build(deps): bump rand_core from 0.6.3 to 0.6.4, fixes unsoundness bug #5175
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
A-dependencies
|
@dconnolly is going to do this review. |
|
@mergify rebase |
✅ Branch has been successfully rebased |
teor2345
force-pushed
the
dependabot/cargo/rand_core-0.6.4
branch
from
34b1f6b
to
495a37f
Compare
Codecov Report
Additional details and impacted files@@ Coverage Diff @@
## main #5175 +/- ##
==========================================
- Coverage 79.15% 79.10% -0.05%
==========================================
Files 307 307
Lines 39248 39248
==========================================
- Hits 31066 31048 -18
- Misses 8182 8200 +18 |
|
@dependabot recreate |
dependabot
bot
force-pushed
the
dependabot/cargo/rand_core-0.6.4
branch
from
495a37f
to
5776696
Compare
teor2345
previously approved these changes
Sep 27, 2022
teor2345
added
C-bug
teor2345
changed the title
|
@mergify rebase |
Bumps [rand_core](https://github.com/rust-random/rand) from 0.6.3 to 0.6.4. - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md) - [Commits](rust-random/rand@rand_core-0.6.3...0.6.4) --- updated-dependencies: - dependency-name: rand_core dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
✅ Branch has been successfully rebased |
teor2345
force-pushed
the
dependabot/cargo/rand_core-0.6.4
branch
from
5776696
to
74d17f6
Compare
teor2345
approved these changes
Sep 27, 2022
dconnolly
approved these changes
Sep 27, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps rand_core from 0.6.3 to 0.6.4.
Changelog
Sourced from rand_core's changelog.
Commits
4336232Merge pull request #686 from dhardy/master1d07496Fix changelogs and bump rand_os version number5142481Merge remote-tracking branch 'origin/master' and update changelogafc9d9aMerge pull request #670 from akash-fortanix/sgx-targete1e4005Update changelog1ad20a7Generalise WASM tests94efb40Remove remaining WASM remnants from rand to rand_osf7bfa1arand_os: use run-time failure on unsupported WASM platforms42ece4fDocument and correct usage of new rand_os "feature"1d97fa1remove winapi featureDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)