[deps]: Update Rust to v1.91.1

[renovate]

This PR contains the following updates:

Package	Update	Change
rust	minor	1.87.0 -> 1.91.1

---

Release Notes

rust-lang/rust (rust)

v1.91.1

Compare Source

===========================

• Enable file locking support in illumos. This fixes Cargo not locking the build directory on illumos.
• Fix wasm_import_module attribute cross-crate. This fixes linker errors on WASM targets.

v1.91.0

Compare Source

==========================

Language

• Lower pattern bindings in the order they're written and base drop order on primary bindings' order
• Stabilize declaration of C-style variadic functions for sysv64, win64, efiapi, and aapcs ABIs.
  This brings these ABIs in line with the C ABI: variadic functions can be declared in extern blocks but not defined.
• Add dangling_pointers_from_locals lint to warn against dangling pointers from local variables
• Upgrade semicolon_in_expressions_from_macros from warn to deny
• Stabilize LoongArch32 inline assembly
• Add warn-by-default integer_to_ptr_transmutes lint against integer-to-pointer transmutes
• Stabilize sse4a and tbm target features
• Add target_env = "macabi" and target_env = "sim" cfgs as replacements for the target_abi cfgs with the same values.

Compiler

• Don't warn on never-to-any as casts as unreachable

Platform Support

• Promote aarch64-pc-windows-gnullvm and x86_64-pc-windows-gnullvm to Tier 2 with host tools.
  Note: llvm-tools and MSI installers are missing but will be added in future releases.
• Promote aarch64-pc-windows-msvc to Tier 1

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Print thread ID in panic message
• Fix overly restrictive lifetime in core::panic::Location::file return type
• Guarantee parameter order for _by() variants of min / max/ minmax in std::cmp
• Document assumptions about Clone and Eq traits
• std::thread: Return error if setting thread stack size fails
  This used to panic within the standard library.

Stabilized APIs

• Path::file_prefix
• AtomicPtr::fetch_ptr_add
• AtomicPtr::fetch_ptr_sub
• AtomicPtr::fetch_byte_add
• AtomicPtr::fetch_byte_sub
• AtomicPtr::fetch_or
• AtomicPtr::fetch_and
• AtomicPtr::fetch_xor
• {integer}::strict_add
• {integer}::strict_sub
• {integer}::strict_mul
• {integer}::strict_div
• {integer}::strict_div_euclid
• {integer}::strict_rem
• {integer}::strict_rem_euclid
• {integer}::strict_neg
• {integer}::strict_shl
• {integer}::strict_shr
• {integer}::strict_pow
• i{N}::strict_add_unsigned
• i{N}::strict_sub_unsigned
• i{N}::strict_abs
• u{N}::strict_add_signed
• u{N}::strict_sub_signed
• PanicHookInfo::payload_as_str
• core::iter::chain
• u{N}::checked_signed_diff
• core::array::repeat
• PathBuf::add_extension
• PathBuf::with_added_extension
• Duration::from_mins
• Duration::from_hours
• impl PartialEq<str> for PathBuf
• impl PartialEq<String> for PathBuf
• impl PartialEq<str> for Path
• impl PartialEq<String> for Path
• impl PartialEq<PathBuf> for String
• impl PartialEq<Path> for String
• impl PartialEq<PathBuf> for str
• impl PartialEq<Path> for str
• Ipv4Addr::from_octets
• Ipv6Addr::from_octets
• Ipv6Addr::from_segments
• impl<T> Default for Pin<Box<T>> where Box<T>: Default, T: ?Sized
• impl<T> Default for Pin<Rc<T>> where Rc<T>: Default, T: ?Sized
• impl<T> Default for Pin<Arc<T>> where Arc<T>: Default, T: ?Sized
• Cell::as_array_of_cells
• u{N}::carrying_add
• u{N}::borrowing_sub
• u{N}::carrying_mul
• u{N}::carrying_mul_add
• BTreeMap::extract_if
• BTreeSet::extract_if
• impl Debug for windows::ffi::EncodeWide<'_>
• str::ceil_char_boundary
• str::floor_char_boundary
• impl Sum for Saturating<u{N}>
• impl Sum<&Self> for Saturating<u{N}>
• impl Product for Saturating<u{N}>
• impl Product<&Self> for Saturating<u{N}>

These previously stable APIs are now stable in const contexts:

• <[T; N]>::each_ref
• <[T; N]>::each_mut
• OsString::new
• PathBuf::new
• TypeId::of
• ptr::with_exposed_provenance
• ptr::with_exposed_provenance_mut

Cargo

• 🎉 Stabilize build.build-dir.
  This config sets the directory where intermediate build artifacts are stored.
  These artifacts are produced by Cargo and rustc during the build process.
  End users usually won't need to interact with them, and the layout inside
  build-dir is an implementation detail that may change without notice.
  (config doc)
  (build cache doc)
  #​15833
  #​15840
• The --target flag and the build.target configuration can now take literal
  "host-tuple" string, which will internally be substituted by the host
  machine's target triple.
  #​15838
  #​16003
  #​16032

Rustdoc

• In search results, rank doc aliases lower than non-alias items with the same name
• Raw pointers now work in type-based search like references. This means you can now search for things like *const u8 ->, and additionally functions that take or return raw pointers will now display their signature properly in search results.

Compatibility Notes

• Always require coroutine captures to be drop-live
• Apple: Always pass SDK root when linking with cc, and pass it via SDKROOT env var. This should fix linking issues with rustc running inside Xcode. Libraries in /usr/local/lib may no longer be linked automatically, if you develop or use a crate that relies on this, you should explicitly set cargo::rustc-link-search=/usr/local/lib in a build.rs script.
• Relaxed bounds in associated type bound position like in TraitRef<AssocTy: ?Sized> are now correctly forbidden
• Add unstable #[sanitize(xyz = "on|off")] built-in attribute that shadows procedural macros with the same name
• Fix the drop checker being more permissive for bindings declared with let-else
• Be more strict when parsing attributes, erroring on many invalid attributes
  • Error on invalid #[should_panic] attributes
  • Error on invalid #[link] attributes
• Mark all deprecation lints in name resolution as deny-by-default and also report in dependencies
• The lint semicolon_in_expressions_from_macros, for macro_rules! macros in expression position that expand to end in a semicolon (;), is now deny-by-default. It was already warn-by-default, and a future compatibility warning (FCW) that warned even in dependencies. This lint will become a hard error in the future.
• Trait impl modifiers (e.g., unsafe, !, default) in inherent impls are no longer syntactically valid
• Start reporting future breakage for ill_formed_attribute_input in dependencies
• Restrict the scope of temporaries created by the macros pin!, format_args!, write!, and writeln! in if let scrutinees in Rust Edition 2024. This applies Rust Edition 2024's if let temporary scope rules to these temporaries, which previously could live past the if expression regardless of Edition.
• Invalid numeric literal suffixes in tuple indexing, tuple struct indexing, and struct field name positions are now correctly rejected
• Closures marked with the keyword static are now syntactically invalid
• Shebangs inside --cfg and --check-cfg arguments are no longer allowed
• Add future incompatibility lint for temporary lifetime shortening in Rust 1.92

Cargo compatibility notes:

• cargo publish no longer keeps .crate tarballs as final build artifacts
  when build.build-dir is set. These tarballs were previously included due to
  an oversight and are now treated as intermediate artifacts.
  To get .crate tarballs as final artifacts, use cargo package.
  In a future version, this change will apply regardless of build.build-dir.
  #​15910
• Adjust Cargo messages to match rustc diagnostic style.
  This changes some of the terminal colors used by Cargo messages.
  #​15928
• Tools and projects relying on the
  internal details of Cargo's build-dir
  may not work for users changing their build-dir layout.
  For those doing so, we'd recommend proactively testing these cases
  particularly as we are considering changing the default location of the build-dir in the future
  (cargo#16147).
  If you can't migrate off of Cargo's internal details,
  we'd like to learn more about your use case as we prepare to change the layout of the build-dir
  (cargo#15010).

Internal Changes

These changes do not affect any public interfaces of Rust, but they represent
significant improvements to the performance or internals of rustc and related
tools.

• Update to LLVM 21

v1.90.0

Compare Source

===========================

Language

• Split up the unknown_or_malformed_diagnostic_attributes lint. This lint has been split up into four finer-grained lints, with unknown_or_malformed_diagnostic_attributes now being the lint group that contains these lints:
  1. unknown_diagnostic_attributes: unknown to the current compiler
  2. misplaced_diagnostic_attributes: placed on the wrong item
  3. malformed_diagnostic_attributes: malformed attribute syntax or options
  4. malformed_diagnostic_format_literals: malformed format string literal
• Allow constants whose final value has references to mutable/external memory, but reject such constants as patterns
• Allow volatile access to non-Rust memory, including address 0

Compiler

• Use lld by default on x86_64-unknown-linux-gnu.
• Tier 3 musl targets now link dynamically by default. Affected targets:
  • mips64-unknown-linux-muslabi64
  • powerpc64-unknown-linux-musl
  • powerpc-unknown-linux-musl
  • powerpc-unknown-linux-muslspe
  • riscv32gc-unknown-linux-musl
  • s390x-unknown-linux-musl
  • thumbv7neon-unknown-linux-musleabihf

Platform Support

• Demote x86_64-apple-darwin to Tier 2 with host tools

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Stabilize u*::{checked,overflowing,saturating,wrapping}_sub_signed
• Allow comparisons between CStr, CString, and Cow<CStr>
• Remove some unsized tuple impls since unsized tuples can't be constructed
• Set MSG_NOSIGNAL for UnixStream
• proc_macro::Ident::new now supports $crate.
• Guarantee the pointer returned from Thread::into_raw has at least 8 bytes of alignment

Stabilized APIs

• u{n}::checked_sub_signed
• u{n}::overflowing_sub_signed
• u{n}::saturating_sub_signed
• u{n}::wrapping_sub_signed
• impl Copy for IntErrorKind
• impl Hash for IntErrorKind
• impl PartialEq<&CStr> for CStr
• impl PartialEq<CString> for CStr
• impl PartialEq<Cow<CStr>> for CStr
• impl PartialEq<&CStr> for CString
• impl PartialEq<CStr> for CString
• impl PartialEq<Cow<CStr>> for CString
• impl PartialEq<&CStr> for Cow<CStr>
• impl PartialEq<CStr> for Cow<CStr>
• impl PartialEq<CString> for Cow<CStr>

These previously stable APIs are now stable in const contexts:

• <[T]>::reverse
• f32::floor
• f32::ceil
• f32::trunc
• f32::fract
• f32::round
• f32::round_ties_even
• f64::floor
• f64::ceil
• f64::trunc
• f64::fract
• f64::round
• f64::round_ties_even

Cargo

• Add http.proxy-cainfo config for proxy certs
• Use gix for cargo package
• feat(publish): Stabilize multi-package publishing

Rustdoc

• Add ways to collapse all impl blocks. Previously the "Summary" button and "-" keyboard shortcut would never collapse impl blocks, now they do when shift is held
• Display unsafe attributes with unsafe() wrappers

Compatibility Notes

• Use lld by default on x86_64-unknown-linux-gnu.
  See also https://blog.rust-lang.org/2025/09/01/rust-lld-on-1.90.0-stable/.
• Make core::iter::Fuse's Default impl construct I::default() internally as promised in the docs instead of always being empty
• Set MSG_NOSIGNAL for UnixStream
  This may change program behavior but results in the same behavior as other primitives (e.g., stdout, network sockets).
  Programs relying on signals to terminate them should update handling of sockets to handle errors on write by exiting.
• On Unix std::env::home_dir will use the fallback if the HOME environment variable is empty
• We now reject unsupported extern "{abi}"s consistently in all positions. This primarily affects the use of implementing traits on an extern "{abi}" function pointer, like extern "stdcall" fn(), on a platform that doesn't support that, like aarch64-unknown-linux-gnu. Direct usage of these unsupported ABI strings by declaring or defining functions was already rejected, so this is only a change for consistency.
• const-eval: error when initializing a static writes to that static
• Check that the proc_macro_derive macro has correct arguments when applied to the crate root

v1.89.0

Compare Source

==========================

Language

• Stabilize explicitly inferred const arguments (feature(generic_arg_infer))
• Add a warn-by-default mismatched_lifetime_syntaxes lint.
  This lint detects when the same lifetime is referred to by different syntax categories between function arguments and return values, which can be confusing to read, especially in unsafe code.
  This lint supersedes the warn-by-default elided_named_lifetimes lint.
• Expand unpredictable_function_pointer_comparisons to also lint on function pointer comparisons in external macros
• Make the dangerous_implicit_autorefs lint deny-by-default
• Stabilize the avx512 target features
• Stabilize kl and widekl target features for x86
• Stabilize sha512, sm3 and sm4 target features for x86
• Stabilize LoongArch target features f, d, frecipe, lasx, lbt, lsx, and lvz
• Remove i128 and u128 from improper_ctypes_definitions
• Stabilize repr128 (#[repr(u128)], #[repr(i128)])
• Allow #![doc(test(attr(..)))] everywhere
• Extend temporary lifetime extension to also go through tuple struct and tuple variant constructors
• extern "C" functions on the wasm32-unknown-unknown target now have a standards compliant ABI

Compiler

• Default to non-leaf frame pointers on aarch64-linux
• Enable non-leaf frame pointers for Arm64EC Windows
• Set Apple frame pointers by architecture

Platform Support

• Add new Tier-3 targets loongarch32-unknown-none and loongarch32-unknown-none-softfloat
• x86_64-apple-darwin is in the process of being demoted to Tier 2 with host tools

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Specify the base path for file!
• Allow storing format_args!() in a variable
• Add #[must_use] to [T; N]::map
• Implement DerefMut for Lazy{Cell,Lock}
• Implement Default for array::IntoIter
• Implement Clone for slice::ChunkBy
• Implement io::Seek for io::Take

Stabilized APIs

• NonZero<char>
• Many intrinsics for x86, not enumerated here
  • AVX512 intrinsics
  • SHA512, SM3 and SM4 intrinsics
• File::lock
• File::lock_shared
• File::try_lock
• File::try_lock_shared
• File::unlock
• NonNull::from_ref
• NonNull::from_mut
• NonNull::without_provenance
• NonNull::with_exposed_provenance
• NonNull::expose_provenance
• OsString::leak
• PathBuf::leak
• Result::flatten
• std::os::linux::net::TcpStreamExt::quickack
• std::os::linux::net::TcpStreamExt::set_quickack

These previously stable APIs are now stable in const contexts:

• <[T; N]>::as_mut_slice
• <[u8]>::eq_ignore_ascii_case
• str::eq_ignore_ascii_case

Cargo

• cargo fix and cargo clippy --fix now default to the same Cargo target selection as other build commands. Previously it would apply to all targets (like binaries, examples, tests, etc.). The --edition flag still applies to all targets.
• Stabilize doctest-xcompile. Doctests are now tested when cross-compiling. Just like other tests, it will use the runner setting to run the tests. If you need to disable tests for a target, you can use the ignore doctest attribute to specify the targets to ignore.

Rustdoc

• On mobile, make the sidebar full width and linewrap. This makes long section and item names much easier to deal with on mobile.

Compatibility Notes

• Make missing_fragment_specifier an unconditional error
• Enabling the neon target feature on aarch64-unknown-none-softfloat causes a warning because mixing code with and without that target feature is not properly supported by LLVM
• Sized Hierarchy: Part I
  • Introduces a small breaking change affecting ?Sized bounds on impls on recursive types which contain associated type projections. It is not expected to affect any existing published crates. Can be fixed by refactoring the involved types or opting into the sized_hierarchy unstable feature. See the FCP report for a code example.
• The warn-by-default elided_named_lifetimes lint is superseded by the warn-by-default mismatched_lifetime_syntaxes lint.
• Error on recursive opaque types earlier in the type checker
• Type inference side effects from requiring element types of array repeat expressions are Copy are now only available at the end of type checking
• The deprecated accidentally-stable std::intrinsics::{copy,copy_nonoverlapping,write_bytes} are now proper intrinsics. There are no debug assertions guarding against UB, and they cannot be coerced to function pointers.
• Remove long-deprecated std::intrinsics::drop_in_place
• Make well-formedness predicates no longer coinductive
• Remove hack when checking impl method compatibility
• Remove unnecessary type inference due to built-in trait object impls
• Lint against "stdcall", "fastcall", and "cdecl" on non-x86-32 targets
• Future incompatibility warnings relating to the never type (!) are now reported in dependencies
• Ensure std::ptr::copy_* intrinsics also perform the static self-init checks
• extern "C" functions on the wasm32-unknown-unknown target now have a standards compliant ABI

Internal Changes

These changes do not affect any public interfaces of Rust, but they represent
significant improvements to the performance or internals of rustc and related
tools.

• Correctly un-remap compiler sources paths with the rustc-dev component

v1.88.0

Compare Source

==========================

Language

• Stabilize #![feature(let_chains)] in the 2024 edition.
  This feature allows &&-chaining let statements inside if and while, allowing intermixture with boolean expressions. The patterns inside the let sub-expressions can be irrefutable or refutable.
• Stabilize #![feature(naked_functions)].
  Naked functions allow writing functions with no compiler-generated epilogue and prologue, allowing full control over the generated assembly for a particular function.
• Stabilize #![feature(cfg_boolean_literals)].
  This allows using boolean literals as cfg predicates, e.g. #[cfg(true)] and #[cfg(false)].
• Fully de-stabilize the #[bench] attribute. Usage of #[bench] without #![feature(custom_test_frameworks)] already triggered a deny-by-default future-incompatibility lint since Rust 1.77, but will now become a hard error.
• Add warn-by-default dangerous_implicit_autorefs lint against implicit autoref of raw pointer dereference.
  The lint will be bumped to deny-by-default in the next version of Rust.
• Add invalid_null_arguments lint to prevent invalid usage of null pointers.
  This lint is uplifted from clippy::invalid_null_ptr_usage.
• Change trait impl candidate preference for builtin impls and trivial where-clauses.
• Check types of generic const parameter defaults

Compiler

• Stabilize -Cdwarf-version for selecting the version of DWARF debug information to generate.

Platform Support

• Demote i686-pc-windows-gnu to Tier 2.

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Libraries

• Remove backticks from #[should_panic] test failure message.
• Guarantee that [T; N]::from_fn is generated in order of increasing indices., for those passing it a stateful closure.
• The libtest flag --nocapture is deprecated in favor of the more consistent --no-capture flag.
• Guarantee that {float}::NAN is a quiet NaN.

Stabilized APIs

• Cell::update
• impl Default for *const T
• impl Default for *mut T
• HashMap::extract_if
• HashSet::extract_if
• hint::select_unpredictable
• proc_macro::Span::line
• proc_macro::Span::column
• proc_macro::Span::start
• proc_macro::Span::end
• proc_macro::Span::file
• proc_macro::Span::local_file
• <[T]>::as_chunks
• <[T]>::as_chunks_mut
• <[T]>::as_chunks_unchecked
• <[T]>::as_chunks_unchecked_mut
• <[T]>::as_rchunks
• <[T]>::as_rchunks_mut
• mod ffi::c_str

These previously stable APIs are now stable in const contexts:

• NonNull<T>::replace
• <*mut T>::replace
• std::ptr::swap_nonoverlapping
• Cell::replace
• Cell::get
• Cell::get_mut
• Cell::from_mut
• Cell::as_slice_of_cells

Cargo

• Stabilize automatic garbage collection.
• use zlib-rs for gzip compression in rust code

Rustdoc

• Doctests can be ignored based on target names using ignore-* attributes.
• Stabilize the --test-runtool and --test-runtool-arg CLI options to specify a program (like qemu) and its arguments to run a doctest.

Compatibility Notes

• Finish changing the internal representation of pasted tokens. Certain invalid declarative macros that were previously accepted in obscure circumstances are now correctly rejected by the compiler. Use of a tt fragment specifier can often fix these macros.
• Fully de-stabilize the #[bench] attribute. Usage of #[bench] without #![feature(custom_test_frameworks)] already triggered a deny-by-default future-incompatibility lint since Rust 1.77, but will now become a hard error.
• Fix borrow checking some always-true patterns.
  The borrow checker was overly permissive in some cases, allowing programs that shouldn't have compiled.
• Update the minimum external LLVM to 19.
• Make it a hard error to use a vector type with a non-Rust ABI without enabling the required target feature.

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-28730
• Link: https://bitwarden.atlassian.net/browse/PM-28730

[github-actions]

🔍 SDK Breaking Change Detection Results

SDK Version: renovate/rust (4f0ac86)
Completed: 2025-11-24 03:04:28 UTC
Total Time: 217s

Client	Status	Details
typescript	✅ No breaking changes detected	TypeScript compilation passed with new SDK version - View Details

---

Breaking change detection completed. View SDK workflow

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.36%. Comparing base (f118570) to head (4f0ac86).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #576      +/-   ##
==========================================
- Coverage   79.54%   78.36%   -1.18%     
==========================================
  Files         302      279      -23     
  Lines       32295    28692    -3603     
==========================================
- Hits        25688    22484    -3204     
+ Misses       6607     6208     -399     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.