Skip to content

Conversation

@cr-tk
Copy link
Collaborator

@cr-tk cr-tk commented Jun 17, 2025

Summary & Motivation (Problem vs. Solution)

A recent Trail of Bits audit on qos_net recommended that we update to the newest rand branch as a maintenance measure.

With the rand 0.8.x -> 0.9.x step, the API has changed a bit, requiring code changes. This PR focuses on the qos_net crate, and intentionally leaves conversions of other QOS components to followup PRs.

The expected code behavior should be identical.

Note to dependency security reviewers: we essentially trust all relevant new crate versions already, except for the getrandom switch to 0.3.3. I reviewed this over in #554 . Internal review documentation is available for both PRs.

I approve of this PR as a dependency reviewer.

How I Tested These Changes

Local tests.

Pre merge check list

@cr-tk cr-tk added the enhancement New feature or request label Jun 17, 2025
@cr-tk cr-tk requested review from a team as code owners June 17, 2025 18:45
@r-n-o r-n-o merged commit 2fa280d into main Jun 17, 2025
8 checks passed
@r-n-o r-n-o deleted the christian/update_rand_qos_net branch June 17, 2025 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants