Security patch:

rust-lang/rust 1.94.1: Rust 1.94.1

GitHub·Backend·SecurityFix·3/26/2026

<a id="1.94.1"></a> - [Fix `std::thread::spawn` on wasm32-wasip1-threads](https://github.com/rust-lang/rust/pull/153634) - [Remove new methods added to `std::os::windows::fs::OpenOptionsExt`](https://github.com/rust-lang/rust/pull/153491) The new methods were unstable, but the trait itself is not s

Why it matters → A security vulnerability was patched. Upgrade affected versions to mitigate risk.

Who should care → Anyone running affected versions in production.

rust

View original source ↗

Source payload preview

{
  "id": 301852655,
  "url": "https://api.github.com/repos/rust-lang/rust/releases/301852655",
  "body": "<a id=\"1.94.1\"></a>\n\n- [Fix `std::thread::spawn` on wasm32-wasip1-threads](https://github.com/rust-lang/rust/pull/153634)\n- [Remove new methods added to `std::os::windows::fs::OpenOptionsExt`](https://github.com/rust-lang/rust/pull/153491) The new methods were unstable, but the trait itself is not sealed and so cannot be extended with non-default methods.\n- [Clippy: fix ICE in `match_same_arms`](https://github.com/rust-lang/rust-clippy/pull/16685)\n- [Cargo: update tar to 0.4.45](https://github.com/rust-lang/cargo/pull/16769) This resolves CVE-2026-33055 and CVE-2026-33056. Users of crates.io are not affected. See [blog](https://blog.rust-lang.org/2026/03/21/cve-2026-33056/) for
…