Skip to content

deps: update rand_core requirement from 0.6.4 to 0.10.0#17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand_core-0.10.0
Open

deps: update rand_core requirement from 0.6.4 to 0.10.0#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand_core-0.10.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 9, 2026 •
edited by coderabbitai Bot
Loading

Updates the requirements on rand_core to permit the latest version.

Release notes

Sourced from rand_core's releases.

v0.10.0

What's Changed

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

  • Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
  • RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
  • Rng is now an extension trait of TryRng<Error = Infallible> (#45)
  • TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
  • Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

  • SeedableRng::{fork, try_fork} methods (#17)
  • Re-export of core::convert::Infallible (#56)

Removed

  • TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
  • os_rng crate feature ([rand#1674])
  • OsRng and OsError structs ([rand#1674])
  • SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
  • getrandom dependency ([rand#1674])
  • std crate feature ([rand#1674])
  • Optional serde dependency (#28)
  • UnwrapMut struct and Rng::unwrap_mut method (#45)
  • Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

  • BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
  • block::Generator::drop method (#35)
  • BlockRng::word_offset method (#44)

Changed

  • Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
  • Rename BlockRng::generate_and_set method to reset_and_skip (#44)
  • Rename block::BlockRngCore trait to block::Generator (#26)
  • Rename BlockRngCore::Results associated type to Output and remove type bounds on it (#26)

Removed

  • Implementation of Rng for BlockRng, making the latter more generic (#34)
  • BlockRng64 struct (#34)
  • BlockRng::reset method (#44)
  • BlockRng::index method (replaced with BlockRng::word_offset) (#44)
  • Generator::Item associated type (#26)
  • CryptoBlockRng (#69)

... (truncated)

Changelog

Sourced from rand_core's changelog.

[0.10.0] - 2026-02-01

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

  • Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
  • RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
  • Rng is now an extension trait of TryRng<Error = Infallible> (#45)
  • TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
  • Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

  • SeedableRng::{fork, try_fork} methods (#17)
  • Re-export of core::convert::Infallible (#56)

Removed

  • TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
  • os_rng crate feature ([rand#1674])
  • OsRng and OsError structs ([rand#1674])
  • SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
  • getrandom dependency ([rand#1674])
  • std crate feature ([rand#1674])
  • Optional serde dependency (#28)
  • UnwrapMut struct and Rng::unwrap_mut method (#45)
  • Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

  • BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
  • block::Generator::drop method (#35)
  • BlockRng::word_offset method (#44)

Changed

  • Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
  • Rename BlockRng::generate_and_set method to reset_and_skip (#44)
  • Rename block::BlockRngCore trait to block::Generator (#26)
  • Rename BlockRngCore::Results associated type to Output and remove type bounds on it (#26)

Removed

  • Implementation of Rng for BlockRng, making the latter more generic (#34)
  • BlockRng64 struct (#34)
  • BlockRng::reset method (#44)
  • BlockRng::index method (replaced with BlockRng::word_offset) (#44)
  • Generator::Item associated type (#26)
  • CryptoBlockRng (#69)

... (truncated)

Commits

Summary by CodeRabbit

  • Chores
    • Updated random number generation library dependency to the latest version for improved stability and compatibility.

@AriajSarkar
Copy link
Copy Markdown
Collaborator

AriajSarkar commented Apr 9, 2026

Refreshing CI and auto-merge workflow after repository automation updates.

@AriajSarkar AriajSarkar closed this Apr 9, 2026
@AriajSarkar AriajSarkar reopened this Apr 9, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 9, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot force-pushed the dependabot/cargo/rand_core-0.10.0 branch from e27fdba to 1bd0c21 Compare April 9, 2026 15:49
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 9, 2026 •
edited
Loading

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 120bb887-f6d3-4c09-8762-7cc4519cd78c

📥 Commits

Reviewing files that changed from the base of the PR and between 1bd0c21 and 2f29b27.

📒 Files selected for processing (1)
  • Cargo.toml
✅ Files skipped from review due to trivial changes (1)
  • Cargo.toml
📝 Walkthrough

Walkthrough

Updated the rand_core dependency version in Cargo.toml from 0.6.4 to 0.10.0. No other files or configuration were changed.

Changes

Cohort / File(s) Summary
Dependency Update
Cargo.toml		 Bumped rand_core dependency from 0.6.4 to 0.10.0. Comment and other dependencies/features unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A tiny hop to update the core,
Versions shifted, I explore the floor,
Seeds refreshed, the randomness sings,
Bright little bytes take flapping wings,
Hooray for tidy, safe upgrades galore! 🎉

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and specifically summarizes the main change: updating the rand_core dependency from version 0.6.4 to 0.10.0, which is the exact and only change in the pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/cargo/rand_core-0.10.0

Comment @coderabbitai help to get the list of available commands and usage tips.

coderabbitai[bot]
coderabbitai Bot reviewed Apr 9, 2026
View reviewed changes
Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
Cargo.toml (1)

6-6: ⚠️ Potential issue | 🔴 Critical

rand_core 0.10.0 is incompatible: MSRV 1.85 vs. project 1.70, and OsRng is removed

This bump breaks the build. rand_core 0.10.0 requires Rust 1.85 (your project targets 1.70), and the entire OsRng type is removed (15 usages across asymmetric crypto and TLS modules). Migrate to getrandom::SysRng (or rand::rngs::SysRng) throughout the codebase, or revert to rand_core 0.6.x and defer this upgrade until toolchain migration is planned.

Immediate safe reversion 
-rand_core = "0.10.0"  # Used for OsRng in asymmetric crypto modules
+rand_core = "0.6.4"   # Used for OsRng in asymmetric crypto modules
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@Cargo.toml` at line 6, The project bumped rand_core to 0.10.0 which is
incompatible with MSRV 1.70 and removed OsRng; fix by either reverting the
dependency to a rand_core 0.6.x line in Cargo.toml to restore OsRng
compatibility, or update all usages of OsRng (search for OsRng in asymmetric
crypto and TLS modules and any 15 occurrences) to use getrandom::SysRng or
rand::rngs::SysRng and adjust imports and any API differences accordingly
(update function signatures or constructors that previously relied on OsRng),
and ensure Cargo.toml reflects the chosen crate and version consistent with
MSRV.
🤖 Prompt for all review comments with AI agents 
Verify each finding against the current code and only fix it if needed.

Outside diff comments:
In `@Cargo.toml`:
- Line 6: The project bumped rand_core to 0.10.0 which is incompatible with MSRV
1.70 and removed OsRng; fix by either reverting the dependency to a rand_core
0.6.x line in Cargo.toml to restore OsRng compatibility, or update all usages of
OsRng (search for OsRng in asymmetric crypto and TLS modules and any 15
occurrences) to use getrandom::SysRng or rand::rngs::SysRng and adjust imports
and any API differences accordingly (update function signatures or constructors
that previously relied on OsRng), and ensure Cargo.toml reflects the chosen
crate and version consistent with MSRV.
ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: cfd58929-7ecb-4851-9abb-c4504d74e5f5

📥 Commits

Reviewing files that changed from the base of the PR and between 8f86674 and 1bd0c21.

📒 Files selected for processing (1)
  • Cargo.toml

@dependabot
deps: update rand_core requirement from 0.6.4 to 0.10.0
2f29b27 
Updates the requirements on [rand_core](https://github.com/rust-random/rand_core) to permit the latest version.
- [Release notes](https://github.com/rust-random/rand_core/releases)
- [Changelog](https://github.com/rust-random/rand_core/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand_core@v0.6.4...v0.10.0)

---
updated-dependencies:
- dependency-name: rand_core
  dependency-version: 0.10.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/rand_core-0.10.0 branch from 1bd0c21 to 2f29b27 Compare April 9, 2026 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@coderabbitai coderabbitai[bot] coderabbitai[bot] left review comments

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AriajSarkar