cargo: bump rand from 0.9.2 to 0.9.4 - #3235
Conversation
Bumps [rand](https://github.com/rust-random/rand) from 0.9.2 to 0.9.4. - [Release notes](https://github.com/rust-random/rand/releases) - [Changelog](https://github.com/rust-random/rand/blob/0.9.4/CHANGELOG.md) - [Commits](rust-random/rand@rand_core-0.9.2...0.9.4) --- updated-dependencies: - dependency-name: rand dependency-version: 0.9.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
@mgeisler is there a way to automate this with dependabot?
|
|
Superseded by #3248. |
I don't think dependabot can be taught about this. But perhaps we can work around it: I could imagine a GH workflow which kicks off when dependabot opens a PR and then takes care of bumping the Bazel lock file as well and submits a second PR... sounds hacky, though 😬 |
It doesn't need to be a second PR, it can just be a commit on the existing PR. GitHub workflows can add commits to branches. |
3 participants
Bumps rand from 0.9.2 to 0.9.4.
Changelog
Sourced from rand's changelog.
Commits
ba4c4c6Prepare v0.9.4: fix doc build (#1766)4b8b686Document new error-handling behaviour for ReseedingRng6c25c6dPrepare v0.9.4: fix doc build1aeee9fPrepare v0.9.3: deprecate featurelog(#1764)98473eePrepare rand 0.9.2 (#1648)031a1f5examples/print-next.rs(#1647)6cb75eeMake UniformUsize serializable (#1646)0c955c5Add some tests for BlockRng, BlockRng64 and Xoshiro RNGs (#1639)204084aFix: Remove accidental editor swap file (#1636)86262acDeprecate rand::rngs::mock module and StepRng (#1634)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.