<p><strong>TLDR:</strong> Cloudflare landed panic and abort recovery for Rust Workers in WebAssembly, a meaningful reliability fix for anyone running Rust on the edge. Ubuntu 26.04 LTS shipped with sudo-rs and rust-coreutils as defaults, though cp, mv, and rm still fall back to GNU due to unresolved TOCTOU races. Google confirmed Rust in the Pixel 10 modem firmware, chosen specifically because garbage-collected languages can’t meet real-time constraints. Encore published a detailed post-mortem on building a 67,000-line Rust runtime for TypeScript backends, with some concrete numbers worth reading.</p>
<hr>
<h2>Cloudflare adds panic recovery to Rust Workers</h2>
<p>Historically, a panic in a Rust Worker would poison the entire Wasm instance and cause cascading failures. Cloudflare fixed this by implementing <code>panic=unwind</code> support using the WebAssembly Exception Handling proposal, so panics now surface as JavaScript <code>PanicError</code> exceptions while keeping the Wasm instance alive. They also added abort classification via <code>Exception.Tag</code> to distinguish recoverable errors from genuine OOM situations, plus a <code>--reset-state-function</code> hook for reinitializing Wasm library state. The changes are in workers-rs 0.8.0 behind <code>--panic-unwind</code>, with plans to make it the default. They also backported modern Wasm exception handling to Node.js 22 and 24 to unblock broader ecosystem adoption.</p>
<h2>Google put Rust in the Pixel 10 modem</h2>
<p>Google shoehorned a Rust component into the Pixel 10’s modem firmware rather than rewriting the entire legacy C/C++ baseband stack. The motivation is straightforward: Project Zero found over two dozen Exynos modem vulnerabilities, 18 of them severe. Rust was chosen over garbage-collected languages because modem firmware runs a real-time OS where GC pauses are simply not acceptable. This is a good example of the incremental adoption story — you don’t have to rewrite everything to get memory safety where it matters most.</p>
<h2>Ubuntu 26.04 ships Rust system components as defaults</h2>
<p>Ubuntu 26.04 LTS ‘Resolute Raccoon’ shipped on April 23 with sudo-rs replacing the classic C sudo implementation and rust-coreutils (uutils) replacing GNU coreutils in most contexts. The coreutils adoption came after a two-phase security audit by Zellic that found 113 issues including 70 CVEs — the vast majority are resolved in the 0.8.0 release that ships with 26.04. The exception: cp, mv, and rm still use GNU coreutils because 8 TOCTOU race conditions remain unresolved. Ubuntu 26.10 is targeting 100% rust-coreutils once those are fixed.</p>
<h2>Encore’s 67k-line Rust runtime for TypeScript</h2>
<p>Encore replaced a Go sidecar (which added 2-4ms per request via IPC) with a Rust runtime that handles the full HTTP lifecycle, connection pooling, pub/sub, tracing, and metrics — all on Tokio, while Node.js handles only business logic. The result is 9x the throughput of Express.js with 80% lower P99 latency. The engineering challenges are worth reading in detail: forking napi-rs’s ThreadSafeFunction to capture JS return values, bridging JS promises to Rust via Tokio channels, and embedding Pingora as an in-process API gateway. Their lessons learned — invest in structured error types early, add OpenTelemetry from the start — are the kind of thing you only figure out after the fact.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Rust coreutils audit numbers:</strong> The Zellic audit found 113 issues total across two rounds; 44 CVEs are now publicly disclosed. Worth reviewing if you’re running uutils in production.</li>
<li><strong>Rusternetes:</strong> A ground-up Kubernetes reimplementation in Rust, 216,000+ lines across 10 crates, currently passing 90% of official Kubernetes v1.35 conformance tests (398/441). Supports etcd, SQLite, and PostgreSQL backends.</li>
<li><strong>redb 4.1:</strong> The embedded Rust key-value store released with up to 1.5x speedup on some benchmarks; Claude authored the dynamic read/write cache partitioning that drove the improvement.</li>
<li><strong>Obscura headless browser:</strong> A Rust-based headless browser running V8 with CDP support, claiming 30 MB memory vs 200+ MB for headless Chrome and 85ms page loads vs ~500ms. Ships as a single binary with no Node.js dependency.</li>
<li><strong>safe-gc:</strong> A mark-and-sweep GC library implemented entirely without <code>unsafe</code> code, using arena-backed <code>Vec</code> with <code>Gc&lt;T&gt;</code> and <code>Root&lt;T&gt;</code> index types instead of raw pointers. The post explains why a copying collector failed under Rust’s borrow checker.</li>
<li><strong>hx Haskell package manager:</strong> Built in Rust, claims a native dependency resolver 24x faster than Cabal’s and 12ms startup vs 45-89ms for existing tools. Also introduces BHC, a clean-slate Haskell compiler written in Rust.</li>
<li><strong>Look launcher:</strong> A free macOS launcher with a Rust search engine and SwiftUI shell, sub-millisecond local search, no Accessibility or Full Disk Access permissions required. Configured via a plain key=value file.</li>
<li><strong>Symposium joins Rust Innovation Lab:</strong> Niko Matsakis is leading this tool that auto-installs MCP servers and AI extensions based on a crate’s dependencies — the Rust Foundation’s second RIL project.</li>
<li><strong><a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> frontend migration:</strong> The team ported from Ember.js to Svelte 5; the new frontend is live at <a href="http://crates.io/svelte/" target="_blank" rel="noopener nofollow">crates.io/svelte/</a> for testing and could become the default within weeks.</li>
<li><strong>Rayon walkthrough:</strong> A practical post showing an 8x speedup on a 10-million-element workload with parallel iterators, including a useful section on when parallelism hurts (small data, low per-element cost).</li>
<li><strong>rust-analyzer 0.3.2870:</strong> 20 bug fixes including better completions that respect <code>#[deprecated]</code>, parser support for unstable type const items, and several panic fixes in code assists.</li>
<li><strong>OpenAI Windows sandbox:</strong> OpenAI open-sourced a Windows security sandbox for Codex built in Rust using restricted tokens, file system ACLs, and firewall rules — currently the only AI coding tool with proper sandboxing on Windows.</li>
<li><strong>honker SQLite extension:</strong> Brings Postgres-style NOTIFY/LISTEN semantics to SQLite via WAL file watching, with ~1ms cross-process notification latency and bindings for Rust, Python, Go, Node.js, and others.</li>
</ul>


Rust language updates, async patterns, and systems programming.

Rust Digest

A roundup of notable Rust ecosystem developments: Cloudflare added panic/abort recovery to Rust Workers in WebAssembly using the Wasm Exception Handling proposal, surfacing panics as JS exceptions without killing the Wasm instance. Ubuntu 26.04 LTS ships sudo-rs and rust-coreutils by default, though cp/mv/rm still fall back to GNU due to unresolved TOCTOU races. Google confirmed Rust in Pixel 10 modem firmware, chosen over GC languages due to real-time OS constraints. Encore published a detailed post-mortem on replacing a Go sidecar with a 67,000-line Rust/Tokio runtime for TypeScript backends, achieving 9x Express throughput and 80% lower P99 latency. Additional items cover Rusternetes (Kubernetes reimplementation in Rust), redb 4.1, a Rust headless browser, crates.io frontend migration to Svelte 5, and more.

Cloudflare fixes Rust Worker panics in Wasm, Ubuntu 26.04 ships sudo-rs by default