Skip to content

Update rand_core requirement from 0.9 to 0.10#1310

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rand_core-0.10
Open

Update rand_core requirement from 0.9 to 0.10#1310
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/rand_core-0.10

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Updates the requirements on rand_core to permit the latest version.

Release notes

Sourced from rand_core's releases.

v0.10.0

What's Changed

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

  • Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
  • RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
  • Rng is now an extension trait of TryRng<Error = Infallible> (#45)
  • TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
  • Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

  • SeedableRng::{fork, try_fork} methods (#17)
  • Re-export of core::convert::Infallible (#56)

Removed

  • TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
  • os_rng crate feature ([rand#1674])
  • OsRng and OsError structs ([rand#1674])
  • SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
  • getrandom dependency ([rand#1674])
  • std crate feature ([rand#1674])
  • Optional serde dependency (#28)
  • UnwrapMut struct and Rng::unwrap_mut method (#45)
  • Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

  • BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
  • block::Generator::drop method (#35)
  • BlockRng::word_offset method (#44)

Changed

  • Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
  • Rename BlockRng::generate_and_set method to reset_and_skip (#44)
  • Rename block::BlockRngCore trait to block::Generator (#26)
  • Rename BlockRngCore::Results associated type to Output and remove type bounds on it (#26)

Removed

  • Implementation of Rng for BlockRng, making the latter more generic (#34)
  • BlockRng64 struct (#34)
  • BlockRng::reset method (#44)
  • BlockRng::index method (replaced with BlockRng::word_offset) (#44)
  • Generator::Item associated type (#26)
  • CryptoBlockRng (#69)

... (truncated)

Changelog

Sourced from rand_core's changelog.

[0.10.0] - 2026-02-01

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

  • Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
  • RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
  • Rng is now an extension trait of TryRng<Error = Infallible> (#45)
  • TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
  • Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

  • SeedableRng::{fork, try_fork} methods (#17)
  • Re-export of core::convert::Infallible (#56)

Removed

  • TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
  • os_rng crate feature ([rand#1674])
  • OsRng and OsError structs ([rand#1674])
  • SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
  • getrandom dependency ([rand#1674])
  • std crate feature ([rand#1674])
  • Optional serde dependency (#28)
  • UnwrapMut struct and Rng::unwrap_mut method (#45)
  • Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

  • BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
  • block::Generator::drop method (#35)
  • BlockRng::word_offset method (#44)

Changed

  • Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
  • Rename BlockRng::generate_and_set method to reset_and_skip (#44)
  • Rename block::BlockRngCore trait to block::Generator (#26)
  • Rename BlockRngCore::Results associated type to Output and remove type bounds on it (#26)

Removed

  • Implementation of Rng for BlockRng, making the latter more generic (#34)
  • BlockRng64 struct (#34)
  • BlockRng::reset method (#44)
  • BlockRng::index method (replaced with BlockRng::word_offset) (#44)
  • Generator::Item associated type (#26)
  • CryptoBlockRng (#69)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 2, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 2, 2026 02:47
@dependabot dependabot bot requested a review from karthikbhargavan February 2, 2026 02:47
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Feb 2, 2026
@dependabot dependabot bot force-pushed the dependabot/cargo/rand_core-0.10 branch from b3fb98b to b175163 Compare February 2, 2026 11:01
@jschneider-bensch
Copy link
Collaborator

This needs a bit of work to deal with API changes, at least.
Also, I have not looked too closely, yet, but this would bump our MSRV for anything using rand_core to 1.85, whereas we previously stated it as 1.78 for the default feature sets (which needs to be revisited, as well, cf. #1286).

@dependabot dependabot bot force-pushed the dependabot/cargo/rand_core-0.10 branch 3 times, most recently from 3d3e4f5 to f2c5f56 Compare February 11, 2026 16:01
Updates the requirements on [rand_core](https://github.com/rust-random/rand_core) to permit the latest version.
- [Release notes](https://github.com/rust-random/rand_core/releases)
- [Changelog](https://github.com/rust-random/rand_core/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand_core@v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: rand_core
  dependency-version: 0.10.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/rand_core-0.10 branch from f2c5f56 to 09b43f9 Compare February 12, 2026 09:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments