Privacy
The LSP server performs no network access in itself, but runs
cargo metadata which will update or download the crate registry and
the source code of the project dependencies. If enabled (the default),
build scripts and procedural macros can do anything.
The Code extension does not access the network.
Any other editor plugins are not under the control of the
rust-analyzer developers. For any privacy concerns, you should check
with their respective developers.
For rust-analyzer developers, cargo xtask release uses the GitHub
API to put together the release notes.