Scalable Vector Extensions and extern types — concrete enough that the ARM team is driving it as a project goal. <a href="https://app.daily.dev/posts/zCxQNtomG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Scott Chacon’s Grit rewrites Git in Rust: 360k lines, 99.3% test pass rate, $10-15k in AI costs:</strong> GitHub co-founder Scott Chacon used AI coding agents over roughly two to three weeks to produce 360,000+ lines of Rust across 500+ PRs, passing 99.3% of Git’s 42,000-test suite at a cost of $10–15k (~45B tokens); the project targets WASM edge deployments and embedding Git into editors, but is not yet production-ready. <a href="https://app.daily.dev/posts/dEiUTQ2CZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>RustRover 2026.2 cuts false positives by up to 25%:</strong> RustRover 2026.2 reduces false positives in its code analysis engine by up to 25% in real projects, measured against large-scale open-source crate analysis using a crater-style approach. <a href="https://app.daily.dev/posts/tomPlY2Ut" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>rust-analyzer v0.3.2929 fixes false ‘type annotations needed’ on include_bytes!():</strong> rust-analyzer v0.3.2929 (2026-06-08) is a fixes-only release addressing 10 issues including suppressed false ‘type annotations needed’ errors on include_bytes!() and a smarter type_mismatch quick fix that dereferences LHS instead of inserting &amp;mut. <a href="https://app.daily.dev/posts/8OXQmSWLW" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


Rust language updates, async patterns, and systems programming.

Rust Digest

A roundup of notable Rust ecosystem news: Git 2.55-rc0 ships with Rust enabled by default for the first time, with opt-out removal planned for Git 3.0. A new X11 server called yserver, written in Rust using Vulkan and DRM/KMS, already boots MATE, Xfce, and Cinnamon on real hardware including Apple Silicon. The 'onering' crate on crates.io was found to contain a malicious build.rs that exfiltrates source code diffs to an attacker-controlled endpoint at build time — developers should audit their dependency trees. Redox OS saw significant May improvements including a new EEVDF scheduler, 4x I/O event performance gains, and a stable Xfce port. Also covered: Rust's new 'only' bounds syntax for ARM SVE, Scott Chacon's AI-assisted Grit project rewriting Git in Rust, RustRover 2026.2 false positive reductions, and rust-analyzer bug fixes.

Git 2.55 enables Rust by default, yserver brings X11 to Rust