[0.2] Backports

.github/renovate.json5

@@ -0,0 +1,42 @@
+{
+  $schema: "https://docs.renovatebot.com/renovate-schema.json",
+  extends: [
+    "config:recommended",
+    ":maintainLockFilesMonthly",
+    "helpers:pinGitHubActionDigestsToSemver"
+  ],
+  packageRules: [
+    {
+      matchCategories: [
+        "rust"
+      ],
+      matchJsonata: [
+        "isBreaking != true"
+      ],
+      // Disable non-breaking change updates because they
+      // are updated periodically with lockfile maintainance.
+      enabled: false,
+    },
+    {
+      matchManagers: [
+        "github-actions"
+      ],
+      // Every month
+      schedule: "* 0 1 * *",
+      groupName: "Github Actions",
+    },
+    {
+      // Don't updates such as 23.10 -> mantic-20240530
+      "matchDatasources": ["docker"],
+      "pinDigests": false
+    }
+  ],
+  // Receive any update that fixes security vulnerabilities.
+  // We need this because we disabled "patch" updates for Rust.
+  // Note: You need to enable "Dependabot alerts" in "Code security" GitHub
+  // Settings to receive security updates.
+  // See https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts
+  vulnerabilityAlerts: {
+    enabled: true,
+  },
+}

.github/workflows/ci.yaml

@@ -48,7 +48,7 @@ jobs:
         with:
           persist-credentials: false
       - run: rustup update stable --no-self-update
-      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
       # Here we use the latest stable Rust toolchain already installed by GitHub
       # Ideally we should run it for every target, but we cannot rely on unstable toolchains
       # due to Clippy not being consistent between them.
@@ -82,7 +82,7 @@ jobs:
         run: ./ci/install-rust.sh
 
       - name: Install semver-checks
-        uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
+        uses: taiki-e/install-action@5b4d68e2e660441203ab128a23676f1e4faf1532 # v2.86.3
         if: matrix.toolchain == 'stable'
         with:
           tool: cargo-semver-checks
@@ -94,7 +94,7 @@ jobs:
       # FIXME(ci): These `du` statements are temporary for debugging cache
       - name: Target size before restoring cache
         run: du -sh target | sort -k 2 || true
-      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           key: ${{ matrix.os }}-${{ matrix.toolchain }}
       - name: Target size after restoring cache
@@ -151,7 +151,7 @@ jobs:
           persist-credentials: false
       - name: Setup Rust toolchain
         run: ./ci/install-rust.sh
-      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           key: ${{ matrix.target }}
 
@@ -191,34 +191,34 @@ jobs:
           - target: aarch64-linux-android
           - target: aarch64-unknown-linux-musl
           - target: aarch64-unknown-linux-musl
-            env: { TEST_MUSL_V1_2_3: 1 }
+            env: { TEST_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           - target: arm-linux-androideabi
           - target: arm-unknown-linux-gnueabihf
           - target: arm-unknown-linux-musleabihf
           - target: arm-unknown-linux-musleabihf
-            env: { TEST_MUSL_V1_2_3: 1 }
+            env: { TEST_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           # FIXME(#4297): Disabled due to spurious failue
           # - target: i686-linux-android
           - target: i686-unknown-linux-musl
           - target: i686-unknown-linux-musl
-            env: { TEST_MUSL_V1_2_3: 1 }
+            env: { TEST_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           - target: loongarch64-unknown-linux-gnu
           - target: loongarch64-unknown-linux-musl
           - target: loongarch64-unknown-linux-musl
-            env: { TEST_MUSL_V1_2_3: 1 }
+            env: { TEST_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           - target: powerpc64-unknown-linux-gnu
           - target: powerpc64-unknown-linux-musl
           - target: powerpc64-unknown-linux-musl
-            env: { RUST_LIBC_UNSTABLE_MUSL_V1_2_3: 1 }
+            env: { RUST_LIBC_UNSTABLE_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           - target: powerpc64le-unknown-linux-gnu
           - target: powerpc64le-unknown-linux-musl
           - target: powerpc64le-unknown-linux-musl
-            env: { TEST_MUSL_V1_2_3: 1 }
+            env: { TEST_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           - target: riscv64gc-unknown-linux-gnu
           - target: s390x-unknown-linux-gnu
@@ -235,14 +235,23 @@ jobs:
           # - target: x86_64-unknown-linux-gnux32
           - target: x86_64-unknown-linux-musl
           - target: x86_64-unknown-linux-musl
-            env: { TEST_MUSL_V1_2_3: 1 }
+            env: { TEST_MUSL_V1_2: 1 }
             artifact-tag: new-musl
           # FIXME: It seems some items in `src/unix/mod.rs` aren't defined on redox actually.
           # - target: x86_64-unknown-redox
 
           # FIXME(ppc): SIGILL running tests, see
           # https://github.com/rust-lang/libc/pull/4254#issuecomment-2636288713
           # - target: powerpc-unknown-linux-gnu
+
+          # Testing iOS and tvOS should give us reasonably good coverage for Apple platforms.
+          # (watchOS is similar to tvOS, and visionOS is similar to iOS).
+          - target: aarch64-apple-ios-sim
+            os: macos-26
+            cargo-apple-runner: true
+          - target: aarch64-apple-tvos-sim
+            os: macos-26
+            cargo-apple-runner: true
     runs-on: ${{ matrix.os && matrix.os || 'ubuntu-26.04' }}
     timeout-minutes: 25
     env:
@@ -253,7 +262,7 @@ jobs:
           persist-credentials: false
       - name: Setup Rust toolchain
         run: ./ci/install-rust.sh
-      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           key: ${{ matrix.target }}
 
@@ -264,12 +273,21 @@ jobs:
             jq -r 'to_entries | map("\(.key)=\(.value|tostring)") | .[]' >>$GITHUB_ENV
         shell: bash
 
+      - name: Install `cargo-apple-runner`
+        if: matrix.cargo-apple-runner
+        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        with:
+          tool: cargo-apple-runner
+
       - name: Run natively
-        if: runner.os != 'Linux'
+        if: runner.os != 'Linux' && !matrix.cargo-apple-runner
         run: ./ci/run.sh ${{ matrix.target }}
       - name: Run in Docker
-        if: runner.os == 'Linux'
+        if: runner.os == 'Linux' && !matrix.cargo-apple-runner
         run: ./ci/run-docker.sh ${{ matrix.target }}
+      - name: Run on Apple's simulator
+        if: matrix.cargo-apple-runner
+        run: ./ci/run-apple-simulator.sh ${{ matrix.target }}
 
       - name: Create CI artifacts
         id: create_artifacts
@@ -304,7 +322,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Test on FreeBSD
-        uses: vmactions/freebsd-vm@77ed28d336d03fe19a3f4f7266c1d2c4714dd79d # v1.5.2
+        uses: vmactions/freebsd-vm@83b151f58c6047089f4c80eb5ba2039d158ce093 # v1.5.3
         if: contains(matrix.target, 'freebsd')
         with:
           release: ${{ matrix.release }}
@@ -331,7 +349,7 @@ jobs:
           run: ./ci/bsd-run.sh ${{ matrix.target }}
 
       - name: Test on NetBSD
-        uses: vmactions/netbsd-vm@e7ac71b97abbe8437cec8859a5acf72dfa6a8be0 # v1.4.5
+        uses: vmactions/netbsd-vm@00081e82b14bc40114eb97f32b4455306828516b # v1.4.6
         if: contains(matrix.target, 'netbsd')
         with:
           release: "10.1"
@@ -366,7 +384,7 @@ jobs:
     - name: Install Rust
       # FIXME(rust-lang/rust#160439): unpin once the issue is fixed
       run: rustup update nightly-2026-08-02 --no-self-update && rustup default nightly-2026-08-02
-    - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+    - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
     - run: cargo doc --workspace --no-deps
 
   zizmor:
@@ -382,7 +400,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
+        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
 
   # One job that "summarizes" the success state of this pipeline. This can then be added to branch
   # protection, rather than having to add each job separately.

CONTRIBUTING.md

@@ -112,28 +112,79 @@ chance of being accepted:
 
 ### Source links
 
-Please include permalinks to headers in commit messages for all API changes.
+Please include permalinks to headers in commit messages for all API changes;
+the maintainers need to compare changes against these sources, and we also want
+to keep a record of exactly what the API looked like when bindings were written.
 Common sources include:
 
-* Linux uapi: https://github.com/torvalds/linux/tree/master/include/uapi
-* Glibc: https://github.com/sailfishos-mirror/glibc (original is https://sourceware.org/git/?p=glibc.git;a=tree)
-* Musl: https://github.com/kraj/musl (original is https://git.musl-libc.org/cgit/musl/tree/)
-* Apple XNU: https://github.com/apple-oss-distributions/xnu, libc https://github.com/apple-oss-distributions/Libc/tree/main/include
-* Android: https://cs.android.com/android/platform/superproject/main
-* FreeBSD: https://github.com/freebsd/freebsd-src/tree/main/lib/libc
-* Illumos: https://github.com/illumos/illumos-gate/tree/master/usr/src/lib/libc
-* Fuchsia: https://cs.opensource.google/fuchsia/fuchsia/+/main:zircon/
+* Apple XNU: <https://github.com/apple-oss-distributions/xnu>,
+  libc <https://github.com/apple-oss-distributions/Libc/tree/main/include>
+* Android: <https://cs.android.com/android/platform/superproject/main>
+* Cygwin: <https://github.com/cygwin/cygwin> (official mirror),
+  <https://cygwin.com/cgit/newlib-cygwin/tree> (original)
+* DragonFlyBSD: <https://github.com/DragonFlyBSD/DragonFlyBSD> (official mirror),
+  <https://gitweb.dragonflybsd.org/?p=dragonfly.git;a=tree> (original)
+* Emscripten: <https://github.com/emscripten-core/emscripten>
+* FreeBSD: <https://github.com/freebsd/freebsd-src> (official mirror),
+  <https://cgit.freebsd.org/src/tree> (original)
+* Fuchsia: <https://cs.opensource.google/fuchsia/fuchsia/+/main:zircon/>
+* Glibc: <https://github.com/sailfishos-mirror/glibc> (unofficial mirror),
+  <https://sourceware.org/git/?p=glibc.git;a=tree> (original)
+* Illumos: <https://github.com/illumos/illumos-gate> (official mirror),
+  <https://code.illumos.org/plugins/gitiles/illumos-gate/+/refs/heads/master> (original)
+* Linux uapi: <https://github.com/torvalds/linux/tree/master/include/uapi> (official mirror),
+  <https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/> (original)
+* Musl: <https://github.com/kraj/musl> (unofficial mirror),
+  <https://git.musl-libc.org/cgit/musl/tree> (original)
+* NetBSD: <https://github.com/NetBSD> (official mirror),
+  <https://cvsweb.netbsd.org/bsdweb.cgi> (original)
+* OpenBSD: <https://github.com/openbsd> (official mirror),
+  <https://cvsweb.openbsd.org/src> (original)
+* RedoxOS: <https://gitlab.redox-os.org/redox-os/relibc>
+* Windows GNU: <https://github.com/mingw-w64/mingw-w64> (unofficial mirror),
+  <https://sourceforge.net/p/mingw-w64/mingw-w64/ci/master/tree/> (original)
+* Windows MSVC: <https://github.com/microsoft/win32metadata>
 
 After navigating to the relevant file and selecting relevant lines, get a
-permalink. On GitHub this is available by clicking the triple dots and
-selecting "copy permalink", and on the Android and Fuchsia source viewers
-this is available via l-r (links->commit).
-
-If sources are closed, link to documentation or paste relevant C declarations.
+permalink:
+
+* On GitHub, click the triple dots and selecting "copy permalink".
+* On the Android and Fuchsia source viewers, type l-r (links->commit).
+* Cgit is trickier. Locate the latest commit by clicking "summary", clicking
+  the commit message tagged with "master" (or other name as applicable), and
+  copying the sha from that commit. Next, insert `?id=abcd1234...` in the URL,
+  (before line number indicators like `#123`) and copy the result. This should
+  look something like
+  <https://git.musl-libc.org/cgit/musl/tree/include/sys/stat.h?id=f21a96538f78fa8e2040831b4209b35f2fb581da#n80>.
+* For CVSweb, navigate to the file of interest and click on the "annotate" link
+  for the desired revision. Example:
+  <https://cvsweb.netbsd.org/bsdweb.cgi/src/sys/sys/stat.h?annotate=1.70>.
+
+If sources are not public, link to documentation or paste relevant C
+declarations.
 
 (Including this information in the PR description is fine too, commit messages
 are preferred because they become part of history.)
 
+### Manual pages
+
+Including links to manpages is not required but can also be very helpful to
+include. Some platforms also publish manpages but not sources.
+
+Common web manuals:
+
+* AIX: <https://www.ibm.com/docs/en/aix/7.3.0>
+* Apple: <https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man5/manpages.5.html>
+  is the only known official site but it is severly outdated. <https://manp.gs/mac/>
+  or <https://ss64.com/mac/> are better options.
+* DragonFlyBSD: <https://www.dragonflybsd.org/cgi/web-man>
+* FreeBSD: <https://man.freebsd.org/cgi/man.cgi>
+* Illumos: <https://illumos.org/man/>
+* NetBSD: <https://man.netbsd.org/>
+* OpenBSD: <https://man.openbsd.org/>
+* Solaris: <https://docs.oracle.com/cd/E88353_01/>
+* Windows MSVC: <https://learn.microsoft.com/en-us/cpp/c-runtime-library/c-run-time-library-reference?view=msvc-180>
+
 ## Breaking change policy
 
 See `src/lib.rs` for details.

Cargo.toml

@@ -100,6 +100,7 @@ targets = [
     # Tier 3 targets that are distinct enough to be useful, or have historically
     # been documented.
     "aarch64-unknown-freebsd",
+    "aarch64-unknown-helenos",
     "aarch64-unknown-hermit",
     "aarch64-unknown-illumos",
     "aarch64-unknown-netbsd",
@@ -117,6 +118,7 @@ targets = [
     "armv7r-none-eabihf",
     "hexagon-unknown-linux-musl",
     "i686-unknown-haiku",
+    "i686-unknown-helenos",
     "i686-unknown-netbsd",
     "i686-unknown-openbsd",
     "i686-wrs-vxworks",
@@ -129,6 +131,7 @@ targets = [
     "mipsel-sony-psp",
     "mipsel-unknown-linux-gnu",
     "mipsel-unknown-linux-musl",
+    "powerpc-unknown-helenos",
     "powerpc-unknown-linux-gnuspe",
     "powerpc-unknown-netbsd",
     "powerpc-wrs-vxworks",
@@ -150,6 +153,7 @@ targets = [
     "riscv64imac-unknown-none-elf",
     "s390x-unknown-linux-musl",
     "sparc-unknown-linux-gnu",
+    "sparc64-unknown-helenos",
     "sparc64-unknown-netbsd",
     "thumbv6m-none-eabi",
     "thumbv7em-none-eabi",
@@ -160,6 +164,7 @@ targets = [
     "x86_64-pc-cygwin",
     "x86_64-unknown-dragonfly",
     "x86_64-unknown-haiku",
+    "x86_64-unknown-helenos",
     "x86_64-unknown-hermit",
     "x86_64-unknown-hurd-gnu",
     "x86_64-unknown-l4re-uclibc",