Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Updates the requirements on rand, strum, strum_macros, criterion and iai-callgrind to permit the latest version.
Updates rand to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2 — 2025-07-20]

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)
  • Add feature thread_rng (#1547)

API changes: rand_core traits

  • Add fn RngCore::read_adapter implementing std::io::Read (#1267)
  • Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
  • Add traits TryRngCore, TryCryptoRng (#1424, #1499)
  • Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
  • Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
  • Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

  • Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)

... (truncated)

Commits

Updates strum to 0.27.2

Release notes

Sourced from strum's releases.

v0.27.2

What's Changed

New Contributors

Full Changelog: Peternator7/strum@v0.27.1...v0.27.2

Changelog

Sourced from strum's changelog.

0.27.2

  • #141: Adding support for doc comments on EnumDiscriminants generated type.

    • The doc comment will be copied from the variant on the type itself.
  • #435:allow discriminants on empty enum.

  • #443: Change enum table callbacks to FnMut.

  • #444: Add #[automatically_derived] to the impls by @​dandedotdev in Peternator7/strum#444

    • This should make the linter less noisy with warnings in generated code.
  • #440: Implement a suffix attribute for serialization of enum variants.

    #[derive(strum::Display)]
    #[strum(suffix=".json")]
    #[strum(serialize_all="snake_case")]
    enum StorageConfiguration {
      PostgresProvider,
      S3StorageProvider,
      AzureStorageProvider,
    }
    fn main() {
    let response = SurveyResponse::Other("It was good".into());
    println!("Loading configuration from: {}", StorageConfiguration::PostgresProvider);
    // prints: Loaded Configuration from: postgres_provider.json
    }

  • #446: Drop needless rustversion dependency.

0.27.1

  • #414: Fix docrs build error.

  • #417: Mention parse_error_ty and parse_error_fn that had been left out of the docs accidentally.

  • #421#331: Implement #[strum(transparent)] attribute on IntoStaticStr, Display and AsRefStr that forwards the implmenentation to the inner value. Note that for static strings, the inner value must be convertible to an &'static str.

    #[derive(strum::Display)]
    enum SurveyResponse {
      Yes,
      No,
      #[strum(transparent)]
      Other(String)
    }
    fn main() {
    let response = SurveyResponse::Other("It was good".into());
    println!("Question: Did you have fun?");

... (truncated)

Commits

Updates strum_macros to 0.27.2

Release notes

Sourced from strum_macros's releases.

v0.27.2

What's Changed

New Contributors

Full Changelog: Peternator7/strum@v0.27.1...v0.27.2

Changelog

Sourced from strum_macros's changelog.

0.27.2

  • #141: Adding support for doc comments on EnumDiscriminants generated type.

    • The doc comment will be copied from the variant on the type itself.
  • #435:allow discriminants on empty enum.

  • #443: Change enum table callbacks to FnMut.

  • #444: Add #[automatically_derived] to the impls by @​dandedotdev in Peternator7/strum#444

    • This should make the linter less noisy with warnings in generated code.
  • #440: Implement a suffix attribute for serialization of enum variants.

    #[derive(strum::Display)]
    #[strum(suffix=".json")]
    #[strum(serialize_all="snake_case")]
    enum StorageConfiguration {
      PostgresProvider,
      S3StorageProvider,
      AzureStorageProvider,
    }
    fn main() {
    let response = SurveyResponse::Other("It was good".into());
    println!("Loading configuration from: {}", StorageConfiguration::PostgresProvider);
    // prints: Loaded Configuration from: postgres_provider.json
    }

  • #446: Drop needless rustversion dependency.

0.27.1

  • #414: Fix docrs build error.

  • #417: Mention parse_error_ty and parse_error_fn that had been left out of the docs accidentally.

  • #421#331: Implement #[strum(transparent)] attribute on IntoStaticStr, Display and AsRefStr that forwards the implmenentation to the inner value. Note that for static strings, the inner value must be convertible to an &'static str.

    #[derive(strum::Display)]
    enum SurveyResponse {
      Yes,
      No,
      #[strum(transparent)]
      Other(String)
    }
    fn main() {
    let response = SurveyResponse::Other("It was good".into());
    println!("Question: Did you have fun?");

... (truncated)

Commits

Updates criterion to 0.7.0

Changelog

Sourced from criterion's changelog.

[0.7.0] - 2025-07-25

  • Bump version of criterion-plot to align dependencies.

[0.6.0] - 2025-05-17

Changed

  • MSRV bumped to 1.80
  • The real_blackbox feature no longer has any impact. Criterion always uses std::hint::black_box() now. Users of criterion::black_box() should switch to std::hint::black_box().
  • clap dependency unpinned.

Fixed

  • gnuplot version is now correctly detected when using certain Windows binaries/configurations that used to fail

Added

  • Async benchmarking with Tokio may be done via a tokio::runtime::Handle, not only a tokio::runtime::Runtime

[0.5.1] - 2023-05-26

Fixed

  • Quick mode (--quick) no longer crashes with measured times over 5 seconds when --noplot is not active

[0.5.0] - 2023-05-23

Changed

  • Replaced lazy_static dependency with once_cell
  • Improved documentation of the html_reports feature
  • Replaced atty dependency with is-terminal
  • MSRV bumped to 1.64
  • Upgraded clap dependency to v4
  • Upgraded tempfile dependency to v3.5.0

Fixed

  • Quick mode (--quick) no longer outputs 1ms for measured times over 5 seconds
  • Documentation updates

[0.4.0] - 2022-09-10

Removed

  • The Criterion::can_plot function has been removed.
  • The Criterion::bench_function_over_inputs function has been removed.
  • The Criterion::bench_functions function has been removed.
  • The Criterion::bench function has been removed.

Changed

  • HTML report hidden behind non-default feature flag: 'html_reports'
  • Standalone support (ie without cargo-criterion) feature flag: 'cargo_bench_support'
  • MSRV bumped to 1.57

... (truncated)

Commits
  • 567405d release: bump criterion and criterion-plot versions (#878)
  • ccccbcc fix: deal with throughput in bits (#861)
  • deb0eb0 feat: support throughput reports in bits (#833)
  • d4fd7cc Add CI job checking library builds with oldest allowed dependencies (#854)
  • See full diff in compare view

Updates iai-callgrind to 0.16.1

Release notes

Sourced from iai-callgrind's releases.

v0.16.1

[0.16.1] - 2025-07-30

Added

  • (#411): Add ability to set report tolerance. Thanks to @​nihohit
  • (#419): Add support for the valgrind command-line arguments --xtree-memory and memcheck's --xtree-leak. The output files extension is .xtree for --xtree-memory and .xleak for --xtree-leak.
  • (#420): Add command-line arguments --callgrind-metrics (env: IAI_CALLGRIND_CALLGRIND_METRICS), --cachegrind-metrics (env: IAI_CALLGRIND_CACHEGRIND_METRICS), --dhat-metrics (env: IAI_CALLGRIND_DHAT_METRICS), --drd-metrics (env: IAI_CALLGRIND_DRD_METRICS), --memcheck-metrics (env: IAI_CALLGRIND_MEMCHECK_METRICS), --helgrind-metrics (env: IAI_CALLGRIND_HELGRIND_METRICS) to be able to adjust the shown metrics and their order in the terminal output of the respective tool.
  • (#421): Add --tolerance (env: IAI_CALLGRIND_TOLERANCE) to be able to adjust the tolerance level on the command-line (in addition to #411).
  • (c9cbcf61): Build artifacts of the iai-callgrind-runner for the riscv64 target. The artifacts were added retroactively for all releases >=v0.12.0.
  • (52d71ad0): Add mapping of iai-callgrind-runner version to json schema version to the guide.

Changed

  • (#417): backwards-compatible change of summary.v6.schema.json. The order and documentation of items changes.
  • (#422): Resort and group the options in the --help output for Iai-Callgrind command-line arguments.
  • Update direct dependencies: strum

Removed

  • (#417): Unused dependencies: serde_regex, tokio

Fixed

  • (52d71ad0): Removed the wrong link to schema version v2 in the machine-readable output section of guide.
  • (#417): -v in arguments for tools other than cachegrind and callgrind was not parsed the same way as --verbose

Full Changelog: gungraun/gungraun@v0.16.0...v0.16.1

Changelog

Sourced from iai-callgrind's changelog.

[0.16.1] - 2025-07-30

Added

  • (#411): Add ability to set report tolerance. Thanks to @​nihohit
  • (#419): Add support for the valgrind command-line arguments --xtree-memory and memcheck's --xtree-leak. The output files extension is .xtree for --xtree-memory and .xleak for --xtree-leak.
  • (#420): Add command-line arguments --callgrind-metrics (env: IAI_CALLGRIND_CALLGRIND_METRICS), --cachegrind-metrics (env: IAI_CALLGRIND_CACHEGRIND_METRICS), --dhat-metrics (env: IAI_CALLGRIND_DHAT_METRICS), --drd-metrics (env: IAI_CALLGRIND_DRD_METRICS), --memcheck-metrics (env: IAI_CALLGRIND_MEMCHECK_METRICS), --helgrind-metrics (env: IAI_CALLGRIND_HELGRIND_METRICS) to be able to adjust the shown metrics and their order in the terminal output of the respective tool. and to be able to
  • (#421): Add --tolerance (env: IAI_CALLGRIND_TOLERANCE) to be able to adjust the tolerance level on the command-line (in addition to #411).
  • (c9cbcf61): Build artifacts of the iai-callgrind-runner for the riscv64 target. The artifacts were added retroactively for all releases >=v0.12.0.
  • (52d71ad0): Add mapping of iai-callgrind-runner version to json schema version to the guide.

Changed

  • (#417): backwards-compatible change of summary.v6.schema.json. The order and documentation of items changes.
  • (#422): Resort and group the options in the --help output for Iai-Callgrind command-line arguments.
  • Update direct dependencies: strum

Removed

  • (#417): Unused dependencies: serde_regex, tokio

Fixed

  • (52d71ad0): Removed the wrong link to schema version v2 in the machine-readable output section of guide.
  • (#417): -v in arguments for tools other than cachegrind and callgrind was not parsed the same way as --verbose

... (truncated)

Commits
  • 27399d0 Merge pull request #425 from gamma0987/release
  • e43135f Merge pull request #426 from iai-callgrind/renovate/clap-4.x-lockfile
  • 4dab4b9 chore(just): Fix version bump of the guide source files
  • 3cd4f14 chore(deps): update rust crate clap to v4.5.42
  • e930fce Bump version v0.16.0 -> v0.16.1
  • ed25dd7 chore(deps): Update dependencies
  • 3a1e51c Update CHANGELOG
  • 0cc275b Merge pull request #424 from gamma0987/update-docs
  • af7944b docs(lib+guide): Update documentation for --tolerance, ...
  • a4c66bb Update CHANGELOG
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 29, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 29, 2025

Labels

The following labels could not be found: cargo, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from a team as a code owner September 29, 2025 10:56
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 29, 2025
Updates the requirements on [rand](https://github.com/rust-random/rand), [strum](https://github.com/Peternator7/strum), [strum_macros](https://github.com/Peternator7/strum), [criterion](https://github.com/bheisler/criterion.rs) and [iai-callgrind](https://github.com/iai-callgrind/iai-callgrind) to permit the latest version.

Updates `rand` to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.0...rand_core-0.9.2)

Updates `strum` to 0.27.2
- [Release notes](https://github.com/Peternator7/strum/releases)
- [Changelog](https://github.com/Peternator7/strum/blob/master/CHANGELOG.md)
- [Commits](Peternator7/strum@v0.26.1...v0.27.2)

Updates `strum_macros` to 0.27.2
- [Release notes](https://github.com/Peternator7/strum/releases)
- [Changelog](https://github.com/Peternator7/strum/blob/master/CHANGELOG.md)
- [Commits](Peternator7/strum@v0.26.1...v0.27.2)

Updates `criterion` to 0.7.0
- [Changelog](https://github.com/bheisler/criterion.rs/blob/master/CHANGELOG.md)
- [Commits](bheisler/criterion.rs@0.6.0...0.7.0)

Updates `iai-callgrind` to 0.16.1
- [Release notes](https://github.com/iai-callgrind/iai-callgrind/releases)
- [Changelog](https://github.com/gungraun/gungraun/blob/main/CHANGELOG.md)
- [Commits](gungraun/gungraun@v0.15.0...v0.16.1)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: strum
  dependency-version: 0.27.2
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: strum_macros
  dependency-version: 0.27.2
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: criterion
  dependency-version: 0.7.0
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: iai-callgrind
  dependency-version: 0.16.1
  dependency-type: direct:production
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/cargo/glide-core/minor-updates-d026ecb662 branch from 289c526 to 6071829 Compare October 6, 2025 09:36
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 13, 2025
@dependabot dependabot bot deleted the dependabot/cargo/glide-core/minor-updates-d026ecb662 branch October 13, 2025 09:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant