chore(deps): bump the cargo group across 3 directories with 33 updates

[dependabot]

Bumps the cargo group with 29 updates in the / directory:

Package	From	To
arrow	58.3.0	58.4.0
async-trait	0.1.91	0.1.92
blake3	1.8.5	1.8.7
clap	4.6.4	4.6.7
crossbeam-queue	0.3.13	0.3.14
either	1.16.0	1.18.0
http	1.4.2	1.5.0
io-uring	0.7.13	0.7.15
itertools	0.14.0	0.15.0
jieba-rs	0.10.3	0.10.4
log	0.4.33	0.4.34
moka	0.12.15	0.12.16
object_store	0.14.1	0.14.2
rand	0.9.5	0.10.1
rangemap	1.7.1	1.8.0
reqwest	0.12.28	0.13.4
roaring	0.11.4	0.11.5
twox-hash	2.1.3	2.1.4
uuid	1.24.0	1.26.1
libsais-rs	0.2.0	0.2.2
smallvec	1.15.2	1.16.1
reqsign-google	3.0.3	3.1.1
cc	1.3.0	1.4.6
sha2	0.10.9	0.11.0
base64	0.22.1	0.23.0
rustls-pki-types	1.15.0	1.15.1
hmac	0.12.1	0.13.0
quick-xml	0.40.1	0.41.0
frostem	1.20260804.0	1.20260821.6

Bumps the cargo group with 25 updates in the /java/lance-jni directory:

Package	From	To
async-trait	0.1.91	0.1.92
blake3	1.8.5	1.8.7
crossbeam-queue	0.3.13	0.3.14
either	1.16.0	1.18.0
http	1.4.2	1.5.0
io-uring	0.7.13	0.7.15
itertools	0.14.0	0.15.0
jieba-rs	0.10.3	0.10.4
log	0.4.33	0.4.34
moka	0.12.15	0.12.16
object_store	0.14.1	0.14.2
proc-macro2	1.0.106	1.0.107
quote	1.0.45	1.0.47
rangemap	1.7.1	1.8.0
reqwest	0.12.28	0.13.4
roaring	0.11.4	0.11.5
syn	2.0.118	3.0.2
twox-hash	2.1.3	2.1.4
uuid	1.24.0	1.26.1
libsais-rs	0.2.0	0.2.2
smallvec	1.15.2	1.16.1
reqsign-google	3.0.3	3.1.1
cc	1.3.0	1.4.6
rustls-pki-types	1.15.0	1.15.1
jni	0.21.1	0.22.4

Bumps the cargo group with 24 updates in the /python directory:

Package	From	To
async-trait	0.1.91	0.1.92
blake3	1.8.5	1.8.7
crossbeam-queue	0.3.13	0.3.14
either	1.16.0	1.18.0
http	1.4.2	1.5.0
io-uring	0.7.13	0.7.15
itertools	0.14.0	0.15.0
jieba-rs	0.10.3	0.10.4
log	0.4.33	0.4.34
moka	0.12.15	0.12.16
object_store	0.14.1	0.14.2
proc-macro2	1.0.106	1.0.107
quote	1.0.45	1.0.47
rangemap	1.7.1	1.8.0
reqwest	0.12.28	0.13.4
roaring	0.11.4	0.11.5
syn	2.0.118	3.0.2
twox-hash	2.1.3	2.1.4
uuid	1.24.0	1.26.1
libsais-rs	0.2.0	0.2.2
smallvec	1.15.2	1.16.1
reqsign-google	3.0.3	3.1.1
cc	1.3.0	1.4.6
rustls-pki-types	1.15.0	1.15.1

Updates arrow from 58.3.0 to 58.4.0

Release notes

Sourced from arrow's releases.

arrow 58.4.0

Changelog

58.4.0 (2026-07-17)

Full Changelog

Merged pull requests:

• [58_maintenance] [parquet] Allow more encryption algorithms (#9203) #10351 [parquet] (mbutrovich)
• [58_maintenance] Backport cargo audit fixes #10369 (alamb)
• [58_maintenance] chore: Ignore py03 vulnerabilities until upgrade #10370 (alamb)
• [58_maintenance] Add test for `parquet-testing/bad_data/ARROW-GH-47662.parquet` (#10077) #10371 [parquet] (alamb)

* This Changelog was automatically generated by github_changelog_generator

Changelog

Sourced from arrow's changelog.

58.4.0 (2026-07-17)

Full Changelog

Merged pull requests:

• [58_maintenance] [parquet] Allow more encryption algorithms (#9203) #10351 [parquet] (mbutrovich)
• [58_maintenance] Backport cargo audit fixes #10369 (alamb)
• [58_maintenance] chore: Ignore py03 vulnerabilities until upgrade #10370 (alamb)
• [58_maintenance] Add test for `parquet-testing/bad_data/ARROW-GH-47662.parquet` (#10077) #10371 [parquet] (alamb)

* This Changelog was automatically generated by github_changelog_generator

Commits

• 0ff81c1 [58_maintenance] Update changelog for #10371 (#10372)
• 95d7231 [58_maintenance] Add test for `parquet-testing/bad_data/ARROW-GH-47662.parque...
• 4544dea Prepare for 58.4.0 release (#10367)
• 32e8c18 chore: Ignore py03 vulnerabilities until upgrade (#10370)
• c12030f [58_maintenance] Backport cargo audit fixes (#10369)
• 01046ee [58_maintenance] [parquet] Allow more encryption algorithms (#9203) (#10351)
• adb77a1 [58_maintenance] Fix MSRV CI check (pin tonic to 0.14.5, install cargo-msrv -...
• See full diff in compare view

Updates async-trait from 0.1.91 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

• Resolve double_must_use clippy lint in generated code (#303)

Commits

• 82e7e9e Release 0.1.92
• 9a35cb8 Merge pull request #303 from dtolnay/mustuse
• 875ceec Resolve double_must_use clippy lint
• 62993a5 Raise minimum tested compiler to rust 1.88
• See full diff in compare view

Updates blake3 from 1.8.5 to 1.8.7

Release notes

Sourced from blake3's releases.

1.8.7

version 1.8.7

Changes since 1.8.6:

• Remove the arrayref dependency. Unfortunately the crates.io owner was compromised.

1.8.6

version 1.8.6

Changes since 1.8.5:

• update_mmap and update_mmap_rayon (and by extension b3sum) now use seek rather than metadata to get the length of a file/mapping, and they tolerate mmap failures. That means b3sum will now memory map e.g. Linux block devices, which support mapping despite reporting length 0 in metadata. Hashing NUL files on Windows also works now, where previously it was an error unless you used --no-mmap or <. This change was originally proposed by @​nabijaczleweli.

Commits

• f3149ec version 1.8.7
• b65bcb7 add #[allow(deprecated)] annotations to fix nightly/beta warnings
• 483a220 fix warnings related to not using MAX constants
• ba02549 Codex: remove arrayref
• 77b257e version 1.8.6
• 83b1746 use seek instead of metadata to establish mmap length (#570)
• 9eac279 use vswhere to find Visual Studio in CI
• fc3d0e9 Fix path to Visual Studio toolchain in CI
• 8aa5145 a few more colons
• 6bb9773 use cargo:: build script syntax
• Additional commits viewable in compare view

Updates clap from 4.6.4 to 4.6.7

Release notes

Sourced from clap's releases.

v4.6.7

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

v4.6.6

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

v4.6.5

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Changelog

Sourced from clap's changelog.

[4.6.7] - 2026-09-14

Features

• (derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

[4.6.6] - 2026-08-06

Features

• Add Command::get_overridden_usage

[4.6.5] - 2026-07-31

Fixes

• (help) Correctly mark which value_names are optional with num_args

Commits

• d3e59a9 chore: Release
• d997f87 docs: Update changelog
• fb6058c Merge pull request #6409 from heaths/pwsh-support
• 2310870 test(complete): Add tests for completer_for_path
• 5967c17 refactor(complete): Move shell detection to Shells
• 594602b fix(complete): Detect pwsh for PowerShell
• 3a4f2d0 Merge pull request #6427 from clap-rs/renovate/shlex-2.x
• 67ebaed Merge pull request #6426 from clap-rs/renovate/actions-checkout-7.x
• c968b13 chore(deps): Update Rust crate shlex to v2
• 8f247cb chore(deps): Update actions/checkout action to v7
• Additional commits viewable in compare view

Updates crossbeam-queue from 0.3.13 to 0.3.14

Release notes

Sourced from crossbeam-queue's releases.

crossbeam-queue 0.3.14

• Use 64-bit index on 32-bit platforms if 64-bit atomic is available. (#1321)
• Update MSRV policy to support 1 year instead of 6 months to meet rayon's MSRV policy. (#1284)

Commits

• 2920c98 Prepare for the next release
• 808b75a ci: Update codegen job
• 46774e0 channel: Document that send_timeout sends an available message even if the ti...
• 89a3fe4 epoch: Make Shared::null const
• 383d74a Use *::MAX associated constants
• a30b825 channel,deque,queue: Use AtomicU64/u64 in head/tail index if available
• a0e4d29 Replace iterative capacity growth with next_power_of_two (#1216)
• 94f74d2 Recognize x86_64-unknown-linux-gnutsan in build script
• 30e5963 epoch: Add missing fence emulation for tsan
• 708a6bd Handle overflow in bounded channel/queue initialization (#1301)
• Additional commits viewable in compare view

Updates either from 1.16.0 to 1.18.0

Changelog

Sourced from either's changelog.

• 1.18.0 - 2026-08-20

  • Add trait impls akin to Itertools::partition_map, by @​cuviper (#144)
    • Extend<Either<L, R>> for (A, B)
    • FromIterator<Either<L, R>> for (A, B)

• 1.17.0 - 2026-07-24

  • Add implementations for all std::fmt traits, by @​msrd0 (#141)

Commits

• ce6f07f Merge pull request #144 from cuviper/partition_map
• 30f29a9 Release 1.18.0
• 500b0fb Add trait impls akin to partition_map
• 1b7187b Fix the RELEASES link
• 0f1b60b Merge pull request #142 from cuviper/readme
• 4a7f162 Update badges
• 0adab0a Backfill pubtime dates in RELEASES.md
• e9e5497 Move changes to RELEASES.md
• a1f4a7e Consolidate to one README
• 5928a2b Convert README.rst to README.md
• Additional commits viewable in compare view

Updates http from 1.4.2 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

• feat(method): add QUERY method by @​seanmonstar in hyperium/http#798
• fix(uri): allow empty paths in uri::Builder by @​seanmonstar in hyperium/http#853
• perf(header,uri): faster value validation, URI parse/format, map inserts by @​geeknoid in hyperium/http#852
• fix(uri): enforce max length in PathAndQuery by @​seanmonstar in hyperium/http#856

New Contributors

• @​geeknoid made their first contribution in hyperium/http#852

Full Changelog: hyperium/http@v1.4.2...v1.5.0

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

• Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
• Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
• Fix uri::PathAndQuery parsing to enforce URI max length.

Commits

• 16fc9a7 v1.5.0
• e559023 fix(uri): enforce max length in PathAndQuery (#856)
• 2178e17 perf(header,uri): faster value validation, URI parse/format, map inserts (#852)
• 03c8cd7 fix(uri): allow empty paths in uri::Builder (#853)
• bb8705b feat(method): add QUERY method (#798)
• See full diff in compare view

Updates io-uring from 0.7.13 to 0.7.15

Commits

• See full diff in compare view

Updates itertools from 0.14.0 to 0.15.0

Changelog

Sourced from itertools's changelog.

0.15.0

Breaking

• Restructure Position as struct instead of enum (#1042, #1043)
• Canonicalize all_equal_value's error type (#1032)

Added

• Add *_with_hasher adaptors (#1007)
• Add strip_prefix and strip_prefix_by methods (#1104)

Changed

• Remove Clone bounds from tuple_combinations and array_combinations(#1011)
• must_use for collect_vec (#1009)
• Make izip! temporary friendly (#1021)
• Add array_combinations_with_replacement (#1033)
• Implement Debug for remaining public types (#1038)
• Specialize ExactlyOneError::count (#1046)
• Implement PeekingNext for more types, in particular vec::IntoIter (#1059, #1073)
• Fix PadUsing::next_back (#1082)
• Introduce [circular_]array_windows, deprecate tuple_windows (#1086)
• Deprecate tuple_combinations (replaced by array_combinations) (#1085)

Notable Internal Changes

• Make into_group_map code more idiomatic (#1027)
• Fix clippy lints (#1017, #1029, #1076, #1099)

Commits

• 37bd72a Update CHANGELOG.md: strip_prefix[_by]
• 86ec635 Use ControlFlow in fold_while implementation
• d5897f7 refactor(strip_prefix): use try_for_each and drop PartialEq, Eq on StripPrefi...
• b2a978a feat(Itertools): add strip_prefix and strip_prefix_by methods
• 12b6ec6 Update CHANGELOG.md for all_equal_value_error's error type
• 121821e AllEqualValueError implements std::error::Error
• adac44e Introduce AllEqualValueError
• 5707384 Update CHANGELOG.md
• df60ff0 Update CHANGELOG.md
• 113b850 Update CHANGELOG.md to include with_hasher
• Additional commits viewable in compare view

Updates jieba-rs from 0.10.3 to 0.10.4

Release notes

Sourced from jieba-rs's releases.

v0.10.4

What's Changed

• docs: Add jiebaRS R binding link to README by @​Yousa-Mirage in messense/jieba-rs#155
• Add emacs-jieba-rs link to README by @​brsvh in messense/jieba-rs#156
• fix: escape the dot in RE_SKIP to match upstream jieba by @​wangkhc in messense/jieba-rs#158
• perf: hand-roll the RE_SKIP scan and drop the regex dependency by @​wangkhc in messense/jieba-rs#160
• fix: keep connected alphanumeric runs together in cut by @​wangkhc in messense/jieba-rs#162

New Contributors

• @​brsvh made their first contribution in messense/jieba-rs#156
• @​wangkhc made their first contribution in messense/jieba-rs#158

Full Changelog: messense/jieba-rs@v0.10.3...v0.10.4

Commits

• 9faccca Bump version to 0.10.4
• 4159053 fix: keep connected alphanumeric runs together in cut (#162)
• 41ae09b perf: hand-roll the RE_SKIP scan and drop the regex dependency (#160)
• 8f73f59 fix: escape the dot in RE_SKIP to match upstream jieba (#158)
• d653b21 Add emacs-jieba-rs link to README (#156)
• dea99d2 Add jiebaRS R binding link to README (#155)
• See full diff in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

• doc: Add context-logger utility to README by @​alekseysidorov in rust-lang/log#735
• Add alloc support for boxed loggers by @​malezjaa in rust-lang/log#737

New Contributors

• @​alekseysidorov made their first contribution in rust-lang/log#735
• @​malezjaa made their first contribution in rust-lang/log#737

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

• 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
• 7d1e24e prepare for 0.4.34 release
• 3b939b6 Merge pull request #737 from malezjaa/master
• b88266c Add alloc support for boxed loggers
• 037d7a5 doc: Add context-logger utility to README
• See full diff in compare view

Updates moka from 0.12.15 to 0.12.16

Release notes

Sourced from moka's releases.

v0.12.16

Version 0.12.16

Fixed

• Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592gh-pull-0592 by @​kim-jhyeon, reported in #590gh-issue-0590):
  • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
  • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
  • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

• Worked around a ThreadSanitizer false positive (#602gh-pull-0602):
  • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
  • std::sync::Arc has a similar workaround.
• Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603gh-pull-0603):
  • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
  • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.

Changelog

Sourced from moka's changelog.

Version 0.12.16

Fixed

• Fixed a bug where cache eviction could stall permanently when the cache was configured with the non-default LRU eviction policy (EvictionPolicy::lru()) by a race between insert and remove operations on the same key (#592[gh-pull-0592] by [@​kim-jhyeon][gh-kim-jhyeon], reported in #590[gh-issue-0590]):
  • This bug was introduced in v0.12.0 and affected sync::Cache, sync::SegmentedCache and future::Cache.
  • A race between applying a write recording for an entry and concurrently removing that entry from the internal concurrent hash table could leave an orphaned node at the front of the LRU queue. Once present, no entry was ever evicted again and the cache grew unboundedly past max_capacity.
  • The same race also affected the default TinyLFU eviction policy, but with a milder symptom: each occurrence permanently leaked one phantom entry slot, causing entry_count and weighted_size to over-report and the usable capacity to shrink by one entry per occurrence. Fixed by the same change.

Changed

• Worked around a ThreadSanitizer false positive (#602[gh-pull-0602]):
  • Replaced the standalone fence(Acquire) in the internal MiniArc's drop path with an Acquire load of the reference count, so that downstream projects can now run ThreadSanitizer on code using Moka without hitting this false positive.
  • std::sync::Arc has a similar workaround.
• Raised the minimum version of the crossbeam-epoch crate from v0.9.18 to v0.9.20 to avoid the following advisory (#603[gh-pull-0603]):
  • [RUSTSEC-2026-0204] crossbeam-epoch: invalid pointer dereference in fmt::Pointer for Atomic and Shared
  • Moka is not affected by this advisory because it never formats these pointer types. However, raising the minimum version prevents downstream lockfiles from resolving to an affected crossbeam-epoch version via Moka.

Commits

• a616ec1 Merge pull request #604 from moka-rs/chore/bump-v0.12.16
• 3b140a6 Bump the version to v0.12.16
• 51b802d Merge pull request #603 from moka-rs/bump-crossbeam-epoch-floor
• 4f90716 Raise the minimum crossbeam-epoch version to 0.9.20
• 08d0e04 Merge pull request #602 from moka-rs/gh600-tsan-workaround
• 14447a7 Restructure the v0.12.16 TSan workaround CHANGELOG entry
• 7b14c37 Avoid a TSan false positive by replacing the fence in MiniArc::drop
• 05b37c6 Merge pull request #599 from moka-rs/gh590-deterministic-tests
• fc31858 Replace private doc references in gh590 test comments
• 5743592 Improve the v0.12.16 CHANGELOG entry
• Additional commits viewable in compare view

Updates object_store from 0.14.1 to 0.14.2

Release notes

Sourced from object_store's releases.

object_store v0.14.2

Changelog

v0.14.2 (2026-09-11)

Full Changelog

Implemented enhancements:

• Implement Clone for MicrosoftAzure #824
• Support URLs for jurisdiction-restricted buckets on R2 #814
• Lightweight DNS cache with shuffle to prevent DNS flooding #726
• Allow presigning object_store multipart uploads #271
• Allow specifying Content-Type when signing object_store PUT requests #270

Fixed bugs:

• Incomplete ASF license header in src/client/s3.rs (caused -1 vote on 0.14.2 RC1) #853
• WriteMultipart::finish should abort after part upload failure #818
• The 1.85 MSRV is inaccurate with all features #811
• When the backend service returns an HTTP 500, the object store panics #414

Documentation updates:

• Docs: point users uploading large objects at the multipart API #839 (alamb)
• [object-store]: update release schedule #834 (alamb)
• Add doc example for multipart upload to GoogleCloudStorage::create_multipart #803 (alamb)
• Add doc example for multipart upload to MicrosoftAzure::create_multipart #802 (alamb)
• Add doc example for multipart upload to AmazonS3::create_multipart #801 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

Commits

• 279572e Update CHANGELOG for latest main (#855)
• 4ff7d04 Restore missing first line of ASF license header in src/client/s3.rs (#854)
• 25fa079 Update version to 0.14.2 and add CHANGELOG (#850)
• c37db72 feat: retry failed multipart part uploads (#849)
• 135984f Add doc hints pointing large-object uploads at the multipart API (#839)
• b07471e [object-store]: update release schedule (#834)
• 978fb48 Fix MSRV violation in parse.rs test, check --all-targets in MSRV CI (#837)
• e2a4934 Speed up MSRV CI check by installing cargo-msrv via taiki-e/install-action (#...
• e28807d feat: presigned URLs with extra query params and signed headers (SignedUrlOpt...
• 5c74363 Restore UnwindSafe/RefUnwindSafe on ClientOptions by bounding DnsResolver (#836)
• Additional commits viewable in compare view

Updates rand from 0.9.5 to 0.10.1

Changelog

Sourced from rand's changelog.

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

#1632: rust-random/rand#1632 #1642: rust-random/rand#1642 #1649: rust-random/rand#1649 #1652: rust-random/rand#1652 #1653: rust-random/rand#1653 #1659: rust-random/rand#1659 #1665: rust-random/rand#1665 #1669: rust-random/rand#1669 #1674: rust-random/rand#1674 #1677: rust-random/rand#1677 #1693: rust-random/rand#1693 #1695: rust-random/rand#1695 #1697: rust-random/rand#1697

... (truncated)

Commits

• 27ff4cb Prepare v0.10.1: deprecate feature log (#1763)
• 98d0638 make_rng: document panic and add #[track_caller] (#1761)
• 54e5eaa Fix doc error (#1758)
• 1ce4c08 Bump itoa from 1.0.17 to 1.0.18 in the all-deps group (#1756)
• ccb734b docs: fix typo in doc comment (#1754)
• 357eb7d Bump libc from 0.2.182 to 0.2.183 in the all-deps group (#1753)
• 5e7...

  Description has been truncated

[lance-gatekeeper]

❌ Gate recommendation: request changes.

The grouped dependency refresh is otherwise supported, but the Java lockfile must be regenerated against its unchanged manifest so all three checked-in Rust workspaces remain reproducible. The minimal fix is to retain the intended updates and refresh java/lance-jni/Cargo.lock; no broader dependency or source change is needed.

[lance-gatekeeper]

This entry makes the checked-in Java lockfile inconsistent with java/lance-jni/Cargo.toml, which still declares jni = "0.21.1". The refreshed lockfile removes the required 0.21.1 package and now points lance-jni at the already-transitive 0.22.4 package, so every locked Java/JNI build stops before compilation. Please regenerate this lockfile from the unchanged manifest while retaining the intended grouped updates; a clean regeneration adds back jni 0.21.1 and its transitive entries, and the crate then checks successfully.

Reproducer

Expected: the committed resolution is accepted without rewriting the lockfile.

$ cargo check --locked --manifest-path java/lance-jni/Cargo.toml
    Updating crates.io index
error: cannot update the lock file /home/repo/java/lance-jni/Cargo.lock because --locked was passed to prevent this

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.