Skip to content

Bump the random group across 1 directory with 3 updates#7716

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/random-dc9d2ff19f
Open

Bump the random group across 1 directory with 3 updates#7716
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/random-dc9d2ff19f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026 •
edited
Loading

Bumps the random group with 3 updates in the / directory: getrandom, mt19937 and rand.

Updates getrandom from 0.3.4 to 0.4.2

Changelog

Sourced from getrandom's changelog.

0.4.2 - 2026-03-03

Changed

  • Bump r-efi dependency to v6 #814

Fixed

  • Read errno only when it is set #810
  • Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

  • Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

  • RawOsError type alias #739
  • SysRng behind new feature sys_rng #751
  • WASIp3 support #779
  • extern_impl opt-in backend #786 #794
  • Motor OS support #797

Changed

  • Use Edition 2024 and MSRV 1.85 #749

#739: rust-random/getrandom#739 #749: rust-random/getrandom#749 #751: rust-random/getrandom#751 #779: rust-random/getrandom#779 #786: rust-random/getrandom#786 #794: rust-random/getrandom#794 #797: rust-random/getrandom#797

Commits

Updates mt19937 from 3.2.0 to 3.3.0

Commits

Updates rand from 0.9.4 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 28, 2026
@fanninpm
Copy link
Copy Markdown
Contributor

fanninpm commented Apr 28, 2026

Replaces #7644.

@fanninpm fanninpm requested a review from youknowone April 28, 2026 16:29
@dependabot dependabot Bot force-pushed the dependabot/cargo/random-dc9d2ff19f branch 4 times, most recently from 4347e8a to 9737277 Compare April 30, 2026 15:26
@fanninpm fanninpm requested a review from arihant2math May 2, 2026 03:32
@arihant2math
Copy link
Copy Markdown
Contributor

arihant2math commented May 2, 2026

Checks fail ...

@dependabot dependabot Bot force-pushed the dependabot/cargo/random-dc9d2ff19f branch 2 times, most recently from 291bb92 to 0548b36 Compare May 4, 2026 17:13
@dependabot
Bump the random group across 1 directory with 3 updates
a04001b 
Bumps the random group with 3 updates in the / directory: [getrandom](https://github.com/rust-random/getrandom), [mt19937](https://github.com/RustPython/mt19937) and [rand](https://github.com/rust-random/rand).


Updates `getrandom` from 0.3.4 to 0.4.2
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.3.4...v0.4.2)

Updates `mt19937` from 3.2.0 to 3.3.0
- [Commits](https://github.com/RustPython/mt19937/commits)

Updates `rand` from 0.9.4 to 0.10.1
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.9.4...0.10.1)

---
updated-dependencies:
- dependency-name: getrandom
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: random
- dependency-name: mt19937
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: random
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: random
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/random-dc9d2ff19f branch from 0548b36 to a04001b Compare May 6, 2026 05:06
@joshuamegnauth54 joshuamegnauth54 mentioned this pull request May 8, 2026
Draft
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump getrandom, rand, mt19937
f015c5d 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial so Dependabot's PR causes build
failures.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump getrandom, rand, mt19937
ff0e778 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial so Dependabot's PR causes build
failures.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump getrandom, rand, mt19937
057da64 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial so Dependabot's PR causes build
failures.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump getrandom, rand, mt19937
d25758a 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial so Dependabot's PR causes build
failures.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump getrandom, rand, mt19937
a60c45b 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial so Dependabot's PR causes build
failures.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump getrandom, rand, mt19937
e363af0 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial so Dependabot's PR causes build
failures.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump rand, mt19937
ef88086 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial, so Dependabot's PR causes build
failures.

`getrandom` cannot be bumped yet. RustPython's crate graph has several
old versions of `getrandom`. Apparently, this is causing a conflict with
the WebAssembly build.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump rand, mt19937
e45792e 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial, so Dependabot's PR causes build
failures.

`getrandom` cannot be bumped yet. RustPython's crate graph has several
old versions of `getrandom`. Apparently, this is causing a conflict with
the WebAssembly build.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump rand, mt19937
149112d 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial, so Dependabot's PR causes build
failures.

`getrandom` cannot be bumped yet. RustPython's crate graph has several
old versions of `getrandom`. Apparently, this is causing a conflict with
the WebAssembly build.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump rand, mt19937
723e4ae 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial, so Dependabot's PR causes build
failures.

`getrandom` cannot be bumped yet. RustPython's crate graph has several
old versions of `getrandom`. Apparently, this is causing a conflict with
the WebAssembly build.
joshuamegnauth54 added a commit to joshuamegnauth54/RustPython that referenced this pull request May 8, 2026
@joshuamegnauth54
Bump rand, mt19937
ee86de1 
Supercedes: RustPython#7716

Bumping rand and mt19937 is not trivial, so Dependabot's PR causes build
failures.

`getrandom` cannot be bumped yet. RustPython's crate graph has several
old versions of `getrandom`. Apparently, this is causing a conflict with
the WebAssembly build.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@youknowone youknowone Awaiting requested review from youknowone

@arihant2math arihant2math Awaiting requested review from arihant2math

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@fanninpm @arihant2math