Skip to content

Bump rand from 0.9.2 to 0.9.3 - #1454

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand-0.9.3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand-0.9.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps rand from 0.9.2 to 0.9.3.

Changelog

Sourced from rand's changelog.

[0.9.3] — 2026-02-11

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1764)
  • Replace usages of doc_auto_cfg (#1764)

#1763: rust-random/rand#1763

Commits


Note

Low Risk
Dependency-only lockfile change with no application logic touched; minor risk if deprecated rand features were in use.

Overview
Updates Cargo.lock so the resolved rand crate moves from 0.9.2 to 0.9.4 (checksum updated). No Cargo.toml or Rust source changes—the workspace already allows rand 0.9 via the root dependency.

This is a routine dependency refresh, likely from Dependabot. Per upstream notes for the 0.9.x line, the release includes maintenance items (e.g. deprecating the log feature, doc cfg tweaks) and a back-ported fix from 0.10; behavior for typical rand usage in tests/crypto helpers should stay the same unless you relied on deprecated APIs.

Reviewed by Cursor Bugbot for commit cd52a7d. Bugbot is set up for automated code reviews on this repo. Configure here.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels May 26, 2026
@socket-security

socket-security Bot commented May 26, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​rand@​0.9.2 ⏵ 0.9.4100100 +193100100

View full report

@coveralls-official

coveralls-official Bot commented May 26, 2026 •

Copy link
Copy Markdown

Coverage Report for CI Build 27007912133

Coverage remained the same at 80.946%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 18584
Covered Lines: 15043
Line Coverage: 80.95%
Coverage Strength: 12148334.22 hits per line

💛 - Coveralls

Bumps [rand](https://github.com/rust-random/rand) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.3/CHANGELOG.md)
- [Commits](rust-random/rand@rand_core-0.9.2...0.9.3)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.9.3 branch from 7116302 to cd52a7d Compare June 5, 2026 09:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants