Skip to content

build(deps): bump the prod-deps group across 1 directory with 12 updates#521

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-deps-d96b55afcc
Open

build(deps): bump the prod-deps group across 1 directory with 12 updates#521
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-deps-d96b55afcc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026 •
edited
Loading

Bumps the prod-deps group with 12 updates in the / directory:

Package From To
rand_chacha 0.3.1 0.10.0
bitflags 2.11.0 2.11.1
ghash 0.5.1 0.6.0
aes 0.8.4 0.9.0
ctr 0.9.2 0.10.0
digest 0.11.1 0.11.2
hkdf 0.12.4 0.13.0
sha2 0.10.9 0.11.0
hpke 0.12.0 0.13.0
afl 0.17.1 0.18.1
clap 4.5.60 4.6.1
assert_cmd 2.1.2 2.2.1

Updates rand_chacha from 0.3.1 to 0.10.0

Release notes

Sourced from rand_chacha's releases.

0.10.0

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697 #1717: rust-random/rand#1717 #1722: rust-random/rand#1722 #1732: rust-random/rand#1732 #1734: rust-random/rand#1734

New Contributors

... (truncated)

Changelog

Sourced from rand_chacha's changelog.

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697 #1717: rust-random/rand#1717 #1722: rust-random/rand#1722 #1732: rust-random/rand#1732 #1734: rust-random/rand#1734

[0.9.2] - 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

... (truncated)

Commits

Updates bitflags from 2.11.0 to 2.11.1

Release notes

Sourced from bitflags's releases.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Changelog

Sourced from bitflags's changelog.

2.11.1

What's Changed

New Contributors

Full Changelog: bitflags/bitflags@2.11.0...2.11.1

Commits
  • 4ed9ffa Merge pull request #482 from KodrAus/cargo/2.11.1
  • c53cd57 prepare for 2.11.1 release
  • a44410a Merge pull request #481 from KodrAus/docs/clarifications
  • 3d671b9 update more compile error messages
  • 5f3adad fix up compile error messages
  • 780765d fix up contains and intersection docs
  • 97b7607 clarify self and other in method docs
  • 88a7a18 Merge pull request #477 from DanielEScherzer/patch-1
  • f0e4646 example_generated.rs: add missing third slash for doc comment
  • a31c96f Merge pull request #478 from DanielEScherzer/beta-bless
  • Additional commits viewable in compare view

Updates ghash from 0.5.1 to 0.6.0

Commits

Updates aes from 0.8.4 to 0.9.0

Commits

Updates ctr from 0.9.2 to 0.10.0

Commits

Updates digest from 0.11.1 to 0.11.2

Commits

Updates hkdf from 0.12.4 to 0.13.0

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates hpke from 0.12.0 to 0.13.0

Changelog

Sourced from hpke's changelog.

[0.13.0] - 2025-02-19

Changes

  • Made PskBundle require an explicit constructor that performs validation on inputs
  • Updated rand and rand_core to 0.9
Commits

Updates afl from 0.17.1 to 0.18.1

Changelog

Sourced from afl's changelog.

0.18.1

0.18.0

Commits

Updates clap from 4.5.60 to 4.6.1

Release notes

Sourced from clap's releases.

v4.6.1

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed
Changelog

Sourced from clap's changelog.

[4.6.1] - 2026-04-15

Fixes

  • (derive) Ensure rebuilds happen when an read env variable is changed

[4.6.0] - 2026-03-12

Compatibility

  • Update MSRV to 1.85

[4.5.61] - 2026-03-12

Internal

  • Update dependencies
Commits
  • 1420275 chore: Release
  • d2c817d docs: Update changelog
  • f88c94e Merge pull request #6341 from epage/sep
  • acbb822 fix(complete): Reduce risk of conflict with actual subcommands
  • a49fadb refactor(complete): Pull out subcommand separator
  • ddc008b Merge pull request #6332 from epage/update
  • 497dc50 chore: Update compatible dependencies
  • dca2326 Merge pull request #6331 from clap-rs/renovate/j178-prek-action-2.x
  • 54bdaa3 chore(deps): Update j178/prek-action action to v2
  • f0d30d9 chore: Release
  • Additional commits viewable in compare view

Updates assert_cmd from 2.1.2 to 2.2.1

Changelog

Sourced from assert_cmd's changelog.

[2.2.1] - 2026-04-17

Internal

  • Dependency update

[2.2.0] - 2026-03-10

Compatibility

  • Change cargo_bin bad paths to panics

[2.1.3] - 2026-03-10

Fixes

  • Un-deprecate cargo_bin
Commits
  • eea8a1c chore: Release assert_cmd version 2.2.1
  • cd6828c docs: Update changelog
  • c771f78 Merge pull request #286 from assert-rs/renovate/j178-prek-action-2.x
  • 4d63465 chore(deps): Update j178/prek-action action to v2
  • 4728aea Merge pull request #284 from sendittothenewts/anstream-v1
  • d935ff8 chore: Release assert_cmd version 2.2.0
  • 1631cf4 docs: Changelog
  • 3137b55 Merge pull request #283 from epage/panic
  • ebd79f1 fix(cargo): Panic, rather than return bad path
  • 79c9b0d chore: Release assert_cmd version 2.1.3
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Apr 23, 2026
@dependabot
build(deps): bump the prod-deps group across 1 directory with 12 updates
2909825 
Bumps the prod-deps group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rand_chacha](https://github.com/rust-random/rand) | `0.3.1` | `0.10.0` |
| [bitflags](https://github.com/bitflags/bitflags) | `2.11.0` | `2.11.1` |
| [ghash](https://github.com/RustCrypto/universal-hashes) | `0.5.1` | `0.6.0` |
| [aes](https://github.com/RustCrypto/block-ciphers) | `0.8.4` | `0.9.0` |
| [ctr](https://github.com/RustCrypto/block-modes) | `0.9.2` | `0.10.0` |
| [digest](https://github.com/RustCrypto/traits) | `0.11.1` | `0.11.2` |
| [hkdf](https://github.com/RustCrypto/KDFs) | `0.12.4` | `0.13.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [hpke](https://github.com/rozbb/rust-hpke) | `0.12.0` | `0.13.0` |
| [afl](https://github.com/rust-fuzz/afl.rs) | `0.17.1` | `0.18.1` |
| [clap](https://github.com/clap-rs/clap) | `4.5.60` | `4.6.1` |
| [assert_cmd](https://github.com/assert-rs/assert_cmd) | `2.1.2` | `2.2.1` |



Updates `rand_chacha` from 0.3.1 to 0.10.0
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@rand_chacha-0.3.1...0.10.0)

Updates `bitflags` from 2.11.0 to 2.11.1
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](bitflags/bitflags@2.11.0...2.11.1)

Updates `ghash` from 0.5.1 to 0.6.0
- [Commits](RustCrypto/universal-hashes@ghash-v0.5.1...ghash-v0.6.0)

Updates `aes` from 0.8.4 to 0.9.0
- [Commits](RustCrypto/block-ciphers@aes-v0.8.4...aes-v0.9.0)

Updates `ctr` from 0.9.2 to 0.10.0
- [Commits](RustCrypto/block-modes@ctr-v0.9.2...ctr-v0.10.0)

Updates `digest` from 0.11.1 to 0.11.2
- [Commits](RustCrypto/traits@digest-v0.11.1...digest-v0.11.2)

Updates `hkdf` from 0.12.4 to 0.13.0
- [Commits](RustCrypto/KDFs@hkdf-v0.12.4...hkdf-v0.13.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `hpke` from 0.12.0 to 0.13.0
- [Changelog](https://github.com/rozbb/rust-hpke/blob/main/CHANGELOG.md)
- [Commits](rozbb/rust-hpke@v0.12.0...v0.13.0)

Updates `afl` from 0.17.1 to 0.18.1
- [Changelog](https://github.com/rust-fuzz/afl.rs/blob/master/CHANGES.md)
- [Commits](https://github.com/rust-fuzz/afl.rs/commits)

Updates `clap` from 4.5.60 to 4.6.1
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.60...clap_complete-v4.6.1)

Updates `assert_cmd` from 2.1.2 to 2.2.1
- [Changelog](https://github.com/assert-rs/assert_cmd/blob/master/CHANGELOG.md)
- [Commits](assert-rs/assert_cmd@v2.1.2...v2.2.1)

---
updated-dependencies:
- dependency-name: aes
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: afl
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: assert_cmd
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: bitflags
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: clap
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: ctr
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: digest
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: ghash
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: hkdf
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: hpke
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: rand_chacha
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the prod-deps group with 12 updates build(deps): bump the prod-deps group across 1 directory with 12 updates Apr 30, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/prod-deps-d96b55afcc branch from d13222c to 2909825 Compare April 30, 2026 20:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants