Skip to content

Bump the cargo group across 1 directory with 2 updates#6

Merged
niteshdangi merged 2 commits intomasterfrom
dependabot/cargo/src-tauri/cargo-bf22a2b232
May 1, 2026
Merged

Bump the cargo group across 1 directory with 2 updates#6
niteshdangi merged 2 commits intomasterfrom
dependabot/cargo/src-tauri/cargo-bf22a2b232

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026 •
edited
Loading

Bumps the cargo group with 2 updates in the /src-tauri directory: rand and openssl.

Updates rand from 0.8.5 to 0.9.2

Changelog

Sourced from rand's changelog.

[0.9.2] - 2025-07-20

Deprecated

  • Deprecate rand::rngs::mock module and StepRng generator (#1634)

Additions

  • Enable WeightedIndex<usize> (de)serialization (#1646)

[0.9.1] - 2025-04-17

Security and unsafe

  • Revise "not a crypto library" policy again (#1565)
  • Remove zerocopy dependency from rand (#1579)

Fixes

  • Fix feature simd_support for recent nightly rust (#1586)

Changes

  • Allow fn rand::seq::index::sample_weighted and fn IndexedRandom::choose_multiple_weighted to return fewer than amount results (#1623), reverting an undocumented change (#1382) to the previous release.

Additions

  • Add rand::distr::Alphabetic distribution. (#1587)
  • Re-export rand_core (#1604)

#1565: rust-random/rand#1565 #1579: rust-random/rand#1579 #1586: rust-random/rand#1586 #1587: rust-random/rand#1587 #1604: rust-random/rand#1604 #1623: rust-random/rand#1623 #1634: rust-random/rand#1634 #1646: rust-random/rand#1646

[0.9.0] - 2025-01-27

Security and unsafe

  • Policy: "rand is not a crypto library" (#1514)
  • Remove fork-protection from ReseedingRng and ThreadRng. Instead, it is recommended to call ThreadRng::reseed on fork. (#1379)
  • Use zerocopy to replace some unsafe code (#1349, #1393, #1446, #1502)

Dependencies

  • Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using --ignore-rust-version
  • Update to rand_core v0.9.0 (#1558)

Features

  • Support std feature without getrandom or rand_chacha (#1354)
  • Enable feature small_rng by default (#1455)
  • Remove implicit feature rand_chacha; use std_rng instead. (#1473)
  • Rename feature serde1 to serde (#1477)
  • Rename feature getrandom to os_rng (#1537)

... (truncated)

Commits

Updates openssl from 0.10.75 to 0.10.78

Release notes

Sourced from openssl's releases.

openssl-v0.10.78

What's Changed

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.77...openssl-v0.10.78

openssl-v0.10.77

What's Changed

New Contributors

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.76...openssl-v0.10.77

openssl-v0.10.76

What's Changed

... (truncated)

Commits
  • a6debf5 Release openssl v0.10.78 and openssl-sys v0.9.114 (#2609)
  • 09b425e Check derive output buffer length on OpenSSL 1.1.x (#2606)
  • 826c388 Error for short out in MdCtxRef::digest_final() (#2608)
  • 1d10902 Validate callback-returned lengths in PSK and cookie trampolines (#2607)
  • 5af6895 Reject oversized length returns from password callback trampoline (#2605)
  • 718d07f fix inverted bounds assertion in AES key unwrap (#2604)
  • 53cc69d Add support for LibreSSL 4.3.x (#2603)
  • 0b41e79 Fix dangling stack pointer in custom extension add callback (#2599)
  • cbdedf8 Avoid panic for overlong OIDs (#2598)
  • 1fc51ef openssl 4 support (#2591)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 1, 2026
@niteshdangi
Copy link
Copy Markdown
Owner

niteshdangi commented May 1, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-bf22a2b232 branch from 01a088c to f3100b7 Compare May 1, 2026 09:45
@niteshdangi
Copy link
Copy Markdown
Owner

niteshdangi commented May 1, 2026

@dependabot rebase

@dependabot
Bump the cargo group across 1 directory with 2 updates
ac228e3 
Bumps the cargo group with 2 updates in the /src-tauri directory: [rand](https://github.com/rust-random/rand) and [openssl](https://github.com/rust-openssl/rust-openssl).


Updates `rand` from 0.8.5 to 0.9.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.5...rand_core-0.9.2)

Updates `openssl` from 0.10.75 to 0.10.78
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.78)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.78
  dependency-type: indirect
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/src-tauri/cargo-bf22a2b232 branch from f3100b7 to ac228e3 Compare May 1, 2026 09:51
@niteshdangi
Copy link
Copy Markdown
Owner

niteshdangi commented May 1, 2026

@copilot fix pipeline failure

@niteshdangi
Fix rand_core version mismatch: use rand_core 0.6 OsRng for ed25519-d…
b87fe82 
…alek compatibility

Agent-Logs-Url: https://github.com/niteshdangi/OpenClaw-Windows/sessions/350d8374-ff8e-48e1-b14e-5f010207e71a

Co-authored-by: niteshdangi <60287761+niteshdangi@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

Copilot AI commented May 1, 2026

@copilot fix pipeline failure

Fixed in b87fe82.

The CI failure was caused by a rand_core version mismatch: rand 0.9.x pulls in rand_core 0.9.x, but ed25519-dalek 2.x depends on rand_core 0.6.x. The OsRng types from these two versions are incompatible trait implementations, so SigningKey::generate(&mut OsRng) failed to compile.

Fix:

  • Added rand_core = "0.6" as a direct dependency in Cargo.toml
  • Changed the OsRng import in gateway.rs from rand::rngs::OsRng → rand_core::OsRng (which is the 0.6.x version that ed25519-dalek expects)

Copilot AI requested a review from niteshdangi May 1, 2026 10:09
@niteshdangi niteshdangi merged commit 44e104a into master May 1, 2026
7 checks passed
@dependabot dependabot Bot deleted the dependabot/cargo/src-tauri/cargo-bf22a2b232 branch May 1, 2026 10:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@niteshdangi niteshdangi Awaiting requested review from niteshdangi

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@niteshdangi