foresterre/cargo-msrv v0.20.0-beta.4 on GitHub

Changelog

Compared to last beta release, cargo-msrv has:

Added bundled unless outdated release source which also uses the release index bundled with cargo-msrv, but falls back to fetching from a newer release source if the age of the bundled index is too old (defaults to 42 days) [NB: Updated from 7 to 42 days in this beta]
Added a hidden cargo-msrv completions <SHELL> subcommand which prints shell completions for cargo-msrv to stdout
Added the context_finalized event, which reports information about the context (i.e. the resolved config and environment values) cargo-msrv is running with

⚠️ Breaking change: Removed selected_packages event. Use the project.packages field on context_finalized instead.

Updated webpki-roots to v1.0.10 resolving RUSTSEC-2026-0381 and CVE-2026-111943

Compared to last stable release, cargo-msrv has:

Added the bundled release source, which uses a release index bundled with cargo-msrv
Added bundled unless outdated release source which also uses the release index bundled with cargo-msrv, but falls back to fetching from a newer release source if the age of the bundled index is too old (defaults to 42 days)
Added github release source, which fetches the known set of Rust versions from Rust's GitHub releases page
Include the bundled release index by default (so there is a source to fall back to if no other release source cargo feature is enabled)
Properly support Cargo workspaces for cargo msrv find, verify, show and set (excluding custom check command)
Added cargo msrv set --workspace-msrv, which sets the MSRV in the workspace.package table of the workspace root of the Cargo manifest
Subcommand results now report the package they belong to
Added a hidden cargo-msrv completions <SHELL> subcommand which prints shell completions for cargo-msrv to stdout
Added the context_finalized event, which reports information about the context (i.e. the resolved config and environment values) cargo-msrv is running with

Updated rust-releases to 0.34.0
If toolchain target information is available from the selected rust-releases index, cargo-msrv will now only include toolchains which have the provided target (defaults to the host) and components
The --workspace, --package and --exclude flags are now given after the subcommand, like cargo does (cargo msrv find --package a), and are accepted by find, verify, show and set
cargo msrv find --write-toolchain-file now writes the toolchain file to the workspace root
cargo msrv find --ignore-lockfile and cargo msrv verify --ignore-lockfile now move the workspace's lockfile
cargo msrv set and cargo msrv find --write-msrv no longer overwrite a rust-version which is inherited from the workspace
Invalid workspace flags outside a Cargo project are now reported as errors
A Cargo project for which cargo metadata fails is now reported as an error, instead of being treated as a project without Cargo
The changelog release index source is now a conditional compilation 'features' flag
Rust versions now reject leading zeros, e.g. 1.05, like Cargo
The package.metadata.msrv key which can be used as a fallback for Rust versions where the package.rust-version isn't available yet now only accept full (three component) or short (two component) versions, like rust-version

The sha_short build metadata is now reported again by the meta event
Fix issue where cargo-msrv find could no longer be used outside a Cargo project, unless --min was provided (must still be runnable via rustup run)
The edition field inherited from workspace.package is now used to limit the search space of cargo msrv find

⚠️ Breaking change: Removed selected_packages event. Use the project.packages field on context_finalized instead.

Updated webpki-roots to v1.0.10 resolving RUSTSEC-2026-0381 and CVE-2026-111943