chore(deps): update rust crate rand_core to 0.9 #2317

renovate-bot · 2025-01-29T07:30:32Z

This PR contains the following updates:

Package	Type	Update	Change
rand_core (source)	workspace.dependencies	minor	`0.6` -> `0.9`

Release Notes

rust-random/rand (rand_core)

`v0.9.0`

Compare Source

Security and unsafe

Policy: "rand is not a crypto library" (#1514)
Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)
Enable feature small_rng by default (#1455)
Remove implicit feature rand_chacha; use std_rng instead. (#1473)
Rename feature serde1 to serde (#1477)
Rename feature getrandom to os_rng (#1537)
Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)
Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
Add traits TryRngCore, TryCryptoRng (#1424, #1499)
Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
Remove fn rand::random() from the prelude (#1506)
Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

Rename module rand::distributions to rand::distr (#1470)
Rename distribution Standard to StandardUniform (#1526)
Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
Rename trait distr::DistString -> distr::SampleString (#1548)
Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

API changes: Distributions

Relax Sized bound on Distribution<T> for &D (#1278)
Remove impl of Distribution<Option<T>> for StandardUniform (#1526)
Let distribution StandardUniform support all NonZero* types (#1332)
Fns {Uniform, UniformSampler}::{new, new_inclusive} return a Result (instead of potentially panicking) (#1229)
Distribution Uniform implements TryFrom instead of From for ranges (#1229)
Add UniformUsize (#1487)
Remove support for generating isize and usize values with StandardUniform, Uniform (except via UniformUsize) and Fill and usage as a WeightedAliasIndex weight (#1487)
Add impl DistString for distributions Slice<char> and Uniform<char> (#1315)
Add fn Slice::num_choices (#1402)
Add fn p() for distribution Bernoulli to access probability (#1481)

API changes: Weighted distributions

Add pub module rand::distr::weighted, moving WeightedIndex there (#1548)
Add trait weighted::Weight, allowing WeightedIndex to trap overflow (#1353)
Add fns weight, weights, total_weight to distribution WeightedIndex (#1420)
Rename enum WeightedError to weighted::Error, revising variants (#1382) and mark as #[non_exhaustive] (#1480)

API changes: SIMD

Switch to std::simd, expand SIMD & docs (#1239)

Reproducibility-breaking changes

Make ReseedingRng::reseed discard remaining data from the last block generated (#1379)
Change fn SmallRng::seed_from_u64 implementation (#1203)
Allow UniformFloat::new samples and UniformFloat::sample_single to yield high (#1462)
Fix portability of distribution Slice (#1469)
Make Uniform for usize portable via UniformUsize (#1487)
Fix IndexdRandom::choose_multiple_weighted for very small seeds and optimize for large input length / low memory (#1530)

Reproducibility-breaking optimisations

Optimize fn sample_floyd, affecting output of rand::seq::index::sample and rand::seq::SliceRandom::choose_multiple (#1277)
New, faster algorithms for IteratorRandom::choose and choose_stable (#1268)
New, faster algorithms for SliceRandom::shuffle and partial_shuffle (#1272)
Optimize distribution Uniform: use Canon's method (single sampling) / Lemire's method (distribution sampling) for faster sampling (breaks value stability; #1287)
Optimize fn sample_single_inclusive for floats (+~20% perf) (#1289)

Other optimisations

Improve SmallRng initialization performance (#1482)
Optimise SIMD widening multiply (#1247)

Other

Add Cargo.lock.msrv file (#1275)
Reformat with rustfmt and enforce (#1448)
Apply Clippy suggestions and enforce (#1448, #1474)
Move all benchmarks to new benches crate (#1329, #1439) and migrate to Criterion (#1490)

Documentation

Improve ThreadRng related docs (#1257)
Docs: enable experimental --generate-link-to-definition feature (#1327)
Better doc of crate features, use doc_auto_cfg (#1411, #1450)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

forking-renovate · 2025-01-29T07:30:34Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `rand_core`.
    ... required by package `rustls-provider-example v0.0.1 (/tmp/renovate/repos/github/rustls/rustls/provider-example)`
versions that meet the requirements `^0.9` are: 0.9.0

the package `rustls-provider-example` depends on `rand_core`, with features: `getrandom` but `rand_core` does not have these features.
 It has an optional dependency with that name, but that dependency uses the "dep:" syntax in the features table, so it does not have an implicit feature with that name.


failed to select a version for `rand_core` which could resolve this conflict

djc · 2025-01-29T10:05:50Z

I think this is blocked on dalek-cryptography/curve25519-dalek#729 via the provider-example crate.

paolobarbolini · 2025-01-31T15:22:31Z

Cargo.toml

@@ -72,7 +72,7 @@ openssl = "0.10"
 p256 = { version = "0.13.2", default-features = false, features = ["alloc", "ecdsa", "pkcs8"] }
 pkcs8 = "0.10.2"
 pki-types = { package = "rustls-pki-types", version = "1.10", features = ["alloc"] }
-rand_core = { version = "0.6", features = ["getrandom"] }
+rand_core = { version = "0.9", features = ["getrandom"] }


Suggested change

rand_core = { version = "0.9", features = ["getrandom"] }

rand_core = { version = "0.9", features = ["os_rng"] }

This works for me, with some updates & workarounds: brody4hire#5

Maybe better if this update can be done in x25519-dalek & signature crates first.

ctz · 2025-02-04T13:22:15Z

I think this is blocked on dalek-cryptography/curve25519-dalek#729 via the provider-example crate.

Going to close this PR since it is unlikely to be mergeable until this (and other rand-0.9 support in rustcrypto crates) is resolved, which might take some time. I've subscribed to some related issues in rustcrypto to keep tabs on that work -- but, also, renovate will inform us when those deps are released anyway.

forking-renovate · 2025-02-04T13:22:45Z

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (0.9). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

forking-renovate bot added the dependencies Pull requests that update a dependency file label Jan 29, 2025

renovate-bot force-pushed the renovate/rand_core-0.x branch 4 times, most recently from 722fc9c to 0adfcb7 Compare January 31, 2025 15:21

paolobarbolini reviewed Jan 31, 2025

View reviewed changes

renovate-bot force-pushed the renovate/rand_core-0.x branch 2 times, most recently from 84dbaaa to 7b7c4f5 Compare February 3, 2025 18:09

chore(deps): update rust crate rand_core to 0.9

ec12328

renovate-bot force-pushed the renovate/rand_core-0.x branch from 7b7c4f5 to ec12328 Compare February 4, 2025 10:19

ctz closed this Feb 4, 2025

renovate-bot deleted the renovate/rand_core-0.x branch February 4, 2025 13:22

ctz mentioned this pull request Feb 17, 2025

Take semver-compatible dependencies #2344

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update rust crate rand_core to 0.9 #2317

chore(deps): update rust crate rand_core to 0.9 #2317

Uh oh!

renovate-bot commented Jan 29, 2025

Uh oh!

forking-renovate bot commented Jan 29, 2025

Uh oh!

djc commented Jan 29, 2025

Uh oh!

paolobarbolini Jan 31, 2025

Uh oh!

brody4hire Feb 3, 2025

Uh oh!

ctz commented Feb 4, 2025

Uh oh!

forking-renovate bot commented Feb 4, 2025

Uh oh!

Uh oh!

	rand_core = { version = "0.9", features = ["getrandom"] }
	rand_core = { version = "0.9", features = ["os_rng"] }

chore(deps): update rust crate rand_core to 0.9 #2317

chore(deps): update rust crate rand_core to 0.9 #2317

Uh oh!

Conversation

renovate-bot commented Jan 29, 2025

Release Notes

v0.9.0

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

API changes: Distributions

API changes: Weighted distributions

API changes: SIMD

Reproducibility-breaking changes

Reproducibility-breaking optimisations

Other optimisations

Other

Documentation

Configuration

Uh oh!

forking-renovate bot commented Jan 29, 2025

⚠️ Artifact update problem

File name: Cargo.lock

Uh oh!

djc commented Jan 29, 2025

Uh oh!

paolobarbolini Jan 31, 2025

Choose a reason for hiding this comment

Uh oh!

brody4hire Feb 3, 2025

Choose a reason for hiding this comment

Uh oh!

ctz commented Feb 4, 2025

Uh oh!

forking-renovate bot commented Feb 4, 2025

Renovate Ignore Notification

Uh oh!

Uh oh!

`v0.9.0`