--- title: Rust hits TIOBE top 10, Grok Build's secret repo uploads... description: Rust officially entered the TIOBE top 10 for the first time, landing at 10th place after jumping from 18th in a single year. xAI open-sourced Grok Build, a... canonical: https://daily.dev/posts/rust-hits-tiobe-top-10-grok-build-s-secret-repo-uploads-exposed-xyxgglqar twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Rust hits TIOBE top 10, Grok Build's secret repo uploads exposed | daily.dev og:description: Rust officially entered the TIOBE top 10 for the first time, landing at 10th place after jumping from 18th in a single year. xAI open-sourced Grok Build, a... og:url: https://daily.dev/posts/rust-hits-tiobe-top-10-grok-build-s-secret-repo-uploads-exposed-xyxgglqar og:image: https://api.daily.dev/og/posts/XYXGGLQAR.png og:image:alt: Rust hits TIOBE top 10, Grok Build's secret repo uploads exposed og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Rust hits TIOBE top 10, Grok Build's secret repo uploads exposed **[Rust Digest](https://daily.dev/sources/rust_digest)** · 5 min read · 14 upvotes · 0 comments ## Summary Rust officially entered the TIOBE top 10 for the first time, landing at 10th place after jumping from 18th in a single year. xAI open-sourced Grok Build, a Rust-written coding agent, but the launch was overshadowed by a security incident where the tool silently uploaded entire Git repositories to xAI's cloud storage before being disabled server-side on July 13. Rust 1.97.1 shipped as a point release to fix an LLVM miscompilation bug present since at least 1.87. The Bun Zig-to-Rust rewrite story continued generating debate, with the Zig creator and several analysts pushing back on Anthropic's framing of the AI agent involvement. ## Content **TLDR:** Rust officially entered the TIOBE top 10 for the first time, landing at 10th place after jumping from 18th in a single year. xAI open-sourced Grok Build, a Rust-written coding agent, but the launch was overshadowed by a security incident where the tool silently uploaded entire Git repositories to xAI's cloud storage before being disabled server-side on July 13. Rust 1.97.1 shipped as a point release to fix an LLVM miscompilation bug present since at least 1.87. The Bun Zig-to-Rust rewrite story continued generating debate, with the Zig creator and several analysts pushing back on Anthropic's framing of the AI agent involvement. --- ## Grok Build open-sourced in Rust, then immediately hit by repo-upload security incident xAI released Grok Build under Apache 2.0 — 844,000 lines of Rust covering the agent loop, file tools, shell execution, web search, and a terminal UI. The repo hit 1,900 stars in under 40 minutes. Before any of that landed, though, a researcher found the tool was silently uploading entire tracked Git repositories to an xAI-operated GCS bucket — full commit history, unredacted secrets from .env files, the works. One observed session totaled 5.1 GiB, roughly 27,800 times more data than the model actually used. The opt-out toggle for model improvement did not stop this. xAI disabled the upload server-side on July 13 with no public acknowledgment and no changelog entry. The upload code is still in the binary. If you ran Grok Build before July 13, rotate any credentials that appeared in tracked files or commit history. [Read more](https://daily.dev/feed-by-ids?id=RTcpopXUW&id=PRNMXg7zK) ## Rust 1.97.1 fixes LLVM miscompilation present since 1.87 A point release targeting a miscompilation bug triggered by an LLVM optimization. The fix includes a backported LLVM patch and a rollback of the IR change introduced in 1.97.0 that made the bug significantly more likely to surface. Worth noting: the underlying bug has been in the compiler since at least Rust 1.87 — 1.97.0 didn't introduce it, just increased the hit rate. Update with `rustup update stable`. [Read more](https://daily.dev/feed-by-ids?id=McoVosK2I&id=Jw34w2XWs) ## Bun's Zig-to-Rust rewrite: the debate over AI agent involvement sharpens The Bun rewrite story from last week kept generating heat. Zig creator Andrew Kelley published a sharp rebuttal arguing the memory bugs reflected engineering failures rather than language limitations, and that Anthropic's post was primarily a marketing vehicle for its Fable model. A separate analysis noted that the adversarial reviewer technique — giving a separate agent diffs with the assertion they contained broken code — was the genuinely interesting engineering insight, and that the autonomous-agent framing undersells how much human scaffolding was required. The honest read: the $165K, 11-day compression is real, but the prerequisites (deep expert, comprehensive test suite, 600-line porting guide written upfront) are doing most of the work. [Read more](https://daily.dev/feed-by-ids?id=UoD0sca7g&id=EvBn9Lway&id=xeVPP6Gtl&id=QsaeRTIxg&id=LFlcGaf9G) ## pgrust claims 50% transactional performance gain over Postgres in follow-up version Following last week's news that pgrust passed all 46,000 Postgres regression tests, a follow-up version called PG Rust Fast is claiming roughly 50% better transactional performance and ClickHouse-comparable analytical performance, with $200K total invested. These numbers are unverified and come from the developers themselves. The architecture replaces Postgres's process-per-connection model with threads, which is the plausible mechanism for the gains — but treat the benchmarks as directional until independent replication. [Read more](https://daily.dev/feed-by-ids?id=H7lGxRmlo&id=7vcsduyso) --- ## Also notable - **Turso building Postgres-compatible database on same Rust core as libSQL:** Turso is layering a Postgres frontend on top of the same VDBE bytecode VM used for their SQLite rewrite, with auto-updating materialized views, MVCC, full async support including WASM, and deterministic simulation testing — MIT-licensed and runnable from source today, though explicitly a multi-year effort. [Read more](https://daily.dev/posts/iNiDUI3cG) - **Epic Games releases Lore, a Rust-written Git alternative for large binary assets:** Lore uses content-addressed chunking with Zstandard compression and a Merkle tree to store only changed chunks, targeting game development workflows where Git breaks down on large textures and 3D models — MIT-licensed, pre-1.0, no Git interoperability, and no independent benchmarks yet. [Read more](https://daily.dev/posts/pNrqpgf5S) - **Roc compiler Rust-to-Zig rewrite reaches feature parity after 487 days:** The 300,000-line rewrite found Zig's incremental build times at 35ms versus Rust's 3.4s, only 2 use-after-frees in error reporting versus 21 in the Rust version, and a better fit for their arena-heavy memory model — with a 0.1.0 release planned for later in 2026. [Read more](https://daily.dev/posts/kVdC7iim2) - **crates.io gets source code viewer, Svelte frontend, and GitHub account decoupling:** The six-month crates.io update ships a zip-based CDN source viewer with syntax highlighting and shareable line links, completes the Ember-to-Svelte migration, and begins decoupling accounts from GitHub via RFC #3946 to support alternative identity providers. [Read more](https://daily.dev/posts/7smw22f99) - **Rust Foundation mandates YubiKey hardware security keys for all crates.io infrastructure access:** After evaluating FIDO2/WebAuthn/PIV vendors, the Foundation selected Yubico YubiKeys via the Secure It Forward grant, distributed in person at the 2026 Rust All Hands in Amsterdam, with hardware-backed SSH keys and release-process certificates planned next. [Read more](https://daily.dev/posts/Kk74VS8ft) --- Tags: [#security](https://daily.dev/tags/security), [#rust](https://daily.dev/tags/rust) [View this post on daily.dev](https://daily.dev/posts/rust-hits-tiobe-top-10-grok-build-s-secret-repo-uploads-exposed-xyxgglqar) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/rust-hits-tiobe-top-10-grok-build-s-secret-repo-uploads-exposed-xyxgglqar","headline":"Rust hits TIOBE top 10, Grok Build's secret repo uploads exposed","text":"Rust officially entered the TIOBE top 10 for the first time, landing at 10th place after jumping from 18th in a single year. xAI open-sourced Grok Build, a Rust-written coding agent, but the launch was overshadowed by a security incident where the tool silently uploaded entire Git repositories to xAI's cloud storage before being disabled server-side on July 13. Rust 1.97.1 shipped as a point release to fix an LLVM miscompilation bug present since at least 1.87. The Bun Zig-to-Rust rewrite story continued generating debate, with the Zig creator and several analysts pushing back on Anthropic's framing of the AI agent involvement.","url":"https://daily.dev/posts/rust-hits-tiobe-top-10-grok-build-s-secret-repo-uploads-exposed-xyxgglqar","datePublished":"2026-07-20T04:21:13.273Z","dateModified":"2026-09-13T21:34:19.827Z","author":{"@type":"Organization","name":"Rust Digest","logo":"https://media.daily.dev/image/upload/s--YNSg30Q0--/f_auto,q_auto/v1773839405/logos/rust_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/rust_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":14},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/rust_digest","name":"Rust Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Rust Digest","item":"https://daily.dev/sources/rust_digest"},{"@type":"ListItem","position":3,"name":"Rust hits TIOBE top 10, Grok Build's secret repo uploads exposed"}]} ```