Update Rust Dependencies by red-hat-konflux[bot] · Pull Request #243 · securesign/tough

red-hat-konflux · 2026-06-25T22:32:00Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
anyhow	dependencies	patch	`1.0.97` → `1.0.104`
assert_cmd	dev-dependencies	minor	`2.0.16` → `2.2.2`
async-trait	dependencies	patch	`0.1.87` → `0.1.91`
aws-config	dependencies	minor	`1.5.6` → `1.10.1`
aws-lc-rs	dependencies	patch	`1.17.0` → `1.17.3`
aws-sdk-kms	dependencies	minor	`1.43.0` → `1.114.0`
aws-sdk-ssm	dependencies	minor	`1.47.0` → `1.118.0`
aws-smithy-experimental	dependencies	minor	`0.1` → `0.3`
aws-smithy-http	dev-dependencies	minor	`0.60` → `0.64`
aws-smithy-runtime	dev-dependencies	minor	`1.7.8` → `1.12.1`
aws-smithy-types	dev-dependencies	minor	`1.2.13` → `1.6.1`
axum	dependencies	minor	`0.6` → `0.8`
base64	dependencies	minor	`0.22` → `0.23`
base64	dev-dependencies	minor	`0.22` → `0.23`
bytes	dependencies	minor	`1.10.0` → `1.12.1`
bytes	dev-dependencies	minor	`1.10.0` → `1.12.1`
chrono	dependencies	patch	`0.4.40` → `0.4.45`
clap	dependencies	minor	`4.5.31` → `4.6.4`	`4.6.5`
dyn-clone	dependencies	patch	`1.0.19` → `1.0.20`
filetime	dependencies	patch	`0.2.26` → `0.2.29`
futures	dev-dependencies	patch	`0.3.31` → `0.3.33`
futures	dependencies	patch	`0.3.31` → `0.3.33`
futures-core	dev-dependencies	patch	`0.3.31` → `0.3.33`
futures-core	dependencies	patch	`0.3.31` → `0.3.33`
futures-util	dependencies	patch	`0.3.31` → `0.3.33`
globset (source)	dependencies	patch	`0.4.16` → `0.4.19`
http	dev-dependencies	minor	`1.2.0` → `1.5.0`
httptest	dev-dependencies	patch	`0.16.3` → `0.16.4`
indexmap	dependencies	minor	`2.7.1` → `2.14.0`
itertools	dependencies	minor	`0.13.0` → `0.15.0`
log	dependencies	patch	`0.4.26` → `0.4.33`
openssl	dependencies	patch	`0.10.71` → `0.10.81`
pem (source)	dependencies	patch	`3.0.5` → `3.0.6`
percent-encoding	dependencies	patch	`2.3.1` → `2.3.2`
pki-types	dependencies	minor	`1.12.0` → `1.15.1`
prost-types	dependencies	minor	`0.13.5` → `0.14.0`
rand (source)	dependencies	minor	`0.8` → `0.10`
rayon	dependencies	minor	`1.10.0` → `1.12.0`
regex	dependencies	minor	`1.11.1` → `1.13.1`
reqwest	dependencies	minor	`0.12` → `0.13`
rstest	dependencies	minor	`0.22.0` → `0.26.0`
rustls	dependencies	patch	`0.23.23` → `0.23.43`
rustls-webpki	dependencies	minor	`0.102.1` → `0.103.0`
serde (source)	dependencies	patch	`1.0.219` → `1.0.229`
serde (source)	dev-dependencies	patch	`1.0.219` → `1.0.229`
serde_derive (source)	dev-dependencies	patch	`1.0.219` → `1.0.229`
serde_json	dependencies	patch	`1.0.140` → `1.0.151`
serde_json	dev-dependencies	patch	`1.0.140` → `1.0.151`
serial_test	dependencies	minor	`3.2.0` → `3.5.0`
sigstore_protobuf_specs	dependencies	minor	`0.4` → `0.5`
snafu	dependencies	minor	`0.8` → `0.9`
tempfile (source)	dependencies	minor	`3.17.1` → `3.27.0`
tokio	dependencies	minor	`1.43.0` → `1.53.1`
tokio	dev-dependencies	minor	`1.43.0` → `1.53.1`
tokio-retry	dependencies	patch	`0.3.0` → `0.3.2`
tokio-test	dev-dependencies	patch	`0.4.4` → `0.4.5`
tokio-util	dependencies	patch	`0.7.13` → `0.7.19`
tower	dependencies	minor	`0.4` → `0.5`
tower-http	dependencies	minor	`0.4` → `0.7`
tracing	dependencies	patch	`0.1.41` → `0.1.44`
typed-path	dependencies	minor	`0.9` → `0.12`
unicode-normalization	dependencies	patch	`0.1.24` → `0.1.25`
untrusted	dependencies	minor	`0.7.1` → `0.9.0`
url	dependencies	patch	`2.5.4` → `2.5.8`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

assert-rs/assert_cmd (assert_cmd)

`v2.2.2`

Compare Source

Fixes

Ensure #[track_caller] works for better panic messages

`v2.2.1`

Compare Source

Internal

Dependency update

`v2.2.0`

Compare Source

Compatibility

Change cargo_bin bad paths to panics

`v2.1.3`

Compare Source

Fixes

Un-deprecate cargo_bin

`v2.1.2`

Compare Source

Fixes

Add #[must_use] to help catch missing assertions

`v2.1.1`

Compare Source

`v2.1.0`

Compare Source

Compatibility

Deprecated crate_name!() in favor of pkg_name!()
Deprecated Command::cargo_bin, CommandCargoExt::cargo_bin, cargo_bin in favor of cargo_bin!, cargo_bin_cmd!

Features

Provide cargo_bin_cmd!()
Use pkg_name!() as a default parameter to cargo_bin!()

`v2.0.17`

Compare Source

Features

Add cargo::cargo_bin! which will work with Cargo's build-dir

aws/aws-lc-rs (aws-lc-rs)

`v1.17.3`: aws-lc-rs v1.17.3

Compare Source

What's Changed

Add public API to check AWS-LC and FIPS versions by @prasden in #1167
- awslc_version() returns the linked AWS-LC library version (e.g., "5.1.0"), resolved at runtime. fips_version() returns the AWS-LC FIPS release-branch version as Some(version), or None when unavailable. Note that fips_version() is independent of try_fips_mode().
Clarify representations of PqdsaKeyPair in serialized forms by @Mark-Simulacrum in #1174
- Documents how to use PqdsaKeyPair::from_seed in a FIPS setting, and notes that key pairs constructed from the expanded form cannot be re-serialized to PKCS#8 (which contains just the seed).

Build Improvements

Fix TARGET_* env leakage into host builds by @justsmth in #1171
- Per the cc-rs convention, TARGET_CC/TARGET_CXX/TARGET_CFLAGS are now only applied when cross-compiling, and HOST_* variables are honored for native builds. Previously, when aws-lc-sys appeared as both a dependency and a build-dependency in a cross build, the cross toolchain's flags leaked into the host-side build.
Restore cc default flags in memcmp probe; only fail build on confirmed bug by @justsmth in #1173
- Fixes build failures under RPM hardened build flags (Fedora/RHEL/Rocky rpmbuild defaults): the memcmp probe (GCC bug 95189 check) now retains cc's computed target default flags (e.g., -fPIC) while still excluding user CFLAGS. The check also only runs for GCC versions that may contain the bug, and a probe that fails to build only warns -- the build only fails when the miscompilation is actually demonstrated.

Issues Being Closed

Public API for FIPS status -- #1166
memcmp probe fails under RPM hardened build flags -- #1168
Cross-compilation failure: TARGET_CFLAGS applied to host builds -- #1169

Other Merged PRs

ci: Stop installing winehq-stable in cross windows-gnu pre-build by @justsmth in #1172
ci: only run push-triggered workflows on main by @justsmth in #1163
Prepare aws-lc-sys v0.43.0 by @justsmth in #1176
Prepare aws-lc-rs v1.17.2 by @justsmth in #1178
Prepare aws-lc-fips-sys v0.13.16 by @justsmth in #1180
build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #1177

New Contributors

@Mark-Simulacrum made their first contribution in #1174
@prasden made their first contribution in #1167

Full Changelog: aws/aws-lc-rs@v1.17.1...v1.17.3

[!NOTE]
aws-lc-rs v1.17.2 has been yanked. It failed to compile with the fips feature when aws-lc-fips-sys resolved to v0.13.15 (or earlier), since that version lacks functions needed by the new version APIs. v1.17.3 is identical to v1.17.2 aside from requiring aws-lc-fips-sys v0.13.16.

`v1.17.2`

Compare Source

`v1.17.1`: aws-lc-rs v1.17.1

Compare Source

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

Certificate #5314 (static)
Certificate #5298 (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Support linking against a system-installed AWS-LC:
- Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @justsmth in #1129
- Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @justsmth in #1143
- Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @justsmth in #1156
- Gate system AWS-LC on a declared minimum version by @justsmth in #1152
Implement Send/Sync for RSA hazmat encryption key types by @justsmth in #1128
Add Salt::none constructor for HKDF by @justsmth in #1135
Add wasm32-unknown-emscripten build and test support by @justsmth in #1059
Report specific key rejection reasons for invalid RSA key sizes by @justsmth in #1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @jakemas in aws/aws-lc#3195 and aws/aws-lc#3219
Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

Fix memcmp_check build failure when CFLAGS contains LTO flags by @justsmth in #1134
Fix missing poly_Rq_mul symbol in Linux x86_64 build by @Lebei2046 in #1130
Apply -ffile-prefix-map to jitterentropy builder by @justsmth in #1139
Select compiler flag dialect by driver mode, not target ABI by @justsmth in #1147

Issues Being Closed

RSA hazmat encryption key types missing Send/Sync -- #1125
RSA key rejection reports generic Unspecified for invalid key sizes -- #1082
Build failure when CFLAGS contains LTO flags (Windows/clang) -- #1132
cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- #1146
Support system-provided AWS-LC library -- #936
cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- #1108
jitterentropy embeds absolute paths to files -- #1137

Other Merged PRs

Add ML-DSA aarch64 native assembly to CC builder scripts by @jakemas in #1113
Clarify HKDF info concatenation and encoding responsibility by @justsmth in #1145
CI: support zig cross compile for arm32 by @justsmth in #1124
fix(clippy): fix truncate warnings by @justsmth in #1126
ci: replace dtolnay/rust-toolchain with direct rustup invocations by @justsmth in #1133
Reduce AEAD and RSA test iterations under DISABLE_SLOW_TESTS by @justsmth in #1119
ci(compilers): retry-tolerant curl, latest Go, drop unused PowerShell by @justsmth in #1138
ci(cross): generate MSRV-aware lockfile for alpine-linux by @justsmth in #1150
Harden GitHub Actions workflows against script injection by @justsmth in #1161
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #1141
Bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #1142
Bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #1144
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1155
Prepare aws-lc-fips-sys v0.13.15 by @justsmth in #1158
Prepare aws-lc-sys v0.42.0 by @justsmth in #1162
Prepare aws-lc-rs v1.17.1 by @justsmth in #1164

New Contributors

@Lebei2046 made their first contribution in #1130

Full Changelog: aws/aws-lc-rs@v1.17.0...v1.17.1

chronotope/chrono (chrono)

`v0.4.45`: 0.4.45

Compare Source

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in #1787
tz_data: fix tzdata locations on Android by @caruschalalamove in #1789

`v0.4.44`: 0.4.44

Compare Source

What's Changed

docs: match MSRV with Cargo.toml contents by @coryan in #1772
Add track_caller to non-deprecated functions by @svix-jplatte in #1774

`v0.4.43`: 0.4.43

Compare Source

What's Changed

Install extra components for lint workflow by @djc in #1741
Upgrade windows-bindgen to 0.64 by @djc in #1742
Improve windows-bindgen setup by @djc in #1744
Drop stabilized feature doc_auto_cfg by @djc in #1745
Faster RFC 3339 parsing by @djc in #1748
Update windows-bindgen requirement from 0.64 to 0.65 by @dependabot[bot] in #1751
add NaiveDate::abs_diff by @Kinrany in #1752
Add feature gated defmt support. by @pebender in #1747
Drop deny lints, eager Debug impls are a mixed blessing by @djc in #1753
chore: minor improvement for docs by @spuradage in #1756
Added doctest for the NaiveDate years_since function by @LucasBou in #1755
Prepare 0.4.43 by @djc in #1765
Update copyright year to 2026 in LICENSE.txt by @taozui472 in #1767

`v0.4.42`: 0.4.42

Compare Source

What's Changed

Add fuzzer for DateTime::parse_from_str by @tyler92 in #1700
Fix wrong amount of micro/milliseconds by @nmlt in #1703
Add warning about MappedLocalTime and wasm by @lutzky in #1702
Fix incorrect parsing of fixed-length second fractions by @chris-leach in #1705
Fix cfgs for wasm32-linux support by @arjunr2 in #1707
Fix OpenHarmony's tzdata parsing by @ldm0 in #1679
Convert NaiveDate to/from days since unix epoch by @findepi in #1715
Add ?Sized bound to related methods of DelayedFormat::write_to by @Huliiiiii in #1721
Add from_timestamp_secs method to DateTime by @jasonaowen in #1719
Migrate to core::error::Error by @benbrittain in #1704
Upgrade to windows-bindgen 0.63 by @djc in #1730
strftime: simplify error handling by @djc in #1731

`v0.4.41`

Compare Source

What's Changed

Add subsec_micros and subsec_millis methods to TimeDelta by @ggoetz in #1668
Deprecate NaiveDateTime::UNIX_EPOCH by @robertbastian in #1670
Implement as_seconds_f32 and as_seconds_f64 for TimeDelta by @ggoetz in #1671
chore: fix some comments by @jimmycathy in #1677
Add num_days_in_month method to Datelike trait by @aslilac in #1673
add WeekdaySet, a collection of Weekday that is Copy by @Kinrany in #1676
WeekdaySet tweaks by @djc in #1680
Upgrade to windows-bindgen 0.61 by @djc in #1682
Implemented a consistent Eq trait for NaiveWeek by @Splashling1789 in #1687
TimeZone::from_posix_tz: Treat empty TZ variable as UTC by @drinkcat in #1691
Add support for lossy format strings by @Qelxiros in #1693

alexcrichton/filetime (filetime)

BurntSushi/ripgrep (globset)

`v0.4.19`

Compare Source

`v0.4.18`

Compare Source

`v0.4.17`

Compare Source

ggriffiniii/httptest (httptest)

`v0.16.4`

Compare Source

jcreekmore/pem-rs (pem)

`v3.0.6`

Compare Source

switch from serde to serde_core

rust-random/rand (rand)

`v0.10.2`

Compare Source

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

`v0.10.1`

Compare Source

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)
Deprecate feature log (#1763)

`v0.10.0`

Compare Source

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
Use Edition 2024 and MSRV 1.85 (#1653)
Let Fill be implemented for element types, not sliceable types (#1652)
Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
Remove Clone support for StdRng, ReseedingRng (#1677)
Use postcard instead of bincode to test the serde feature (#1693)
Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)
Removed unused feature "nightly" (#1732)
Removed feature small_rng (#1732)

`v0.9.5`

Compare Source

What's Changed

rand v0.9.5: backport #1790 by @dhardy in #1803

Full Changelog: rust-random/rand@0.9.4...0.9.5

`v0.9.4`

Compare Source

Fixes

Fix doc build (#1766)

Full Changelog: rust-random/rand@0.9.3...0.9.4

`v0.9.3`

Compare Source

This release back-ports a fix from v0.10. See also [#1763].

Changes

Deprecate feature log (#1764)
Replace usages of doc_auto_cfg (#1764)

Full Changelog: rust-random/rand@0.9.2...0.9.3

`v0.9.2`

Compare Source

Deprecated

Deprecate rand::rngs::mock module and StepRng generator ([#1634])

Additions

Enable WeightedIndex<usize> (de)serialization ([#1646])

`v0.9.1`

Compare Source

Security and unsafe

Revise "not a crypto library" policy again (#1565)
Remove zerocopy dependency from rand (#1579)

Fixes

Fix feature simd_support for recent nightly rust (#1586)

Changes

Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change ([#1382]) to the previous release.

Additions

Add rand::distr::Alphabetic distribution. (#1587)
Re-export rand_core (#1604)

`v0.9.0`

Compare Source

Security and unsafe

Policy: "rand is not a crypto library" (#1514)
Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
Update to rand_core v0.9.0 (#1558)

Features

Support std feature without getrandom or rand_chacha (#1354)
Enable feature small_rng by default (#1455)
Remove implicit feature rand_chacha; use std_rng instead. (#1473)
Rename feature serde1 to serde (#1477)
Rename feature getrandom to os_rng (#1537)
Add feature thread_rng (#1547)

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read (#1267)
Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore (#1273)
Add traits TryRngCore, TryCryptoRng (#1424, #1499)
Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng (#1424)
Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng (#1424)
Add bounds Clone and AsRef to associated type SeedableRng::Seed (#1491)

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude (#1506)
Remove fn rand::random() from the prelude (#1506)
Add top-level fns random_iter, random_range, random_bool, random_ratio, fill (#1488)
Re-introduce fn Rng::gen_iter as random_iter (#1305, #1500)
Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 (#1438)
Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio (#1505)
Annotate panicking methods with #[track_caller] (#1442, #1447)

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits (#1455)
Remove first parameter (rng) of ReseedingRng::new (#1533)

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom (#1382)
Add IndexedRandom::choose_multiple_array, index::sample_array (#1453, #1469)

API changes: Distributions: renames

Rename module rand::distributions to rand::distr (#1470)
Rename distribution Standard to StandardUniform (#1526)
Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty (#1548)
Rename trait distr::DistString -> distr::SampleString (#1548)
Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map (#1548)

API changes: Distributions

Relax Sized bound on Distribution<T> for &D (#1278)
Remove impl of Distribution<Option<T>> for StandardUniform (#1526)
Let distribution StandardUniform support all NonZero* types (#1332)
Fns {Uniform, UniformSampler}::{new, new_inclusive} return a Result (instead of potentially panicking) (#1229)
Distribution Uniform implements TryFrom instead of From for ranges (#1229)
Add UniformUsize (#1487)
Remove support for generating isize and usize values with StandardUniform, Uniform (except via UniformUsize) and Fill and usage as a WeightedAliasIndex weight (#1487)
Add impl DistString for distributions Slice<char> and Uniform<char> (#1315)
Add fn Slice::num_choices (#1402)
Add fn p() for distribution Bernoulli to access probability (#1481)

API changes: Weighted distributions

Add pub module rand::distr::weighted, moving WeightedIndex there (#1548)
Add trait weighted::Weight, allowing WeightedIndex to trap overflow (#1353)
Add fns weight, weights, total_weight to distribution WeightedIndex (#1420)
Rename enum WeightedError to weighted::Error, revising variants (#1382) and mark as #[non_exhaustive] (#1480)

API changes: SIMD

Switch to std::simd, expand SIMD & docs (#1239)

Reproducibility-breaking changes

Make ReseedingRng::reseed discard remaining data from the last block generated (#1379)
Change fn SmallRng::seed_from_u64 implementation (#1203)
Allow UniformFloat::new samples and UniformFloat::sample_single to yield high (#1462)
Fix portability of distribution Slice (#1469)
Make Uniform for usize portable via UniformUsize (#1487)
Fix IndexdRandom::choose_multiple_weighted for very small seeds and optimize for large input length / low memory (#1530)

Reproducibility-breaking optimisations

Optimize fn sample_floyd, affecting output of rand::seq::index::sample and rand::seq::SliceRandom::choose_multiple (#1277)
New, faster algorithms for IteratorRandom::choose and choose_stable (#1268)
New, faster algorithms for SliceRandom::shuffle and partial_shuffle (#1272)
Optimize distribution Uniform: use Canon's method (single sampling) / Lemire's method (distribution sampling) for faster sampling (breaks value stability; #1287)
Optimize fn sample_single_inclusive for floats (+~20% perf) (#1289)

Other optimisations

Improve SmallRng initialization performance (#1482)
Optimise SIMD widening multiply (#1247)

Other

Add Cargo.lock.msrv file (#1275)
Reformat with rustfmt and enforce (#1448)
Apply Clippy suggestions and enforce (#1448, #1474)
Move all benchmarks to new benches crate (#1329, #1439) and migrate to Criterion (#1490)

Documentation

Improve ThreadRng related docs (#1257)
Docs: enable experimental --generate-link-to-definition feature (#1327)
Better doc of crate features, use doc_auto_cfg (#1411, #1450)

`v0.8.7`

Compare Source

What's Changed

rand v0.8.7: backport #1790 by @dhardy in #1804

Full Changelog: rust-random/rand@0.8.6...0.8.7

`v0.8.6`

Compare Source

What's Changed

This release back-ports a fix from v0.10. See also #1763.

Changes

Deprecate feature log (#1772)

Drop the experimental simd_support feature.

New Contributors

@nwalfield made their first contribution in #1772

Full Changelog: rust-random/rand@0.8.5...0.8.6

rust-lang/regex (regex)

`v1.13.1`

Compare Source

===================
This is a release that fixes a bug where incorrect regex match offsets could be
reported. Note that this doesn't impact whether a match occurs or not, just
where it occurs. The match offsets are still valid for slicing, they just may
not refer to the correct leftmost-first match. See
#1364 for (many) more details.

Bug fixes:

#1354:
Fixes previously unsound reverse suffix and inner optimizations.

`v1.13.0`

Compare Source

===================
This release includes a new API, a regex! macro, for lazy compilation of
a regex from a string literal. If you use regexes a lot, it's likely you've
already written one exactly like it. The new macro can be used like this:

use regex::regex;

fn is_match(line: &str) -> bool {
    // The regex will be compiled approximately once and reused automatically.
    // This avoids the footgun of using `Regex::new` here, which would
    // guarantee that it would be compiled every time this routine is called.
    // This would likely make this routine much slower than it needs to be.
    regex!(r"bar|baz").is_match(line)
}

let hay = "\
path/to/foo:54:Blue Harvest
path/to/bar:90:Something, Something, Something, Dark Side
path/to/baz:3:It's a Trap!
";

let matches = hay.lines().filter(|line| is_match(line)).count();
assert_eq!(matches, 2);

Improvements:

#709:
Add a new regex! macro for efficient and automatic reuse of a compiled regex.

`v1.12.4`

Compare Source

===================
This release includes a performance optimization for compilation of regexes
with very large character classes.

Improvements:

#1308:
Avoid re-canonicalizing the entire interval set when pushing new class ranges.

`v1.12.3`

Compare Source

===================
This release excludes some unnecessary things from the archive published to
crates.io. Specifically, fuzzing data and various s

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-06-25T22:32:03Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path integ/failure-server/Cargo.toml --package anyhow@1.0.97 --precise 1.0.104
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/se/rd/serde, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough-kms/Cargo.toml --package aws-config@1.5.6 --precise 1.10.1
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough-ssm/Cargo.toml --package aws-config@1.5.6 --precise 1.10.1
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough/Cargo.toml --package async-trait@0.1.87 --precise 0.1.91
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tuftool/Cargo.toml --package assert_cmd@2.0.16 --precise 2.2.2
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/se/rd/serde, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path olpc-cjson/Cargo.toml --package serde@1.0.219 --precise 1.0.229
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/se/rd/serde, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Jun 25, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch 4 times, most recently from da9a0ce to 1fcd56a Compare July 1, 2026 10:06

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 1, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from 1fcd56a to 324f60f Compare July 1, 2026 15:51

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 1, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 1, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 3, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 3, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 4, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 4, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 5, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 5, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from 324f60f to f372be8 Compare July 6, 2026 11:27

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 9, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 9, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 10, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 10, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from f372be8 to 5190080 Compare July 10, 2026 21:31

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 11, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 11, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 12, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 13, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 15, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 15, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 16, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 16, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 19, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 19, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 19, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 19, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from 5190080 to 6651bca Compare July 21, 2026 17:55

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 22, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from 6651bca to 6234222 Compare July 22, 2026 11:23

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 22, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 23, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 23, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 24, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 24, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from 6234222 to 42bd703 Compare July 26, 2026 17:32

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 28, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 28, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch 4 times, most recently from bf590a3 to 341ed71 Compare July 30, 2026 06:11

Update Rust Dependencies

a475e0e

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/rust-deps branch from 341ed71 to a475e0e Compare July 30, 2026 10:10

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Jul 30, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Jul 31, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Aug 1, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Aug 1, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Aug 1, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Aug 2, 2026

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Aug 3, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update rust dependencies~~ Update Rust Dependencies Aug 3, 2026

Navigation Menu

Uh oh!

Update Rust Dependencies - #243

Update Rust Dependencies#243
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/rust-deps

red-hat-konflux Bot commented Jun 25, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Jun 25, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux Bot commented Jun 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixes

Internal

Compatibility

Fixes

Fixes

Compatibility

Features

Features

v1.17.3: aws-lc-rs v1.17.3

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v1.17.1: aws-lc-rs v1.17.1

What's Changed

Upstream AWS-LC (v5.1.0)

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v0.4.45: 0.4.45

What's Changed

v0.4.44: 0.4.44

What's Changed

v0.4.43: 0.4.43

What's Changed

v0.4.42: 0.4.42

What's Changed

What's Changed

Fixes

Changes

Changes

Changes

Additions

Removals

What's Changed

Fixes

Changes

Deprecated

Additions

Security and unsafe

Fixes

Changes

Additions

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

API changes: Distributions

API changes: Weighted distributions

API changes: SIMD

Reproducibility-breaking changes

Reproducibility-breaking optimisations

Other optimisations

Other

Documentation

What's Changed

What's Changed

Changes

New Contributors

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Jun 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

File name: Cargo.lock

red-hat-konflux Bot commented Jun 25, 2026 •

edited

Loading

`v1.17.3`: aws-lc-rs v1.17.3

`v1.17.1`: aws-lc-rs v1.17.1

`v0.4.45`: 0.4.45

`v0.4.44`: 0.4.44

`v0.4.43`: 0.4.43

`v0.4.42`: 0.4.42

red-hat-konflux Bot commented Jun 25, 2026 •

edited

Loading