diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index c942b5d..0a5c62b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,6 +1,6 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2023-11-27T19:06:58Z by kres latest.
+# Generated on 2024-01-15T15:10:45Z by kres latest.
 
 name: default
 concurrency:
@@ -33,7 +33,7 @@ jobs:
       labels: ${{ steps.retrieve-pr-labels.outputs.result }}
     services:
       buildkitd:
-        image: moby/buildkit:v0.12.3
+        image: moby/buildkit:v0.12.4
         options: --privileged
         ports:
           - 1234:1234
@@ -70,11 +70,12 @@ jobs:
           make  PUSH=true
       - name: Retrieve PR labels
         id: retrieve-pr-labels
-        if: github.event_name == 'pull_request' && always()
         uses: actions/github-script@v6
         with:
           retries: "3"
           script: |
+            if (context.eventName != "pull_request") { return "[]" }
+
             const resp = await github.rest.issues.get({
                 issue_number: context.issue.number,
                 owner: context.repo.owner,
@@ -101,7 +102,7 @@ jobs:
       - default
     services:
       buildkitd:
-        image: moby/buildkit:v0.12.3
+        image: moby/buildkit:v0.12.4
         options: --privileged
         ports:
           - 1234:1234
diff --git a/.github/workflows/weekly.yaml b/.github/workflows/weekly.yaml
index 24cba22..c35090b 100644
--- a/.github/workflows/weekly.yaml
+++ b/.github/workflows/weekly.yaml
@@ -1,6 +1,6 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2023-11-27T19:06:58Z by kres latest.
+# Generated on 2024-01-15T15:10:45Z by kres latest.
 
 name: weekly
 concurrency:
@@ -16,7 +16,7 @@ jobs:
       - pkgs
     services:
       buildkitd:
-        image: moby/buildkit:v0.12.3
+        image: moby/buildkit:v0.12.4
         options: --privileged
         ports:
           - 1234:1234
diff --git a/Pkgfile b/Pkgfile
index 1eed81d..970aa2a 100644
--- a/Pkgfile
+++ b/Pkgfile
@@ -299,6 +299,11 @@ vars:
   rhash_sha256: 8e7d1a8ccac0143c8fe9b68ebac67d485df119ea17a613f4038cda52f84ef52a
   rhash_sha512: 00a7e5e058b53ce20ae79509815452ed9cb699d1322b678220b72c61dea3ea2f8fa131acfade8bb6d9f6af913f0c3c472330841181b22314b8755166310c946f
 
+  # renovate: datasource=github-tags depName=rust-lang/rust
+  rust_version: 1.75.0
+  rust_sha256: 473978b6f8ff216389f9e89315211c6b683cf95a966196e7914b46e8cf0d74f6
+  rust_sha512: fdb0642e93915c150dd352c1c49fda275f61e78a91a6ff7403bd275fceb86563403055c00a0c745911bc9e17656e80034d257274ad3d306b1f3314ec1c541dcb
+
   # renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=git://git.savannah.gnu.org/sed.git
   sed_version: 4.9
   sed_sha256: 6e226b732e1cd739464ad6862bd1a1aba42d7982922da7a53519631d24975181
diff --git a/deps.png b/deps.png
index 7f112db..061d7c7 100644
Binary files a/deps.png and b/deps.png differ
diff --git a/rust/pkg.yaml b/rust/pkg.yaml
new file mode 100644
index 0000000..77d9df8
--- /dev/null
+++ b/rust/pkg.yaml
@@ -0,0 +1,20 @@
+name: rust
+dependencies:
+  - stage: base
+steps:
+  - sources:
+      - url: https://static.rust-lang.org/dist/rust-{{ .rust_version }}-x86_64-unknown-linux-gnu.tar.gz
+        destination: rust.tar.gz
+        sha256: "{{ .rust_sha256 }}"
+        sha512: "{{ .rust_sha512 }}"
+    prepare:
+      - |
+        tar -xf rust.tar.gz --strip-components=1
+    install:
+      - |
+        ./install.sh \
+          --destdir=/rootfs \
+          --prefix=${TOOLCHAIN}
+finalize:
+  - from: /rootfs
+    to: /
diff --git a/tools/pkg.yaml b/tools/pkg.yaml
index b96a6b8..9c5c886 100644
--- a/tools/pkg.yaml
+++ b/tools/pkg.yaml
@@ -64,6 +64,7 @@ dependencies:
   - stage: protoc-gen-go-grpc
   - stage: python3
   - stage: rhash
+  - stage: rust
   - stage: sd-boot
   - stage: sed
   - stage: squashfs-tools