Skip to content

chore(contracts)(deps): bump rand from 0.8.8 to 0.9.5 in /contracts - #1285

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/contracts/rand-0.9.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/contracts/rand-0.9.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps rand from 0.8.8 to 0.9.5.

Changelog

Sourced from rand's changelog.

[0.9.5] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1803)

#1803: rust-random/rand#1803

[0.9.4] — 2026-04-13

Fixes

#1766: rust-random/rand#1766

[0.9.3] — 2026-04-11

This release back-ports a fix from v0.10. See also #1763.

Changes

  • Deprecate feature log (#1764)
  • Replace usages of doc_auto_cfg (#1764)

#1763: rust-random/rand#1763

[0.9.2] — 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: contracts, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Sep 9, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
web3-student-lab Error Error Sep 14, 2026 9:10am UTC

@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

==> Running gas benchmark suite (threshold: 10%)

Bumps [rand](https://github.com/rust-random/rand) from 0.8.8 to 0.9.5.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.5/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.8...0.9.5)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/contracts/rand-0.9.5 branch from 13b7093 to 927031c Compare September 14, 2026 09:09
@github-actions

Copy link
Copy Markdown

==> Running gas benchmark suite (threshold: 10%)
==> Building comparison report

Gas & CPU Benchmark Report

Endpoint Baseline CPU Current CPU Δ CPU Δ % Status
certificate_nft::mint_certificate 70303 70303 +0 0.0% ✅ OK
dao_governance::initialize 49935 49935 +0 0.0% ✅ OK
dao_governance::grant_credits 76131 76131 +0 0.0% ✅ OK
dao_governance::create_proposal 107082 107082 +0 0.0% ✅ OK
dao_governance::vote 183038 183038 +0 0.0% ✅ OK
dao_governance::finalize 99546 99546 +0 0.0% ✅ OK
dao_governance::execute 145546 145546 +0 0.0% ✅ OK
dao_governance::get_proposal 72297 72297 +0 0.0% ✅ OK
dao_governance::credits_of 45341 45341 +0 0.0% ✅ OK
dao_governance::vote_of 43556 43556 +0 0.0% ✅ OK
hello_world::hello 19358 19358 +0 0.0% ✅ OK
payment_gateway::initialize 48310 48310 +0 0.0% ✅ OK
payment_gateway::deposit 80397 80397 +0 0.0% ✅ OK
payment_gateway::get_balance 44061 44061 +0 0.0% ✅ OK
payment_gateway::process_payment 155991 155991 +0 0.0% ✅ OK
payment_gateway::get_payment 62960 62960 +0 0.0% ✅ OK
payment_gateway::get_admin 31791 31791 +0 0.0% ✅ OK
payment_gateway::is_paused 31669 31669 +0 0.0% ✅ OK
payment_gateway::withdraw 86629 86629 +0 0.0% ✅ OK
payment_gateway::refund 174448 174448 +0 0.0% ✅ OK
payment_gateway::pause 64343 64343 +0 0.0% ✅ OK
payment_gateway::unpause 64834 64834 +0 0.0% ✅ OK
payment_gateway::update_fee_bps 65866 65866 +0 0.0% ✅ OK
payment_gateway::transfer_admin 68271 68271 +0 0.0% ✅ OK
smart_vault::deposit 70574 73191 +2617 3.7% ✅ OK
smart_vault::shares_of 40235 42638 +2403 6.0% 🟡 WARNING
smart_vault::assets_of 41223 43651 +2428 5.9% 🟡 WARNING
smart_vault::withdraw 86075 90448 +4373 5.1% 🟡 WARNING
smart_vault::stake 56741 59714 +2973 5.2% 🟡 WARNING
smart_vault::harvest 89043 94926 +5883 6.6% 🟡 WARNING
smart_vault::compound 114004 121904 +7900 6.9% 🟡 WARNING

✅ No endpoint regressed past the 10% threshold.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants