Skip to content

chore(deps): bump the cargo group across 1 directory with 4 updates#4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-d0b6f8cf1c
Open

chore(deps): bump the cargo group across 1 directory with 4 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-d0b6f8cf1c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Updates the requirements on rand, hmac, sha2 and wasmtime to permit the latest version.
Updates rand to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697

... (truncated)

Commits

Updates hmac to 0.13.0

Commits

Updates sha2 to 0.11.0

Commits

Updates wasmtime to 46.0.1

Release notes

Sourced from wasmtime's releases.

v46.0.1

46.0.1

Released 2026-06-24.

Fixed

  • WASI hard links and renames check wasmtime-wasi's FilePerms for destination GHSA-4ch3-9j33-3pmj
  • Explicit hint for generic call in wasmtime wit-bindgen. #13719
Changelog

Sourced from wasmtime's changelog.

46.0.1

Released 2026-06-24.

Fixed

  • WASI hard links and renames check wasmtime-wasi's FilePerms for destination GHSA-4ch3-9j33-3pmj
  • Explicit hint for generic call in wasmtime wit-bindgen. #13719

46.0.0

Released 2026-06-22.

Added

  • Added opt-in support for the WebAssembly branch-hinting proposal: the metadata.code.branch_hint custom section is parsed and used to mark cold blocks during Cranelift compilation, behind Config::wasm_branch_hinting (off by default). #13459

  • Wasmtime's C API now supports type reflection of GC values. #13268

  • Wasmtime now supports being compiled to arm64_32 platforms. #13259

  • The cranelift-frontend crate,the RISC-V Cranelift backend, and Wasmtime's component-model-async feature now support no_std. #13401 #13479 #13533

  • Wasmtime has initial support for the component model (implements "...") feature. #13361 #13497 #13513

  • The wasmtime CLI now supports configuring the initial-cwd property of WASI. #13468

  • The wasmtime serve subcommand now supports --header to set headers for the guest.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 22, 2026
@dependabot
chore(deps): bump the cargo group across 1 directory with 4 updates
4ab28d6 
Updates the requirements on [rand](https://github.com/rust-random/rand), [hmac](https://github.com/RustCrypto/MACs), [sha2](https://github.com/RustCrypto/hashes) and [wasmtime](https://github.com/bytecodealliance/wasmtime) to permit the latest version.

Updates `rand` to 0.10.1
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.0...0.10.1)

Updates `hmac` to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.0...hmac-v0.13.0)

Updates `sha2` to 0.11.0
- [Commits](RustCrypto/hashes@groestl-v0.10.0...sha2-v0.11.0)

Updates `wasmtime` to 46.0.1
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v46.0.1/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v44.0.3...v46.0.1)

---
updated-dependencies:
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  dependency-group: cargo
- dependency-name: wasmtime
  dependency-version: 46.0.0
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the cargo group with 4 updates chore(deps): bump the cargo group across 1 directory with 4 updates Jun 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/cargo-d0b6f8cf1c branch from acb6f77 to 4ab28d6 Compare June 29, 2026 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants