Skip to content

chore(deps): bump rand from 0.8.5 to 0.9.3 in /tools/lumina-latency-monitor#7065

Merged
rootulp merged 4 commits intomainfrom
dependabot/cargo/tools/lumina-latency-monitor/rand-0.9.3
Apr 15, 2026
Merged

chore(deps): bump rand from 0.8.5 to 0.9.3 in /tools/lumina-latency-monitor#7065
rootulp merged 4 commits intomainfrom
dependabot/cargo/tools/lumina-latency-monitor/rand-0.9.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Bumps rand from 0.8.5 to 0.9.3.

Changelog

Sourced from rand's changelog.

[0.9.3] — 2026-02-11

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1764)
  • Replace usages of doc_auto_cfg (#1764)

#1763: rust-random/rand#1763

[0.9.2] — 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Open with Devin

Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.9.3.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.3/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.9.3)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 14, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 14, 2026 03:22
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 14, 2026
@dependabot dependabot Bot requested review from mcrakhman and removed request for a team April 14, 2026 03:22
@dependabot dependabot Bot added the rust Pull requests that update rust code label Apr 14, 2026
Copy link
Copy Markdown

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

Tip: disable this comment in your organization's Code Review settings.

@github-actions github-actions Bot added the bot item was created by a bot label Apr 14, 2026
devin-ai-integration[bot]

This comment was marked as resolved.

@rootulp rootulp marked this pull request as draft April 14, 2026 18:39
@rootulp rootulp self-assigned this Apr 14, 2026
rootulp and others added 2 commits April 14, 2026 11:41
`rand::thread_rng()` was removed in rand 0.9, replaced with
`rand::rng()`. `gen_range` was renamed to `random_range`.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@rootulp rootulp marked this pull request as ready for review April 14, 2026 18:44
@rootulp rootulp enabled auto-merge April 14, 2026 18:44
@rootulp
Copy link
Copy Markdown
Collaborator

rootulp commented Apr 15, 2026

Closing and reopening to re-trigger CI. The dependabot-tidy workflow was pushing a tidy commit with a token that didn't trigger subsequent workflow runs, so ci-release never ran on the latest commit. The token has been updated to fix this.

@rootulp rootulp closed this Apr 15, 2026
auto-merge was automatically disabled April 15, 2026 00:08

Pull request was closed

@rootulp rootulp reopened this Apr 15, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 15, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@rootulp rootulp enabled auto-merge April 15, 2026 00:12
@rootulp rootulp added this pull request to the merge queue Apr 15, 2026
Merged via the queue into main with commit ef0abb7 Apr 15, 2026
32 checks passed
@rootulp rootulp deleted the dependabot/cargo/tools/lumina-latency-monitor/rand-0.9.3 branch April 15, 2026 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bot item was created by a bot dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants