Update Rust Dependencies by red-hat-konflux[bot] · Pull Request #138 · securesign/tough

red-hat-konflux · 2025-11-08T10:28:01Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
anyhow	dependencies	patch	`1.0.97` → `1.0.104`
assert_cmd	dev-dependencies	minor	`2.0.16` → `2.2.2`
async-trait	dependencies	patch	`0.1.87` → `0.1.91`
aws-config	dependencies	minor	`1.5.6` → `1.10.1`
aws-lc-rs	dependencies	minor	`1.16.1` → `1.17.3`
aws-sdk-kms	dependencies	minor	`1.43.0` → `1.114.0`
aws-sdk-ssm	dependencies	minor	`1.47.0` → `1.118.0`
aws-smithy-experimental	dependencies	minor	`0.1` → `0.3`
aws-smithy-http	dev-dependencies	minor	`0.60` → `0.64`
aws-smithy-runtime	dev-dependencies	minor	`1.7.8` → `1.12.1`
aws-smithy-types	dev-dependencies	minor	`1.2.13` → `1.6.1`
axum	dependencies	minor	`0.6` → `0.8`
base64	dependencies	minor	`0.22` → `0.23`
base64	dev-dependencies	minor	`0.22` → `0.23`
bytes	dependencies	minor	`1.10.0` → `1.12.1`
bytes	dev-dependencies	minor	`1.10.0` → `1.12.1`
chrono	dependencies	patch	`0.4.40` → `0.4.45`
clap	dependencies	minor	`4.5.31` → `4.6.4`
dyn-clone	dependencies	patch	`1.0.19` → `1.0.20`
futures	dev-dependencies	patch	`0.3.31` → `0.3.33`
futures	dependencies	patch	`0.3.31` → `0.3.33`
futures-core	dev-dependencies	patch	`0.3.31` → `0.3.33`
futures-core	dependencies	patch	`0.3.31` → `0.3.33`
futures-util	dependencies	patch	`0.3.31` → `0.3.33`
globset (source)	dependencies	patch	`0.4.16` → `0.4.19`
http	dev-dependencies	minor	`1.2.0` → `1.4.2`	`1.5.0`
httptest	dev-dependencies	patch	`0.16.3` → `0.16.4`
indexmap	dependencies	minor	`2.7.1` → `2.14.0`
itertools	dependencies	minor	`0.13.0` → `0.15.0`
log	dependencies	patch	`0.4.26` → `0.4.33`
openssl	dependencies	patch	`0.10.71` → `0.10.81`
pem (source)	dependencies	patch	`3.0.5` → `3.0.6`
percent-encoding	dependencies	patch	`2.3.1` → `2.3.2`
pki-types	dependencies	minor	`1.12.0` → `1.15.1`
prost-types	dependencies	minor	`0.13.5` → `0.14.0`
rand (source)	dependencies	minor	`0.8` → `0.10`
rayon	dependencies	minor	`1.10.0` → `1.12.0`
regex	dependencies	minor	`1.11.1` → `1.13.1`
reqwest	dependencies	minor	`0.12` → `0.13`
rstest	dependencies	minor	`0.22.0` → `0.26.0`
rustls	dependencies	patch	`0.23.23` → `0.23.42`	`0.23.43`
rustls-webpki	dependencies	minor	`0.102.1` → `0.103.0`
serde (source)	dependencies	patch	`1.0.219` → `1.0.229`
serde (source)	dev-dependencies	patch	`1.0.219` → `1.0.229`
serde_derive (source)	dev-dependencies	patch	`1.0.219` → `1.0.229`
serde_json	dependencies	patch	`1.0.140` → `1.0.151`
serde_json	dev-dependencies	patch	`1.0.140` → `1.0.151`
serial_test	dependencies	minor	`3.2.0` → `3.5.0`
sha2	dependencies	minor	`0.9` → `0.11`
sigstore_protobuf_specs	dependencies	minor	`0.4` → `0.5`
snafu	dependencies	minor	`0.8` → `0.9`
tempfile (source)	dependencies	minor	`3.17.1` → `3.27.0`
tokio	dependencies	minor	`1.43.0` → `1.53.1`
tokio	dev-dependencies	minor	`1.43.0` → `1.53.1`
tokio-retry	dependencies	patch	`0.3.0` → `0.3.2`
tokio-test	dev-dependencies	patch	`0.4.4` → `0.4.5`
tokio-util	dependencies	patch	`0.7.13` → `0.7.19`
tower	dependencies	minor	`0.4` → `0.5`
tower-http	dependencies	minor	`0.4` → `0.7`
tracing	dependencies	patch	`0.1.41` → `0.1.44`
typed-path	dependencies	minor	`0.9` → `0.12`
unicode-normalization	dependencies	patch	`0.1.24` → `0.1.25`
untrusted	dependencies	minor	`0.7.1` → `0.9.0`
url	dependencies	patch	`2.5.4` → `2.5.8`

Release Notes

assert-rs/assert_cmd (assert_cmd)

`v2.2.2`

Compare Source

Fixes

Ensure #[track_caller] works for better panic messages

`v2.2.1`

Compare Source

Internal

Dependency update

`v2.2.0`

Compare Source

Compatibility

Change cargo_bin bad paths to panics

`v2.1.3`

Compare Source

Fixes

Un-deprecate cargo_bin

`v2.1.2`

Compare Source

Fixes

Add #[must_use] to help catch missing assertions

`v2.1.1`

Compare Source

`v2.1.0`

Compare Source

Compatibility

Deprecated crate_name!() in favor of pkg_name!()
Deprecated Command::cargo_bin, CommandCargoExt::cargo_bin, cargo_bin in favor of cargo_bin!, cargo_bin_cmd!

Features

Provide cargo_bin_cmd!()
Use pkg_name!() as a default parameter to cargo_bin!()

`v2.0.17`

Compare Source

Features

Add cargo::cargo_bin! which will work with Cargo's build-dir

aws/aws-lc-rs (aws-lc-rs)

`v1.17.3`: aws-lc-rs v1.17.3

Compare Source

What's Changed

Add public API to check AWS-LC and FIPS versions by @prasden in #1167
- awslc_version() returns the linked AWS-LC library version (e.g., "5.1.0"), resolved at runtime. fips_version() returns the AWS-LC FIPS release-branch version as Some(version), or None when unavailable. Note that fips_version() is independent of try_fips_mode().
Clarify representations of PqdsaKeyPair in serialized forms by @Mark-Simulacrum in #1174
- Documents how to use PqdsaKeyPair::from_seed in a FIPS setting, and notes that key pairs constructed from the expanded form cannot be re-serialized to PKCS#8 (which contains just the seed).

Build Improvements

Fix TARGET_* env leakage into host builds by @justsmth in #1171
- Per the cc-rs convention, TARGET_CC/TARGET_CXX/TARGET_CFLAGS are now only applied when cross-compiling, and HOST_* variables are honored for native builds. Previously, when aws-lc-sys appeared as both a dependency and a build-dependency in a cross build, the cross toolchain's flags leaked into the host-side build.
Restore cc default flags in memcmp probe; only fail build on confirmed bug by @justsmth in #1173
- Fixes build failures under RPM hardened build flags (Fedora/RHEL/Rocky rpmbuild defaults): the memcmp probe (GCC bug 95189 check) now retains cc's computed target default flags (e.g., -fPIC) while still excluding user CFLAGS. The check also only runs for GCC versions that may contain the bug, and a probe that fails to build only warns -- the build only fails when the miscompilation is actually demonstrated.

Issues Being Closed

Public API for FIPS status -- #1166
memcmp probe fails under RPM hardened build flags -- #1168
Cross-compilation failure: TARGET_CFLAGS applied to host builds -- #1169

Other Merged PRs

ci: Stop installing winehq-stable in cross windows-gnu pre-build by @justsmth in #1172
ci: only run push-triggered workflows on main by @justsmth in #1163
Prepare aws-lc-sys v0.43.0 by @justsmth in #1176
Prepare aws-lc-rs v1.17.2 by @justsmth in #1178
Prepare aws-lc-fips-sys v0.13.16 by @justsmth in #1180
build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #1177

New Contributors

@Mark-Simulacrum made their first contribution in #1174
@prasden made their first contribution in #1167

Full Changelog: aws/aws-lc-rs@v1.17.1...v1.17.3

[!NOTE]
aws-lc-rs v1.17.2 has been yanked. It failed to compile with the fips feature when aws-lc-fips-sys resolved to v0.13.15 (or earlier), since that version lacks functions needed by the new version APIs. v1.17.3 is identical to v1.17.2 aside from requiring aws-lc-fips-sys v0.13.16.

`v1.17.2`

Compare Source

`v1.17.1`: aws-lc-rs v1.17.1

Compare Source

🎉 AWS-LC FIPS v3 Module Has Been Validated

The AWS-LC FIPS v3 module has been awarded FIPS 140-3 validation by NIST's CMVP:

Certificate #5314 (static)
Certificate #5298 (dynamic)

Seek guidance from a local FIPS compliance expert regarding requirements for your deployment environments. Please consult the Security Policies associated with our certificates if you have questions.

aws-lc-fips-sys (utilized via the fips feature of aws-lc-rs) currently uses the validated FIPS v3 module.

In the upcoming aws-lc-rs v1.18.0 release, we plan to switch aws-lc-fips-sys to our FIPS v4 branch.

What's Changed

Support linking against a system-installed AWS-LC:
- Set AWS_LC_SYS_SYSTEM_DIR or let pkg-config / OPENSSL_* environment variables auto-detect an existing AWS-LC installation instead of building from source by @justsmth in #1129
- Support system-installed AWS-LC FIPS library for aws-lc-fips-sys by @justsmth in #1143
- Auto-detect system AWS-LC from OPENSSL_* and pkg-config by @justsmth in #1156
- Gate system AWS-LC on a declared minimum version by @justsmth in #1152
Implement Send/Sync for RSA hazmat encryption key types by @justsmth in #1128
Add Salt::none constructor for HKDF by @justsmth in #1135
Add wasm32-unknown-emscripten build and test support by @justsmth in #1059
Report specific key rejection reasons for invalid RSA key sizes by @justsmth in #1153

Upstream AWS-LC (v5.1.0)

aws-lc-sys now aligns with AWS-LC v5.1.0 (previously v1.73.0). Notable upstream changes include:

ML-DSA native assembly backends for x86_64 and aarch64, imported from mldsa-native by @jakemas in aws/aws-lc#3195 and aws/aws-lc#3219
Security hardening: stack secret zeroing, tightened PKCS7/OCSP/ASN.1 error handling (Various PRs)

Build Improvements

Fix memcmp_check build failure when CFLAGS contains LTO flags by @justsmth in #1134
Fix missing poly_Rq_mul symbol in Linux x86_64 build by @Lebei2046 in #1130
Apply -ffile-prefix-map to jitterentropy builder by @justsmth in #1139
Select compiler flag dialect by driver mode, not target ABI by @justsmth in #1147

Issues Being Closed

RSA hazmat encryption key types missing Send/Sync -- #1125
RSA key rejection reports generic Unspecified for invalid key sizes -- #1082
Build failure when CFLAGS contains LTO flags (Windows/clang) -- #1132
cargo-xwin (clang-cl) jitterentropy build failure on x86_64-pc-windows-msvc -- #1146
Support system-provided AWS-LC library -- #936
cpu_arm_linux.c assumes sys/auxv.h and getauxval (uclibc targets) -- #1108
jitterentropy embeds absolute paths to files -- #1137

Other Merged PRs

Add ML-DSA aarch64 native assembly to CC builder scripts by @jakemas in #1113
Clarify HKDF info concatenation and encoding responsibility by @justsmth in #1145
CI: support zig cross compile for arm32 by @justsmth in #1124
fix(clippy): fix truncate warnings by @justsmth in #1126
ci: replace dtolnay/rust-toolchain with direct rustup invocations by @justsmth in #1133
Reduce AEAD and RSA test iterations under DISABLE_SLOW_TESTS by @justsmth in #1119
ci(compilers): retry-tolerant curl, latest Go, drop unused PowerShell by @justsmth in #1138
ci(cross): generate MSRV-aware lockfile for alpine-linux by @justsmth in #1150
Harden GitHub Actions workflows against script injection by @justsmth in #1161
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #1141
Bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #1142
Bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #1144
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1155
Prepare aws-lc-fips-sys v0.13.15 by @justsmth in #1158
Prepare aws-lc-sys v0.42.0 by @justsmth in #1162
Prepare aws-lc-rs v1.17.1 by @justsmth in #1164

New Contributors

@Lebei2046 made their first contribution in #1130

Full Changelog: aws/aws-lc-rs@v1.17.0...v1.17.1

`v1.17.0`: aws-lc-rs v1.17.0

Compare Source

What's Changed

Add opt-in legacy DES cipher support behind a legacy-des feature by @qzh0223 in #1109 and #1122
- Provides 2TDEA, 3TDEA, and single DES support. This is gated behind the legacy-des feature flag and intended only for interoperability with legacy systems.
Add AsDer and ParsedPublicKey conversion for RSA PublicKeyComponents by @MavenRain in #1105
- PublicKeyComponents<B> now implements AsDer<PublicKeyX509Der> and can be converted to ParsedPublicKey for use with signature verification APIs.
Add LessSafeKey::open_in_place_separate_tag by @wpt-oai in #1116
- Enables AEAD decryption when the authentication tag is stored separately from the ciphertext, complementing the existing seal_in_place_separate_tag.
Add zig compiler support and CI coverage by @justsmth in #1103
- Resolves long-standing issues with cross-compilation using cargo-zigbuild. The build script now correctly handles zig's compiler flags, and CI coverage has been added to prevent regressions.

Build Improvements

Fix jitterentropy CFLAGS filtering for HOST_CFLAGS and TARGET_CFLAGS by @justsmth in #1106
- Fixes build failures (e.g., FreeBSD qdrant) where optimization flags leaked into the jitterentropy compilation, which must be built without optimizations.
Add ML-DSA x86_64 native assembly to CC builder scripts by @jakemas in #1110
Fix support for building with MinGW on Windows 7 by @justsmth in #1120
- Fixes the x86_64-win7-windows-gnu target by addressing MinGW-specific compatibility issues.

Issues Being Closed

Add API to convert rsa::PublicKeyComponents into signature::ParsedPublicKey and/or DER encoded bytes -- #1055
The CPU Jitter RNG must not be compiled with optimizations (FreeBSD qdrant build failure) -- #1097
Windows 7 support for MinGW (x86_64-win7-windows-gnu target) -- #1111
-Wp,-U breaks cross-builds using zig cc -- #993
Failure to cross-compile for Windows on macOS with cargo-zigbuild -- #512
Zigbuild: Unable to build using cargo-zigbuild for arm targets -- #931

Other Merged PRs

Prepare aws-lc-sys v0.41.0 by @justsmth in #1117
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1102
Bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in #1118
Fix nightly clippy warnings by @justsmth in #1112
Prepare aws-lc-rs v1.17.0 by @justsmth in #1121
Fix rustfmt by @justsmth in #1123

New Contributors

@jakemas made their first contribution in #1110
@qzh0223 made their first contribution in #1109
@MavenRain made their first contribution in #1105
@wpt-oai made their first contribution in #1116

Full Changelog: aws/aws-lc-rs@v1.16.3...v1.17.0

`v1.16.3`: aws-lc-rs v1.16.3

Compare Source

What's Changed

Key length validation in UnboundCipherKey::new() now enforced at runtime by @justsmth in #1092
- The documented error on key length mismatch was never actually checked. Streaming cipher constructors also relied on debug_assert_eq! which gets stripped in release builds — these are now runtime checks.
Support MSAN and TSAN sanitizer builds via AWS_LC_SYS_SANITIZER environment variable by @justsmth in #1100
- Accepts asan, msan, or tsan. The existing asan feature flag continues to work.

Build Improvements

Follow symlinks when classifying include directory entries by @cmtm in #1071
- Fixes builds under Bazel (and other build systems) where source files in CARGO_MANIFEST_DIR are symlinks into a content-addressable store.
Improve clang-cl discovery for Windows ARM64 builds by @justsmth in #1060
- The build script now discovers clang-cl inside Visual Studio installations rather than requiring it on PATH.
Fix Windows ARM64 FIPS build: pass correct architecture to vcvarsall.bat by @justsmth in #1075
Strip LTO flags from CFLAGS for FIPS builds by @skmcgrail in #1087
- Build environments like RPM mock chroots (e.g. AL2023) that export -flto=auto in CFLAGS would break the FIPS delocator pipeline.
MSVC: Fix builtin swap intrinsic check to avoid link-time failures by @walter-zeromatter in #1086
MSVC: Add jitterentropy src subdirectory to include search path by @walter-zeromatter in #1085
MSVC: Use 8.3 short paths on Windows to avoid MAX_PATH limits by @walter-zeromatter in #1081

Issues Being Closed

Clarify that build needs to run from VS Developer shell for Windows builds -- #1056
Add MSAN (MemorySanitizer) support, matching existing ASAN support -- #1077
aws-lc-sys fails to compile on iOS arm64 with Clang 15.0.7: undeclared ioctl in urandom.c -- #1068

Other Merged PRs

Prepare aws-lc-sys v0.39.1 by @justsmth in #1080
Bump aws-lc-fips-sys to v0.13.14 by @skmcgrail in #1088
CI: Harden artifact workflows and update action versions by @justsmth in #1091
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1096
Bump actions/setup-go from 4 to 6 by @dependabot[bot] in #1095
Bump codecov/codecov-action from 4 to 6 by @dependabot[bot] in #1094
Prepare aws-lc-rs v1.16.3 by @justsmth in #1098
Prepare aws-lc-sys v0.40.0 by @justsmth in #1099

New Contributors

@cmtm made their first contribution in #1071
@walter-zeromatter made their first contribution in #1086

Full Changelog: aws/aws-lc-rs@v1.16.2...v1.16.3

`v1.16.2`: aws-lc-rs v1.16.2

Compare Source

What's Changed

Implement HMAC sign_to_buffer by @fabrice102 in #1058
Fix PublicEncryptingKey::from_der to reject undersized RSA keys by @justsmth in #1065
- from_der() now correctly enforces the 2048-bit minimum key size, consistent with PrivateDecryptingKey::from_pkcs8. Users loading <2048-bit public keys for encryption will now receive KeyRejected.
Update licensing of aws-lc-sys to reflect third-party component licenses by @justsmth in #1062
Improved dev-tests-only documentation and docs.rs rendering by @justsmth in #1054

Build Improvements

Fix jitterentropy build failure caused by cc crate CFLAGS handling change by @justsmth in #1064
Unify sys-crate build scripts by @justsmth in #995

Issues Being Closed

sys: license of s2n-bignum and fiat-crypto not reflected & license texts partially missing -- #1044
Deterministic key agreement for testing -- #1020

Other Merged PRs

Prepare aws-lc-fips-sys v0.13.13 by @justsmth in #1066
Prepare aws-lc-sys v0.39.0 by @justsmth in #1067

New Contributors

@fabrice102 made their first contribution in #1058

Full Changelog: aws/aws-lc-rs@v1.16.1...v1.16.2

chronotope/chrono (chrono)

`v0.4.45`: 0.4.45

Compare Source

What's Changed

fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow by @SAY-5 in #1787
tz_data: fix tzdata locations on Android by @caruschalalamove in #1789

`v0.4.44`: 0.4.44

Compare Source

What's Changed

docs: match MSRV with Cargo.toml contents by @coryan in #1772
Add track_caller to non-deprecated functions by @svix-jplatte in #1774

`v0.4.43`: 0.4.43

Compare Source

What's Changed

Install extra components for lint workflow by @djc in #1741
Upgrade windows-bindgen to 0.64 by @djc in #1742
Improve windows-bindgen setup by @djc in #1744
Drop stabilized feature doc_auto_cfg by @djc in #1745
Faster RFC 3339 parsing by @djc in #1748
Update windows-bindgen requirement from 0.64 to 0.65 by @dependabot[bot] in #1751
add NaiveDate::abs_diff by @Kinrany in #1752
Add feature gated defmt support. by @pebender in #1747
Drop deny lints, eager Debug impls are a mixed blessing by @djc in #1753
chore: minor improvement for docs by @spuradage in #1756
Added doctest for the NaiveDate years_since function by @LucasBou in #1755
Prepare 0.4.43 by @djc in #1765
Update copyright year to 2026 in LICENSE.txt by @taozui472 in #1767

`v0.4.42`: 0.4.42

Compare Source

What's Changed

Add fuzzer for DateTime::parse_from_str by @tyler92 in #1700
Fix wrong amount of micro/milliseconds by @nmlt in #1703
Add warning about MappedLocalTime and wasm by @lutzky in #1702
Fix incorrect parsing of fixed-length second fractions by @chris-leach in #1705
Fix cfgs for wasm32-linux support by @arjunr2 in #1707
Fix OpenHarmony's tzdata parsing by @ldm0 in #1679
Convert NaiveDate to/from days since unix epoch by @findepi in #1715
Add ?Sized bound to related methods of DelayedFormat::write_to by @Huliiiiii in #1721
Add from_timestamp_secs method to DateTime by @jasonaowen in #1719
Migrate to core::error::Error by @benbrittain in #1704
Upgrade to windows-bindgen 0.63 by @djc in #1730
strftime: simplify error handling by @djc in #1731

`v0.4.41`

Compare Source

What's Changed

Add subsec_micros and subsec_millis methods to TimeDelta by @ggoetz in #1668
Deprecate NaiveDateTime::UNIX_EPOCH by @robertbastian in #1670
Implement as_seconds_f32 and as_seconds_f64 for TimeDelta by @ggoetz in #1671
chore: fix some comments by @jimmycathy in #1677
Add num_days_in_month method to Datelike trait by @aslilac in #1673
add WeekdaySet, a collection of Weekday that is Copy by @Kinrany in #1676
WeekdaySet tweaks by @djc in #1680
Upgrade to windows-bindgen 0.61 by @djc in #1682
Implemented a consistent Eq trait for NaiveWeek by @Splashling1789 in #1687
TimeZone::from_posix_tz: Treat empty TZ variable as UTC by @drinkcat in #1691
Add support for lossy format strings by @Qelxiros in #1693

BurntSushi/ripgrep (globset)

ggriffiniii/httptest (httptest)

`v0.16.4`

Compare Source

jcreekmore/pem-rs (pem)

`v3.0.6`

Compare Source

switch from serde to serde_core

rust-random/rand (rand)

`v0.10.2`

Compare Source

Fixes

Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

`v0.10.1`

Compare Source

This release includes a fix for a soundness bug; see #1763.

Changes

Document panic behavior of make_rng and add #[track_caller] (#1761)
Deprecate feature log (#1763)

`v0.10.0`

Compare Source

Changes

The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
Use Edition 2024 and MSRV 1.85 (#1653)
Let Fill be implemented for element types, not sliceable types (#1652)
Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
Remove Clone support for StdRng, ReseedingRng (#1677)
Use postcard instead of bincode to test the serde feature (#1693)
Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

Removed ReseedingRng (#1722)
Removed unused feature "nightly" (#1732)
Removed feature small_rng (#1732)

`v0.9.5`

Compare Source

What's Changed

rand v0.9.5: backport #1790 by @dhardy in #1803

Full Changelog: rust-random/rand@0.9.4...0.9.5

`v0.9.4`

Compare Source

Fixes

Fix doc build (#1766)

Full Changelog: rust-random/rand@0.9.3...0.9.4

`v0.9.3`

Compare Source

This release back-ports a fix from v0.10. See also [#1763].

Changes

Deprecate feature log (#1764)
Replace usages of doc_auto_cfg (#1764)

Full Changelog: rust-random/rand@0.9.2...0.9.3

`v0.9.2`

Compare Source

Deprecated

Deprecate rand::rngs::mock module and StepRng generator ([#1634])

Additions

Enable WeightedIndex<usize> (de)serialization ([#1646])

`v0.9.1`

Compare Source

Security and unsafe

Revise "not a crypto library" policy again (#1565)
Remove zerocopy dependency from rand (#1579)

Fixes

Fix feature simd_support for recent nightly rust (#1586)

Changes

Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change ([#1382]) to the previous release.

Additions

Add rand::distr::Alphabetic distribution. (#1587)
Re-export rand_core (#1604)

`v0.9.0`

Compare Source

Security and unsafe

Policy: "rand is not a crypto library" ([#1514])
Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. ([#1379])
Use zerocopy to replace some unsafe code ([#1349], [#1393], [#1446], [#1502])

Dependencies

Bump the MSRV to 1.63.0 ([#1207], [#1246], [#1269], [#1341], [#1416], [#1536]); note that 1.60.0 may work for dependents when using --ignore-rust-version
Update to rand_core v0.9.0 ([#1558])

Features

Support std feature without getrandom or rand_chacha ([#1354])
Enable feature small_rng by default ([#1455])
Remove implicit feature rand_chacha; use std_rng instead. ([#1473])
Rename feature serde1 to serde ([#1477])
Rename feature getrandom to os_rng ([#1537])
Add feature thread_rng ([#1547])

API changes: rand_core traits

Add fn RngCore::read_adapter implementing std::io::Read ([#1267])
Add trait CryptoBlockRng: BlockRngCore; make trait CryptoRng: RngCore ([#1273])
Add traits TryRngCore, TryCryptoRng ([#1424], [#1499])
Rename fn SeedableRng::from_rng -> try_from_rng and add infallible variant fn from_rng ([#1424])
Rename fn SeedableRng::from_entropy -> from_os_rng and add fallible variant fn try_from_os_rng ([#1424])
Add bounds Clone and AsRef to associated type SeedableRng::Seed ([#1491])

API changes: Rng trait and top-level fns

Rename fn rand::thread_rng() to rand::rng() and remove from the prelude ([#1506])
Remove fn rand::random() from the prelude ([#1506])
Add top-level fns random_iter, random_range, random_bool, random_ratio, fill ([#1488])
Re-introduce fn Rng::gen_iter as random_iter ([#1305], [#1500])
Rename fn Rng::gen to random to avoid conflict with the new gen keyword in Rust 2024 ([#1438])
Rename fns Rng::gen_range to random_range, gen_bool to random_bool, gen_ratio to random_ratio ([#1505])
Annotate panicking methods with #[track_caller] ([#1442], [#1447])

API changes: RNGs

Fix <SmallRng as SeedableRng>::Seed size to 256 bits ([#1455])
Remove first parameter (rng) of ReseedingRng::new ([#1533])

API changes: Sequences

Split trait SliceRandom into IndexedRandom, IndexedMutRandom, SliceRandom ([#1382])
Add IndexedRandom::choose_multiple_array, index::sample_array ([#1453], [#1469])

API changes: Distributions: renames

Rename module rand::distributions to rand::distr ([#1470])
Rename distribution Standard to StandardUniform ([#1526])
Move distr::Slice -> distr::slice::Choose, distr::EmptySlice -> distr::slice::Empty ([#1548])
Rename trait distr::DistString -> distr::SampleString ([#1548])
Rename distr::DistIter -> distr::Iter, distr::DistMap -> distr::Map ([#1548])

API changes: Distributions

Relax Sized bound on Distribution<T> for &D ([#1278])
Remove impl of Distribution<Option<T>> for StandardUniform ([#1526])
Let distribution StandardUniform support all NonZero* types ([#1332])
Fns {Uniform, UniformSampler}::{new, new_inclusive} return a Result (instead of potentially panicking) ([#1229])
Distribution Uniform implements TryFrom

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2025-11-08T10:28:03Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path integ/failure-server/Cargo.toml --package anyhow@1.0.97 --precise 1.0.104
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough-kms/Cargo.toml --package aws-config@1.5.6 --precise 1.10.1
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough-ssm/Cargo.toml --package aws-config@1.5.6 --precise 1.10.1
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tough/Cargo.toml --package async-trait@0.1.87 --precise 0.1.91
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/dy/n-/dyn-clone, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path tuftool/Cargo.toml --package assert_cmd@2.0.16 --precise 2.2.2
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/he/x-/hex-literal, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path olpc-cjson/Cargo.toml --package serde@1.0.219 --precise 1.0.229
    Updating crates.io index
warning: failed to write cache, path: /home/renovate/.cargo/registry/index/index.crates.io-1949cf8c6b5b557f/.cache/un/ic/unicode-normalization, error: Permission denied (os error 13)
error: failed to select a version for `aws-smithy-experimental`.
    ... required by package `tough-ssm v0.14.0 (/tmp/renovate/repos/github/securesign/tough/tough-ssm)`
versions that meet the requirements `^0.3` are: 0.3.0

package `tough-ssm` depends on `aws-smithy-experimental` with feature `crypto-aws-lc` but `aws-smithy-experimental` does not have that feature.
help: available features: crypto-ring


failed to select a version for `aws-smithy-experimental` which could resolve this conflict

tommyd450 · 2026-03-10T12:28:36Z

/retest

red-hat-konflux · 2026-03-10T15:20:35Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Nov 8, 2025

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch from 3954a64 to 0494622 Compare November 12, 2025 17:45

red-hat-konflux Bot changed the title ~~Update Rust Dependencies~~ chore(deps): update rust dependencies Nov 12, 2025

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 2 times, most recently from b36ce89 to 9eeb00e Compare November 21, 2025 13:33

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch from 9eeb00e to 376046a Compare December 30, 2025 17:35

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 4 times, most recently from 139ced4 to 4e0f3aa Compare January 28, 2026 01:21

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 2 times, most recently from 8bade01 to 61832fa Compare February 8, 2026 17:26

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 2 times, most recently from edb91f3 to 47ddd66 Compare February 27, 2026 20:56

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 3 times, most recently from 039d085 to a6a331d Compare March 9, 2026 11:27

tommyd450 force-pushed the konflux/mintmaker/release-1.3/rust-deps branch from 98d696e to 610fad9 Compare March 11, 2026 13:14

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 2 times, most recently from 5645305 to 4b467c9 Compare March 12, 2026 11:11

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch from 4b467c9 to 8d39b92 Compare March 25, 2026 18:31

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 6 times, most recently from 189635e to 48457ec Compare April 17, 2026 10:13

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/rust-deps branch 29 times, most recently from 3245a4b to 8a5195a Compare April 25, 2026 18:30

Update Rust Dependencies

a1c4485

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update Rust Dependencies - #138

Update Rust Dependencies#138
red-hat-konflux[bot] wants to merge 1 commit into
release-1.3from
konflux/mintmaker/release-1.3/rust-deps

red-hat-konflux Bot commented Nov 8, 2025 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Nov 8, 2025 •

edited

Loading

Uh oh!

tommyd450 commented Mar 10, 2026

Uh oh!

red-hat-konflux Bot commented Mar 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

red-hat-konflux Bot commented Nov 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixes

Internal

Compatibility

Fixes

Fixes

Compatibility

Features

Features

v1.17.3: aws-lc-rs v1.17.3

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v1.17.1: aws-lc-rs v1.17.1

What's Changed

Upstream AWS-LC (v5.1.0)

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v1.17.0: aws-lc-rs v1.17.0

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v1.16.3: aws-lc-rs v1.16.3

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v1.16.2: aws-lc-rs v1.16.2

What's Changed

Build Improvements

Issues Being Closed

Other Merged PRs

New Contributors

v0.4.45: 0.4.45

What's Changed

v0.4.44: 0.4.44

What's Changed

v0.4.43: 0.4.43

What's Changed

v0.4.42: 0.4.42

What's Changed

What's Changed

Fixes

Changes

Changes

Changes

Additions

Removals

What's Changed

Fixes

Changes

Deprecated

Additions

Security and unsafe

Fixes

Changes

Additions

Security and unsafe

Dependencies

Features

API changes: rand_core traits

API changes: Rng trait and top-level fns

API changes: RNGs

API changes: Sequences

API changes: Distributions: renames

API changes: Distributions

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Nov 8, 2025 •

edited

Loading

`v1.17.3`: aws-lc-rs v1.17.3

`v1.17.1`: aws-lc-rs v1.17.1

`v1.17.0`: aws-lc-rs v1.17.0

`v1.16.3`: aws-lc-rs v1.16.3

`v1.16.2`: aws-lc-rs v1.16.2

`v0.4.45`: 0.4.45

`v0.4.44`: 0.4.44

`v0.4.43`: 0.4.43

`v0.4.42`: 0.4.42

red-hat-konflux Bot commented Nov 8, 2025 •

edited

Loading