From 7e4a53e01148d420da9caf85a7da81e861f88d27 Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Mon, 21 Sep 2026 15:53:00 +0500 Subject: [PATCH] docs(catalog): record the setup-rust-toolchain v2 review outcome v2.0.0 moves the implicit deny-warnings contract from RUSTFLAGS to the build.warnings cargo config (cargo >= 1.97); callers pinning older toolchains would silently lose the gate. Record the finding so the next refresh does not re-review from zero. Signed-off-by: rldyourmnd --- catalog/tools.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/catalog/tools.yml b/catalog/tools.yml index f4e67ad..760173b 100644 --- a/catalog/tools.yml +++ b/catalog/tools.yml @@ -559,8 +559,12 @@ tools: current_version: "v1.17.0" pin: "actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659" notes: >- - Upstream v2.0.0 released; major bump held pending input-contract - review. Track before next refresh. + Upstream v2.0.0 reviewed 2026-09-21: it replaces the implicit + `RUSTFLAGS=-D warnings` default with `build.warnings` (default `deny`) + via `CARGO_BUILD_WARNINGS`, which needs cargo >= 1.97. Callers pinning + older toolchains would silently lose the deny-warnings gate, so the + bump waits for an explicit contract decision — the Dependabot PR is the + tracking surface. used_by: - .github/workflows/benchmark.yml - .github/workflows/benchmark-compare.yml