You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+8Lines changed: 8 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,6 +11,8 @@ The headlines for this release are:
11
11
be proxied to the rust-analyzer component for the current toolchain.
12
12
2. Bump the [clap] dependency from 2.x to 3.x. It's a major version bump, so there are some
13
13
help text changes, but the command line interface is unchanged.
14
+
3. Remove GPG signature support, which will result in the removal of the `rustup show keys` command.
15
+
This change is necessary because the use of SHA-1 for signature verification is [no longer secure], as it has been found to be vulnerable to attacks. However, rest assured that rustup remains safe to use, as we still have checksum verification in place. We plan to reintroduce signature support as soon as we have a more secure solution.
14
16
15
17
In addition to a lot of work on the codebase itself, due to the length of time since the last
16
18
release this one has a record number of contributors and we thank you all for your efforts and time.
@@ -32,6 +34,8 @@ please review the repository.
32
34
### Changed
33
35
34
36
- Bump the `clap` dependency from 2.x to 3.x [pr#3064]
37
+
- Remove GPG signature support [pr#3277]
38
+
- Don't add toolchain bin to PATH on Windows [pr#3178]
35
39
- Remove use of hard links to symlinks on macOS [pr#3137]
36
40
- Avoid deduplicate PATH entries added during build [pr#2848]
37
41
- The toolchain name cannot be left blank [pr#2993]
0 commit comments