Skip to content

Bump rand from 0.9.4 to 0.10.2 - #99

Merged
mumoshu merged 1 commit into
mainfrom
dependabot/cargo/rand-0.10.1
Jul 7, 2026
Merged

Bump rand from 0.9.4 to 0.10.2#99
mumoshu merged 1 commit into
mainfrom
dependabot/cargo/rand-0.10.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps rand from 0.9.4 to 0.10.2.

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.10.1 branch from c15a729 to 23a0c6f Compare July 1, 2026 23:32
@dependabot dependabot Bot changed the title Bump rand from 0.9.4 to 0.10.1 Bump rand from 0.9.4 to 0.10.2 Jul 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.10.1 branch from 23a0c6f to 8fb7345 Compare July 7, 2026 05:29
@mumoshu

mumoshu commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Apparently we need to update call-sites to bump it. Will do it shortly

@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.10.1 branch 2 times, most recently from a916838 to ef29bd8 Compare July 7, 2026 07:29
Bump rand across workspace crates and replace rng.clone() timestamp
branching with a single-loop pattern compatible with StdRng (no Clone
in rand 0.10). Switch generator bounds from Rng to RngExt and update
csv_loadtest age expectation for the shifted RNG sequence.
@mumoshu
mumoshu force-pushed the dependabot/cargo/rand-0.10.1 branch from ef29bd8 to e98c648 Compare July 7, 2026 09:47
@mumoshu
mumoshu merged commit ee10c0a into main Jul 7, 2026
9 checks passed
@mumoshu
mumoshu deleted the dependabot/cargo/rand-0.10.1 branch July 7, 2026 10:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant