Auto merge of #154343 - arlosi:update-stable-cargo, r=Mark-Simulacrum

Cargo stable backports

1 commits in 292f395c297d4f99171325b0842ac4ea4ff3b386..29ea6fb6a5db279426f4cc4e17aa385f05a0cfbc
2026-03-21 06:42:37 -0500 to 2026-03-24 17:37:48 -0400
- [stable 1.94] Downgrade curl-sys to 0.4.83 (https://github.com/rust-lang/cargo/pull/16787)

Update release notes to mention the Cargo fix and fix broken link.
This commit is contained in:
bors
2026-03-25 01:22:28 +00:00
2 changed files with 4 additions and 3 deletions
+3 -2
View File
@@ -7,10 +7,11 @@ Version 1.94.1 (2026-03-26)
* [Remove new methods added to `std::os::windows::fs::OpenOptionsExt`](https://github.com/rust-lang/rust/pull/153491)
The new methods were unstable, but the trait itself is not sealed and so
cannot be extended with non-default methods.
* [[Clippy] Fix ICE in `match_same_arms`](https://github.com/rust-lang/rust-clippy/pull/16685)
* [[Cargo] Update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769)
* [Clippy: fix ICE in `match_same_arms`](https://github.com/rust-lang/rust-clippy/pull/16685)
* [Cargo: update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769)
This resolves CVE-2026-33055 and CVE-2026-33056. Users of crates.io are not affected.
See [blog](https://blog.rust-lang.org/2026/03/21/cve-2026-33056/) for more details.
* [Cargo: fix certificate validation errors on FreeBSD](https://github.com/rust-lang/cargo/pull/16787)
Version 1.94.0 (2026-03-05)
==========================