Skip to content

Bump rand_core from 0.6.4 to 0.10.1#44

Closed
dependabot[bot] wants to merge 1 commit into
mfrom
dependabot/cargo/rand_core-0.10.1
Closed

Bump rand_core from 0.6.4 to 0.10.1#44
dependabot[bot] wants to merge 1 commit into
mfrom
dependabot/cargo/rand_core-0.10.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor

Bumps rand_core from 0.6.4 to 0.10.1.

Release notes

Sourced from rand_core's releases.

v0.10.1

Fixed

  • Reference to the rand crate in TryRng docs (#75)

#75: rust-random/rand_core#75

New Contributors

Full Changelog: rust-random/rand_core@v0.10.0...v0.10.1

v0.10.0

What's Changed

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

  • Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
  • RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
  • Rng is now an extension trait of TryRng<Error = Infallible> (#45)
  • TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
  • Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

  • SeedableRng::{fork, try_fork} methods (#17)
  • Re-export of core::convert::Infallible (#56)

Removed

  • TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
  • os_rng crate feature ([rand#1674])
  • OsRng and OsError structs ([rand#1674])
  • SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
  • getrandom dependency ([rand#1674])
  • std crate feature ([rand#1674])
  • Optional serde dependency (#28)
  • UnwrapMut struct and Rng::unwrap_mut method (#45)
  • Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

  • BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
  • block::Generator::drop method (#35)
  • BlockRng::word_offset method (#44)

Changed

  • Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
  • Rename BlockRng::generate_and_set method to reset_and_skip (#44)

... (truncated)

Changelog

Sourced from rand_core's changelog.

0.10.1 - 2026-04-13

Fixed

  • Reference to the rand crate in TryRng docs (#75)

#75: rust-random/rand_core#75

[0.10.0] - 2026-02-01

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

  • Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
  • RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
  • Rng is now an extension trait of TryRng<Error = Infallible> (#45)
  • TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
  • Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

  • SeedableRng::{fork, try_fork} methods (#17)
  • Re-export of core::convert::Infallible (#56)

Removed

  • TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
  • os_rng crate feature ([rand#1674])
  • OsRng and OsError structs ([rand#1674])
  • SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
  • getrandom dependency ([rand#1674])
  • std crate feature ([rand#1674])
  • Optional serde dependency (#28)
  • UnwrapMut struct and Rng::unwrap_mut method (#45)
  • Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

  • BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
  • block::Generator::drop method (#35)
  • BlockRng::word_offset method (#44)

Changed

  • Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
  • Rename BlockRng::generate_and_set method to reset_and_skip (#44)
  • Rename block::BlockRngCore trait to block::Generator (#26)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rand_core](https://github.com/rust-random/rand_core) from 0.6.4 to 0.10.1.
- [Release notes](https://github.com/rust-random/rand_core/releases)
- [Changelog](https://github.com/rust-random/rand_core/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand_core@v0.6.4...v0.10.1)

---
updated-dependencies:
- dependency-name: rand_core
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 1, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedrand_core@​0.10.110010093100100

View full report

@maurges

maurges commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

Closing as it requires manual intervention

@maurges maurges closed this Jun 2, 2026
@maurges maurges deleted the dependabot/cargo/rand_core-0.10.1 branch June 2, 2026 14:19
@dependabot @github

dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant