Linux kernel adds Rust-based Untrusted Data API to validate user-space input

A new Rust-based Untrusted Data API is being developed for the Linux kernel to explicitly mark and validate data received from user-space before it is used internally. Led by developer Benno Lossin, the API introduces a wrapper type for untrusted data and a validate trait with associated functions. The initial consumer of this API is the I/O vector (IOV) code. Greg Kroah-Hartman has queued the patches into a dedicated 'untrusted' branch of driver-core.git, with potential inclusion in the Linux v7.2 merge window.

Vite 8 ships with Rolldown as sole bundler delivering up to 8x faster builds

Vite 8.0 ships with its most significant architectural change since version 2: replacing the dual esbuild/Rollup bundler setup with Rolldown, a single unified Rust-based bundler. Real-world build time improvements range from 57% to 8x faster, with some projects dropping from 46 seconds to 6 seconds. The release maintains full plugin API compatibility and includes a built-in compatibility layer for migrating esbuild and Rollup options. Additional improvements include native tsconfig paths support, emitDecoratorMetadata support, browser console forwarding, and a new plugin-react v6 that swaps Babel for Oxc. A known compatibility issue exists with Yarn PnP on Windows. Vite 8 is positioned as a framework-agnostic alternative to Turbopack, downloaded over 65 million times weekly.

Rust 2025H2 project goals conclude with progress on Polonius, Pin ergonomics and C++ interop

The Rust Project's 2025H2 goal period has concluded, covering 41 project goals including 13 flagship goals. Key updates include progress on Pin ergonomics and borrow checking, field projections language feature experiments with positive reception from the lang team, Polonius borrow checker stabilization work, C++/Rust interoperability problem space mapping, build-std RFC progress, cargo-script stabilization, and next-generation trait solver improvements. Several goals were completed, some continued into 2026, and a few were not completed due to funding or technical blockers.

Bun Rust rewrite found to contain undefined behavior in safe Rust code

A GitHub issue reports that Bun's Rust codebase contains undefined behavior (UB) in safe Rust, specifically in PathString::init which erases slice lifetimes and produces dangling references. The issue was reproduced and a fix was proposed in PR #30728, marking the function as unsafe with documented outlives contracts and auditing ~70 call sites. Community discussion criticizes Bun's apparent AI-assisted Zig-to-Rust rewrite, arguing that LLMs like Claude are not capable of correctly handling Rust's memory safety model, and that the rewrite should have been done incrementally by experienced Rust developers.

Toasty async ORM for Rust ships 0.6 with collection fields and TLS support

Toasty, an async ORM for Rust supporting both SQL and NoSQL databases, has released versions 0.4, 0.5, and 0.6. Key additions include deferred fields and a `.select()` method for controlling which fields are loaded during queries, `Vec<scalar>` collection fields with database-native storage (PostgreSQL arrays, JSON for other SQL DBs, DynamoDB native lists), and collection-specific filter expressions like `intersects()`. Additional improvements cover query expressions, db-native enums, optimistic version control, and TLS support. The author also notes that building unified SQL/NoSQL support has revealed more overlap between the two paradigms than initially expected.

Cloud Hypervisor 52 adds AMD SEV-SNP confidential VM support via KVM

Cloud Hypervisor 52 has been released with AMD SEV-SNP confidential VM support via Linux KVM on EPYC processors, complementing existing Microsoft MSHV support. The release includes measured boot support, a fix for a use-after-free vulnerability in the VirtIO-Block async I/O path, VFIO device passthrough via iommufd/vfio-cdev, multi-connection TCP live migration, async QCOW2 back-end with IO_uring, and a new core scheduling option for vCPU threads.

Rust project adds LLM moderation policy to restrict off-topic AI debates in PRs

The rust-lang/rust project has introduced a moderation policy restricting PR comments from discussing certain LLM-related topics, including long-term social/economic impacts, environmental impact, copyright status of LLM output, and moral judgements about LLM users. The moderation team will enforce these rules.