Skip to content

chore(deps): bump rand from 0.10.1 to 0.10.2#598

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/rand-0.10.2
Open

chore(deps): bump rand from 0.10.1 to 0.10.2#598
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/cargo/rand-0.10.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps rand from 0.10.1 to 0.10.2.

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 9, 2026
@dependabot
dependabot Bot requested a review from Zious11 as a code owner July 9, 2026 13:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 9, 2026
@Zious11

Zious11 commented Jul 15, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.10.2 branch from 867b192 to 06e873a Compare July 15, 2026 14:48
Zious11 added a commit that referenced this pull request Jul 15, 2026
…-PR triage (D-178)

- BC-3.5.006 SATISFIED: spec v1.3.42 (bc-3-issue-write.md); EJ probe confirmed
  green by nightly run 29398774009 (test_e2e_comment_edit_visibility_merge_semantics
  ok on develop @ 56d5126); CHANGELOG MERGE-claim now empirically backed.
- Docs PR #625 (docs/577-ej-probe-closeout) CI 14/14 green; HELD for human
  review+merge (independent-review guard — classifier blocked pr-manager and
  orchestrator reviewer dispatch; session authored the PR; SELF-APPROVAL-GUARD
  2nd positive datapoint).
- Fresh PR reviews: #573 APPROVE @ 046ee4f (pr-review-2.md); #574 code review
  APPROVE-pending-rebase + security review APPROVE @ 3c37948 (pr-review-2.md +
  security-review-2.md; CHANGELOG-only conflict needs contributor rebase).
- PR triage: #591 MERGE-READY (9-day soak); #598/#599 HOLD-SOAK-2026-07-16;
  #612 HOLD-SOAK-2026-07-20; #624 HOLD-SOAK-2026-07-22.
- DEC-178: all-dependabot soak broadened to ALL dependabot PRs (cargo + Actions),
  not just third-party Actions bumps (broadens DEC-133).
- Drift items: FACTORY-DISPATCHER-HOOK-TIMEOUT (engine-side, LOW);
  SELF-APPROVAL-GUARD-2ND-DATAPOINT (positive control, CLOSED).
- STATE.md: 341 lines (cap 500); burst-log.md: F5-CONVERGED + F4-COMPLETE step
  rows archived per keep-5 rule; sidecar-learning.md session timestamps added.
Bumps [rand](https://github.com/rust-random/rand) from 0.10.1 to 0.10.2.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.1...0.10.2)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.10.2 branch from 06e873a to 15a02aa Compare July 20, 2026 22:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant