Merge pull request #434 from JoelMarcey/rust-october2024

Rust Foundation: October 2024 Update

alpha/engagements/2024/Rust Foundation/README.md

@@ -22,4 +22,5 @@ In addition to the monthly reports here in GitHub, the Rust Foundation provides
 * Walter Pearce - Security Engineer, Rust Foundation
 * Adam Harvey - Software Engineer, Rust Foundation
 * Tobias Bieniek - Software Engineer, Rust Foundation
-* Jan David Nose - Infrastructure Engineer, Rust Foundation
+* Jan David Nose - Infrastructure Engineer Lead, Rust Foundation
+* Marco Ieni - Infrastructure Engineer, Rust Foundation

alpha/engagements/2024/Rust Foundation/update-2024-10.md

@@ -0,0 +1,37 @@
+October was a bit of an unusual month with many on the engineering team at the Foundation on PTO at various times and a full-week offsite staff meeting. But we still have some relevant updates.
+
+## Engineering
+
+### TUF RFC Posted
+
+As mentioned [last month](./update-2024-09.md), there was an agreement to use The Update Framework ([TUF](https://theupdateframework.io)) as the framework for crates signing and mirroring.
+
+Great news that the [RFC](https://github.com/rust-lang/rfcs/pull/3724) has officially been posted and discussion, and hopefully, approval will be happening over the next several days.
+
+### Rust Infrastructure Updates
+
+As part of its [ongoing effort](https://github.com/rust-lang/infra-team/issues/121) to catalog and patch servers for security and efficiency, Marco, JD and others on the Rust Project infrastructure team updated all of the servers it manages to Ubuntu 24.
+
+### C++/Rust Interop Progress
+
+Jon has publicly [posted](https://rust-lang.zulipchat.com/#narrow/channel/427678-t-lang.2Finterop/topic/.5BDRAFT.5D.20C.2B.2B.20Interoperability.20Problem.20Statement) his [draft version](https://docs.google.com/document/d/1_8i64lbRg1sQjhfZ0toMBXCzI5cveteZVoAsXosFwR4) of the C++/Rust Interop initiative problem statement and high level strategy to the Rust Project. Jon is receiving feedback and starting to move towards implementing this strategy, which will be a heavy focus on 2025.
+
+Also, as part of defining what we need to do for C++/Rust Interop, we are asking questions about `unsafe` since that is a key barrier between the two languages. There is a [discussion](https://rust-lang.zulipchat.com/#narrow/channel/136281-t-opsem/topic/What.20actually.20is.20unsafe.20and.20undefined.20behavior.3F) happening around the definition of unsafety and undefined behavior, safety critical coding guidelines and unsafe coding guidelines research and writing.
+
+### Crates.io Improvements
+
+Tobias made some key improvements to crates.io this month. He fixed a race condition in the publish endpoint related to SemVer versions with build metadata. He also improved observability by adjusting the tracing span field serialization. And finally he has continued his work migrating to using async database queries. 
+
+## Announcements and Community
+
+### Safety Critical Rust Consortium
+
+The first meeting of the [Safety Critical Rust Consortium](https://github.com/rustfoundation/safety-critical-rust-consortium) [Coding Guidelines subcommittee](https://github.com/rustfoundation/safety-critical-rust-consortium/tree/main/subcommittee/coding-guidelines) [met](https://github.com/rustfoundation/safety-critical-rust-consortium/tree/main/subcommittee/coding-guidelines/meetings/22-October-2024) to start discussing how to ensure we have the correct guidelines to develop, write and test code that will be used in safety critical applications.
+
+### EuroRust
+
+Members of the Rust Foundation attended [EuroRust 2024](https://eurorust.eu/2024/), a Rust Foundation sponsored conference.
+
+## Threat Modeling
+
+Moved the links to these to the [README](./README.md) for persistent access.