chore(deps): Bump the rust-patch group across 1 directory with 19 updates

[dependabot]

Bumps the rust-patch group with 19 updates in the / directory:

Package	From	To
cc	1.2.58	1.2.66
env_logger	0.11.10	0.11.11
gilrs	0.11.1	0.11.2
log	0.4.29	0.4.33
cbindgen	0.29.2	0.29.4
rustls	0.23.37	0.23.41
serde_json	1.0.149	1.0.150
tobj	4.0.3	4.0.4
bumpalo	3.20.2	3.20.3
smallvec	1.15.1	1.15.2
rustc-hash	2.1.1	2.1.3
rcgen	0.14.7	0.14.8
syn	2.0.117	2.0.118
quote	1.0.45	1.0.46
napi-derive	3.5.3	3.5.9
napi-build	2.3.1	2.3.2
anyhow	1.0.102	1.0.103
tokio	1.52.1	1.52.3
rand	0.10.0	0.10.2

Updates cc from 1.2.58 to 1.2.66

Release notes

Sourced from cc's releases.

cc-v1.2.66

Other

• Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
• Support new QNX targets (#1775)
• Add kache to the supported compiler wrappers (#1770)

cc-v1.2.65

Other

• Regenerate target info (#1763)

cc-v1.2.64

Other

• Add more bare-metal 32-bit Arm support (#1753)
• Remove unnecessary clone (#1748)
• Add default compiler prefixes for thumbv7a/thumbv7r/thumbv8r bare-metal targets (#1742)

cc-v1.2.63

Other

• Update shlex requirement from 1.3.0 to 2.0.1 (#1736)

cc-v1.2.62

Other

• Regenerate target info (#1721)
• Allow exceptions on wasm platforms (#1714)
• Add relibc env (#1710)
• recognize sh4 architecture in parse_arch() (#1712)

cc-v1.2.61

Other

• fix OutputKind::Capture documentation (#1705)

cc-v1.2.60

Fixed

• (ar) suppress warnings from D modifier probe (#1700)

cc-v1.2.59

Fixed

• (ar) deterministic archives with D modifier (#1697)

Other

• Regenerate target info (#1698)

... (truncated)

Changelog

Sourced from cc's changelog.

1.2.66 - 2026-07-05

Other

• Fix target parsing for aarch64-unknown-linux-pauthtest (#1779)
• Support new QNX targets (#1775)
• Add kache to the supported compiler wrappers (#1770)

1.2.65 - 2026-06-19

Other

• Regenerate target info (#1763)

1.2.64 - 2026-06-12

Other

• Add more bare-metal 32-bit Arm support (#1753)
• Remove unnecessary clone (#1748)
• Add default compiler prefixes for thumbv7a/thumbv7r/thumbv8r bare-metal targets (#1742)

1.2.63 - 2026-05-29

Other

• Update shlex requirement from 1.3.0 to 2.0.1 (#1736)

1.2.62 - 2026-05-08

Other

• Regenerate target info (#1721)
• Allow exceptions on wasm platforms (#1714)
• Add relibc env (#1710)
• recognize sh4 architecture in parse_arch() (#1712)

1.2.61 - 2026-04-24

Other

• fix OutputKind::Capture documentation (#1705)

1.2.60 - 2026-04-10

Fixed

• (ar) suppress warnings from D modifier probe (#1700)

1.2.59 - 2026-04-03

... (truncated)

Commits

• 9c53ddc chore(cc): release v1.2.66 (#1777)
• f2836c0 Fix target parsing (#1779)
• 3299691 ci(test-wasm): do not download pre release of wasi-sdk (#1778)
• bfd1ac9 Support new QNX targets (#1775)
• 1887a73 Add kache to the supported compiler wrappers (#1770)
• e4847e1 Bump actions/checkout from 6.0.3 to 7.0.0 (#1767)
• 640c66a chore(cc): release v1.2.65 (#1764)
• 26e1972 Regenerate target info (#1763)
• 9858eb8 Bump taiki-e/install-action from 2.77.6 to 2.81.8 (#1758)
• 3bcc923 Bump release-plz/action from 0.5.129 to 0.5.130 (#1759)
• Additional commits viewable in compare view

Updates env_logger from 0.11.10 to 0.11.11

Release notes

Sourced from env_logger's releases.

v0.11.11

[0.11.11] - 2026-06-25

Internal

• Updated env_filter

Changelog

Sourced from env_logger's changelog.

[0.11.11] - 2026-06-25

Internal

• Updated env_filter

Commits

• b4d3f2b chore: Release
• cc2b2ef chore: Release
• 69e27d1 docs: Update changelog
• 166880d Merge pull request #411 from epage/parse
• 0a580d0 fix(filter): Remove 'parse' on no_std
• 78d8ef1 Merge pull request #404 from cagatay-y/feature/filter-no_std
• 132fe86 feat(filter): Add support for no_std environments
• 4feafa4 refactor(env_filter): Fix unreachable pub warning
• 92f8d8d Merge pull request #410 from rust-cli/renovate/crate-ci-typos-1.x
• 4e57784 chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0
• Additional commits viewable in compare view

Updates gilrs from 0.11.1 to 0.11.2

Commits

• See full diff in compare view

Updates log from 0.4.29 to 0.4.33

Release notes

Sourced from log's releases.

0.4.32

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in rust-lang/log#729
• Prepare for 0.4.32 release by @​KodrAus in rust-lang/log#730

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

• fix typos in kv compile errors and log documentation by @​Isvane in rust-lang/log#726
• Leverage static str key when possible by @​tisonkun in rust-lang/log#727
• Prepare for 0.4.31 release by @​KodrAus in rust-lang/log#728

New Contributors

• @​Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

• Support capturing of std::net types by @​KodrAus in rust-lang/log#724

New Contributors

• @​V0ldek made their first contribution in rust-lang/log#720
• @​woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

• MSRV is bumped to 1.71.0 in rust-lang/log#723

Changelog

Sourced from log's changelog.

[0.4.33] - 2026-06-20

What's Changed

• Fixed key comparison by @​matteo-zeggiotti-ok in rust-lang/log#732

New Contributors

• @​matteo-zeggiotti-ok made their first contribution in rust-lang/log#732

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

• Support Value -> string conversions with kv + std features instead of kv_std by @​tisonkun in rust-lang/log#729

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

• Leverage static str key when possible by @​tisonkun in rust-lang/log#727

New Contributors

• @​Isvane made their first contribution in rust-lang/log#726

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

• Support capturing of std::net types by @​KodrAus in rust-lang/log#724

New Contributors

• @​V0ldek made their first contribution in rust-lang/log#720
• @​woodruffw made their first contribution in rust-lang/log#723

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

• MSRV is bumped to 1.71.0 in rust-lang/log#723

Commits

• f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
• 6a24abf prepare for 0.4.33 release
• 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
• a9b5711 Review: fallback to the &str hash
• cc89cc6 Review: fixed other comparisons
• 920e7dc Review: fixed comparison on MaybeStaticStr
• 0d71d3c Fixed key comparison
• a5b5b21 Merge pull request #730 from rust-lang/cargo/0.4.32
• c8d3b12 prepare for 0.4.32 release
• ce6cd9f Merge pull request #729 from tisonkun/kv-std-support
• Additional commits viewable in compare view

Updates cbindgen from 0.29.2 to 0.29.4

Release notes

Sourced from cbindgen's releases.

0.29.4

• Support constant enums and arrays.

0.29.3

• Expose the line_endings config option to use with the builder
• Fix doc attribute parsing to properly handle block comments
• Check for CMSE ABI's as well
• ci: Add a meta job to block the merge queue on it.
• Allow pub access to ReprType fields
• In C23 mode, define sized enums as enums rather than typedefs.

0.29.2

• Request serde's std feature to avoid issues with newer toml versions.

0.29.1

• cf13c2b enum: Track dependencies properly in enumerations.
• 307d1e9 constant: Handle cfg in associated constants.
• 0902d02 Remove "display" feature from the toml crate
• 9068410 Fix incorrect detection of duplicated constants
• 451e768 docs: Correct after_include type in example config (fix)
• aff68c6 cargo update
• 09666f6 Update toml to 0.9

0.29.0

• Support no-export annotation for statics and functions.
• Fixed conditional fields of constexpr literal structs
• Add rename rule for generated associated constant
• Upgrade heck to 0.5
• Add support for an optional nullable attribute
• docs.md: Fix deprecated_with_note and deprecated_variant_with_note being spelled as 'notes'
• Fix generic with "void" default
• Fixed error generation of structures using the keyword as inside arrays
• Added test for unsafe(no_mangle) attribute
• Fixed handling of trait methods containing the unsafe attribute
• Rename -Zparse-only

0.28.0

• Parse unsafe attributes in mozilla/cbindgen#1020
• Fix local override of enum prefix-with-name by jsgf in mozilla/cbindgen#1006
• Add rename-all=prefix in mozilla/cbindgen#1021
• ir: add support for UnsafeCell and SyncUnsafeCell by alekitto in mozilla/cbindgen#1003
• Implement mangling for arrays in mozilla/cbindgen#1022
• Fix: Ignore CARGO_BUILD_TARGET in tests by bryango in mozilla/cbindgen#1010
• Newline for each field for constexpr field constants by youknowone in mozilla/cbindgen#988

... (truncated)

Changelog

Sourced from cbindgen's changelog.

0.29.4

  * Support constant enums and arrays.

0.29.3

  * Expose the line_endings config option to use with the builder
  * Fix doc attribute parsing to properly handle block comments
  * Check for CMSE ABI's as well
  * ci: Add a meta job to block the merge queue on it.
  * Allow `pub` access to `ReprType` fields
  * In C23 mode, define sized enums as enums rather than typedefs.

Commits

• b826cb8 Bump version.
• 7b328f1 tests: Add some tests for constant enums.
• 6c5bb1f ir: Add support for arrays.
• 3b1305a ir: Allow constant literals with enum variants.
• 4cf7500 ir: Use Path for ConstExprs.
• b5f2a97 Bump version to 0.29.3 and update CHANGES doc
• dfae10a tests: Fix tests with modern gcc.
• b16c1d2 Use C++ fixed-type enumeration syntax under C23 (or higher) as well
• b68b027 Allow pub access to ReprType fields
• See full diff in compare view

Updates rustls from 0.23.37 to 0.23.41

Commits

• 642a103 ci: drop Taplo job
• 752c144 Drop nightly clippy tests
• 8d8611a Fix new clippy::useless-borrows-in-formatting
• ebf3297 Fix new clippy::manual_clear
• 46808e7 ci: sync cargo-check-external-types nightly
• 041a8d2 Cargo deny: allow RUSTSEC-2026-0173
• 62e220e Take semver-compatible dependency updates
• 3c14696 Upgrade to hickory-resolver 0.26
• 848a2cc connect-tests: delete ech.rs
• 5ce9cac Bump version to 0.23.41
• Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.150

Release notes

Sourced from serde_json's releases.

v1.0.150

• Reject non-string enum object keys (#1324, thanks @​puneetdixit200)

Commits

• a1ae73a Release 1.0.150
• 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
• 2037b63 Reject non-string enum object keys
• 5d30df6 Resolve manual_assert_eq pedantic clippy lint
• dc8003a Raise required compiler for preserve_order feature to 1.85
• a42fa98 Unpin CI miri toolchain
• 684a60e Pin CI miri to nightly-2026-02-11
• 7c7da33 Raise required compiler to Rust 1.71
• acf4850 Simplify Number::is_f64
• 6b8ceab Resolve unnecessary_map_or clippy lint
• Additional commits viewable in compare view

Updates tobj from 4.0.3 to 4.0.4

Release notes

Sourced from tobj's releases.

4.0.4

What's Changed

• Add handling of the emissive material attribute Ke by @​mandeep in Twinklebear/tobj#75

New Contributors

• @​mandeep made their first contribution in Twinklebear/tobj#75

Full Changelog: Twinklebear/tobj@4.0.3...4.0.4

Commits

• 0724653 bump
• 38005ab Merge pull request #75 from mandeep/add-emissive-attribute
• 30bf3c3 Add handling of the emissive material attribute Ke
• See full diff in compare view

Updates bumpalo from 3.20.2 to 3.20.3

Changelog

Sourced from bumpalo's changelog.

3.20.3

Released 2026-05-22.

Fixed

• Fixed the try_alloc_slice_fill_with, alloc_slice_try_fill_with, alloc_slice_fill_with methods to properly rewind the bump pointer on allocation, initialization, and panic failure and avoid wasting bump capacity.
• Fixed a drop bug in bumpalo::collections::vec::DrainFilter (used by retain and retain_mut) when the predicate panics.

---

Commits

• 84654ac Rewind on slice allocation failure (#324)
• 5325624 Fix a couple bugs (#323)
• fcf8370 Fix UB in Allocator::grow_zeroed (#321)
• 657caf8 test: fix test for OOM instead of overflow (#320)
• 1db9be9 fix: fix typo in comment (#318)
• a47f6d6 fix: bump pointer/bump chunk debug assertion (#313)
• 0b12966 Update Cargo.toml with keywords (#303)
• See full diff in compare view

Updates smallvec from 1.15.1 to 1.15.2

Release notes

Sourced from smallvec's releases.

v1.15.2

What's Changed

• Exclude development script from cargo packaging by @​weiznich in servo/rust-smallvec#397
• Fix use-after-free in DrainFilter::keep_rest for SmallVec with capacity 0 by @​Shnatsel in servo/rust-smallvec#407
• Work around rustc 1.93 perf regression with MaybeUninit by @​glandium in servo/rust-smallvec#410

New Contributors

• @​Shnatsel made their first contribution in servo/rust-smallvec#407
• @​glandium made their first contribution in servo/rust-smallvec#410

Full Changelog: servo/rust-smallvec@v1.15.1...v1.15.2

Commits

• c469051 Bump version.
• 9fe422b Fix Windows CI.
• 51b965f Work around rustc 1.93 perf regression with MaybeUninit
• 9da26a5 Fix use-after-free in DrainFilter::keep_rest for zero-capacity SmallVecs
• 79184f1 Add Miri test for use-after-free in DrainFilter::keep_rest
• f59fb36 Merge pull request #397 from GiGainfosystems/exclude_scripts
• 28b6ed7 Exclude development script
• See full diff in compare view

Updates rustc-hash from 2.1.1 to 2.1.3

Changelog

Sourced from rustc-hash's changelog.

2.1.3

• Use derive_const to fix feature = "nightly" build
• Internally update to rand 0.9

2.1.2

• Refactor byte hashing to remove unreachable panic

Commits

• c13e7cc Merge pull request #78 from Noratrieb/new-version-2-1-3
• 4c3fabd Bump to 2.1.3
• 3f1c099 Merge pull request #64 from DaniPopes/rand-0.9
• 07c3f48 Merge pull request #77 from DaniPopes/const-update
• cbf0baf Use derive_const in nightly feature
• fdb275c Merge pull request #67 from Noratrieb/new-version
• acafa43 Prepare 2.1.2
• 140e525 Merge pull request #65 from morrisonlevi/split_first_chunk
• f061387 style: use consistent range format
• 211455c refactor!: use split_first_chunk to help optimizer
• Additional commits viewable in compare view

Updates rcgen from 0.14.7 to 0.14.8

Release notes

Sourced from rcgen's releases.

0.14.8

What's Changed

• Fix incorrect identifier for ML-DSA signature algorithms by @​DarkmatterVale in rustls/rcgen#412
• Upgrade yasna to 0.6 by @​djc in rustls/rcgen#419
• Add support for is_ca in CSR Params by @​5Dev24 in rustls/rcgen#420
• Add support for serializing BasicConstraints in CSR's by @​5Dev24 in rustls/rcgen#422
• update key_pair to signing_key in README.md by @​fakelozic in rustls/rcgen#427
• Fix encoding of directoryName constraints by @​sfackler in rustls/rcgen#429

Commits

• a70f083 Bump version to 0.14.8
• a32fdb1 Fix encoding of directoryName constraints
• 7111a79 update key_pair to signing_key
• 10664c9 Take semver-compatible dependency updates
• 0ec4d09 Add testing of CSR serializing basic constraints
• 5f94ef9 Add support for serializing BasicConstraints in CSR's
• fb835c1 Add writing basic constraints logic
• 0cf161d Bump codecov/codecov-action from 5 to 6
• 4909041 Add testing of CSR Params parsing Basic Constraints variants
• 6675a94 Add support for is_ca in CSR Params
• Additional commits viewable in compare view

Updates syn from 2.0.117 to 2.0.118

Release notes

Sourced from syn's releases.

2.0.118

• Documentation improvements

Commits

• f033ef1 Release 2.0.118
• 45f65f7 Wrap long lint attributes
• b3f9bf8 Mirror PR 1975 from readme to crate-level rustdoc
• 97dc117 Wrap PR 1975 to 80 columns
• 0085b7a Lint repr_transparent_non_zst_fields has been removed
• 9fc1c9d Update test suite to nightly-2026-06-12
• 504bcc7 Update test suite to nightly-2026-06-09
• 353d20b Update test suite to nightly-2026-06-06
• f257a16 Update test suite to nightly-2026-05-25
• b706e6e Update test suite to nightly-2026-05-13
• Additional commits viewable in compare view

Updates quote from 1.0.45 to 1.0.46

Release notes

Sourced from quote's releases.

1.0.46

• Avoid repeated get_span in quote_spanned (#329, thanks @​Noratrieb)

Commits

• bc4caf2 Release 1.0.46
• dc0e304 Format with rustfmt
• 712114c Drop arrow from syntax of quote_spanned_with_expanded_span
• f93ab8a Eliminate quote_spanned_with_expanded_span_as_expr macro
• 1ff3951 Eliminate __quote_spanned macro
• 64e913a Unify quote_spanned definitions
• 2978e8b Wrap comment to 80 columns
• 7f311a0 Fix PR 329 fat arrow spacing
• 313a8a2 Remove unneeded get_span from PR 329
• 0b33821 Merge pull request #329 from Noratrieb/avoid-repeat-expand
• Additional commits viewable in compare view

Updates napi-derive from 3.5.3 to 3.5.9

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.5.9

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.5.8

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.5.7

Other

• updated the following local packages: napi-derive-backend

napi-derive-v3.5.6

Fixed

• (napi) invalid TypeScript generic syntax for type aliases (#3289)
• (deps) update rust crate ctor to v1 (#3276)
• (deps) update rust crate ctor to 0.13.0 (#3275)
• (deps) update rust crate ctor to 0.12.0 (#3271)

napi-derive-v3.5.5

Fixed

• (deps) update rust crate ctor to 0.11.0 (#3270)
• (napi) Convert #[ctor] calls to declarative form to remove all features (#3257)

napi-derive-v3.5.4

Fixed

• (deps) update rust crate ctor to v0.10.0 (#3224)
• (deps) disable ctor priority feature (#3209)
• (deps) update rust crate ctor to v0.9.1 (#3204)

Commits

• 2785de5 chore: release (#3367)
• 441ae7a fix(napi): release Error's exception reference via the custom GC when dropped...
• cfa3b77 fix(deps): update emnapi to v1.11.2 (#3371)
• 65918a6 fix(napi): stop ref exception object in ThreadsafeFunction sync-throw path on...
• 324c550 perf(napi): share class accessor trampolines (#3364)
• 80caf60 perf: optimize object field raw property access (#3365)
• f72afd5 chore: release (#3354)
• 4effa4d chore(deps): lock file maintenance (#3363)
• f2bf197 chore(deps): lock file maintenance (#3362)
• 962a2f0 fix(napi): route custom-GC Buffer/TypedArray cross-thread drops through the o...
• Additional commits viewable in compare view

Updates napi-build from 2.3.1 to 2.3.2

Release notes

Sourced from napi-build's releases.

napi-build-v2.3.2

Fixed

• (build) on openbsd, work around local thread storage destructor crash after DSO unloading using '-z, nodelete' linker flag (#3274)

Commits

• e9c50bb chore: release (#3272)
• a2744da fix(build): on openbsd, work around local thread storage destructor crash aft...
• 3456eff feat(napi): add ThreadsafeFunction::call_async_catch to handle errors in ca...
• 5f70bd5 chore(deps): upgrade typescript to v6 (#3292)
• 16e48d1 fix(napi): invalid TypeScript generic syntax for type aliases (#3289)
• 159395b chore(deps): update dependency oxc-parser to ^0.130.0 (#3290)
• 86381bc feat(cli): opt-in runtime enum for #[napi(string_enum)] via --runtime-string-...
• 66893f1 chore(deps): update release-plz/action action to v0.5.129 (#3288)
• e3cc8e6 build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3285)
• 0e6e5f6 build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3286)
• Additional commits viewable in compare view

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

• Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

• 5bdb0e2 Release 1.0.103
• e621bd3 Merge pull request #452 from dtolnay/downcast
• 6e8c000 Eliminate pointer->reference->pointer during downcast
• 67c4abd Add regression test for issue 451
• 917a169 Update actions/upload-artifact@v6 -> v7
• d9dc3fa Update actions/checkout@v6 -> v7
• 841522b Raise minimum tested compiler to rust 1.85
• See full diff in compare view

Updates tokio from 1.52.1 to 1.52.3

Release notes

Sourced from tokio's releases.

Tokio v1.52.3

1.52.3 (May 8th, 2026)

Fixed

• sync: fix underflow in mpsc channel len() (#8062)
• sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
• sync: require that an RwLock has max_readers != 0 (#8076)
• sync: return Empty from try_recv() when mpsc is closed with outstanding permits (#8074)

#8062: tokio-rs/tokio#8062 #8074: tokio-rs/tokio#8074 #8075: tokio-rs/tokio#8075 #8076: tokio-rs/tokio#8076

Tokio v1.52.2

1.52.2 (May 4th, 2026)

This release reverts the LIFO slot stealing change introduced in 1.51.0 (#7431), due to [its performance impact]#8065. (#8100)

#7431: tokio-rs/tokio#7431 #8065: tokio-rs/tokio#8065 #8100: tokio-rs/tokio#8100

Commits

• d875691 chore: prepare Tokio v1.52.3 (#8130)
• e1aebb0 Merge 'tokio-1.51.3' into 'tokio-1.52.x' (#8129)
• fd63094 chore: prepare Tokio v1.51.3 (#8127)
• 8c600d0 Merge 'tokio-1.47.5' into 'tokio-1.51.x' (#8123)
• 11bfc13 chore: prepare Tokio v1.47.5 (#8122)
• f085b62 sync: notify receivers in mpsc OwnedPermit::release() method (#8075)
• 30d25cc sync: require that an RwLock has max_readers != 0 (#8076)
• 9fccf53 sync: return Empty from try_recv() when mpsc is closed with outstanding p...
• ebf61b4 sync: fix underflow in mpsc channel len() (#8062)
• 4abe9d7 chore: prepare Tokio v1.52.2 (#8115)
• Additional commits viewable in compare view

Updates rand from 0.10.0 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/ra...

Description has been truncated

[dependabot]

Assignees

The following users could not be added as assignees: aramhammoudeh. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.