`update` command is not clear about security patches
Open
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 7k
- Forks
- 1.1k
- Avg merge
- 22h 40m
- Merged PRs (30d)
- 46
Description
I have the main three channels, plus one specific version of toolchains installed:
besfahbod@xxx:~$ rustup toolchain list
stable-x86_64-unknown-linux-gnu (default)
beta-x86_64-unknown-linux-gnu
nightly-x86_64-unknown-linux-gnu
1.28.0-x86_64-unknown-linux-gnu
When running rustup update, it doesn't tell me whether it's checking for security patches for 1.28.* or not.
besfahbod@xxx:~$ rustup update
info: syncing channel updates for 'stable-x86_64-unknown-linux-gnu'
info: syncing channel updates for 'beta-x86_64-unknown-linux-gnu'
info: syncing channel updates for 'nightly-x86_64-unknown-linux-gnu'
info: checking for self-updates
stable-x86_64-unknown-linux-gnu unchanged - rustc 1.29.1 (b801ae664 2018-09-20)
beta-x86_64-unknown-linux-gnu unchanged - rustc 1.30.0-beta.9 (a18eb4852 2018-09-30)
nightly-x86_64-unknown-linux-gnu unchanged - rustc 1.31.0-nightly (fc403ad98 2018-09-30)
So, does it? If so, not showing that is a bug, IMHO. If not, that's surprising and unsafe, IMHO.
What do you think?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the rustup update command and its handling of the installed 1.28.0 toolchain. Confirm whether security patches are checked, then make the command's output clearly state that behavior; done means a user can tell from the update result what happened.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cli
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100