Skip to content

Update to rand 0.10#1389

Merged
divergentdave merged 12 commits intomainfrom
david/rand-0.10
Mar 12, 2026
Merged

Update to rand 0.10#1389
divergentdave merged 12 commits intomainfrom
david/rand-0.10

Conversation

@divergentdave
Copy link
Collaborator

@divergentdave divergentdave commented Feb 9, 2026

This PR updates rand and related dependencies. See the documentation for more about this update.

Closes #1386.

@divergentdave
Copy link
Collaborator Author

Version 0.6.0 of rand_distr has been released, so that leaves cargo-vet audits. Here's what's left after skipping rust-lang-owner and WASI-related dependencies.

8 unvetted dependencies:
  chacha20:0.10.0 missing ["safe-to-deploy"]
  cpufeatures:0.3.0 missing ["safe-to-deploy"]
  getrandom:0.4.1 missing ["safe-to-deploy"]
  proc-macro2:1.0.106 missing ["safe-to-deploy"]
  rand:0.10.0 missing ["safe-to-deploy"]
  rand_core:0.10.0 missing ["safe-to-deploy"]
  rand_distr:0.6.0 missing ["safe-to-deploy"]
  syn:2.0.114 missing ["safe-to-deploy"]

recommended audits for safe-to-deploy:
    Command                                    Publisher                         Used By                                   Audit Size
    cargo vet diff syn 2.0.108 2.0.114         dtolnay                           prettyplease, serde_derive, and 3 others  52 files changed, 489 insertions(+), 294 deletions(-)
      NOTE: this project trusts David Tolnay (dtolnay) - consider cargo vet trust syn or cargo vet trust --all dtolnay
    cargo vet diff cpufeatures 0.2.6 0.3.0     github:RustCrypto/utils           chacha20                                  12 files changed, 587 insertions(+), 214 deletions(-)
    cargo vet diff rand_distr 0.5.1 0.6.0      dhardy                            prio                                      36 files changed, 679 insertions(+), 290 deletions(-)
    cargo vet diff getrandom 0.3.3 0.4.1       github:rust-random/getrandom      rand                                      43 files changed, 827 insertions(+), 586 deletions(-)
    cargo vet diff proc-macro2 1.0.95 1.0.106  dtolnay                           syn, quote, prettyplease, and 5 others    20 files changed, 1425 insertions(+), 187 deletions(-)
      NOTE: this project trusts David Tolnay (dtolnay) - consider cargo vet trust proc-macro2 or cargo vet trust --all dtolnay
    cargo vet diff rand 0.9.2 0.10.0           dhardy                            prio, rand_distr, and prio-binaries       36 files changed, 1643 insertions(+), 1328 deletions(-)
    cargo vet diff rand_core 0.9.5 0.10.0      github:rust-random/rand_core      prio, rand, chacha20, and getrandom       19 files changed, 1500 insertions(+), 1686 deletions(-)
    cargo vet inspect chacha20 0.10.0          github:RustCrypto/stream-ciphers  rand                                      4509 lines

estimated audit backlog: 16244 lines

@divergentdave divergentdave marked this pull request as ready for review March 11, 2026 22:07
@divergentdave divergentdave requested a review from a team as a code owner March 11, 2026 22:07
Copy link
Contributor

@jcjones jcjones left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link
Contributor

@tgeoghegan tgeoghegan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for wading through the audits.

@divergentdave divergentdave merged commit 0c372ba into main Mar 12, 2026
6 checks passed
@divergentdave divergentdave deleted the david/rand-0.10 branch March 12, 2026 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update to rand_core 0.10.0

3 participants