Skip to content

build(deps): bump rand from 0.8.5 to 0.8.6#4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand-0.8.6
Closed

build(deps): bump rand from 0.8.5 to 0.8.6#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand-0.8.6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps rand from 0.8.5 to 0.8.6.

Changelog

Sourced from rand's changelog.

[0.8.6] - 2026-04-14

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1772)

#1763: rust-random/rand#1763 #1772: rust-random/rand#1772

  • Drop the experimental simd_support feature.
Commits
  • 5309f25 0.8.6 (#1772): update for recent nightly rustc and backport #1764
  • 1126d03 When testing rustc 1.36, use compatible dependencies.
  • 143b602 Add Cargo.lock.msrv.
  • 9be86f2 Fix cross build test.
  • 5e0d50d Drop simd_support.
  • 8ff02f0 Upgrade cache action.
  • 4ad0cc3 Don't test for unsupported target architecture.
  • 258e6d0 Address warning.
  • 9f0e676 Mark some internal traits as potentially unused.
  • 6f123c1 Workaround never constructed and never used warning.
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Apr 23, 2026
Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.8.6.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.8.6/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...0.8.6)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.8.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/rand-0.8.6 branch from e3a19a7 to c8a40e2 Compare April 28, 2026 09:45
nedseb added a commit that referenced this pull request Apr 28, 2026
…tible

Mechanical refresh covering 180+ transitive bumps. Notable highlights:

- bytes 1.7.2 -> 1.11.1 (transitive via iced_core): includes a fix
  for an integer overflow in `BytesMut::reserve` that originated from
  a security advisory — this also supersedes the 30-day-old Dependabot
  PR #3.
- rand 0.8.5 -> 0.8.6 (transitive): backport patch from 0.10 line.
  Supersedes Dependabot PR #4.
- async-io 2.3.4 -> 2.6.0 (direct dep used by our timer + io flush).
- serde 1.0.210 -> 1.0.228, serde_json 1.0.128 -> 1.0.149.
- serialport 4.7.1 -> 4.9.0.
- rfd 0.15.0 -> 0.15.4.

Major-version bumps held back for a follow-up: iced 0.14, iced_aw
0.14, iced_fonts 0.3, directories 6, sysinfo 0.38 — each requires
code changes.

`cargo build --release --locked` and `cargo test --release --locked`
both green locally.
@nedseb
Copy link
Copy Markdown
Contributor

nedseb commented Apr 28, 2026

Superseded by #16, which bumped rand 0.8.5 → 0.8.6 alongside the rest of the lockfile refresh. Closing.

@dependabot close

@nedseb nedseb closed this Apr 28, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 28, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/cargo/rand-0.8.6 branch April 28, 2026 12:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant