Skip to content

Build(deps): Bump rand from 0.8.6 to 0.8.7 - #48

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand-0.8.7
Open

Build(deps): Bump rand from 0.8.6 to 0.8.7#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rand-0.8.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps rand from 0.8.6 to 0.8.7.

Changelog

Sourced from rand's changelog.

[0.8.7] - 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1804)

#1804: rust-random/rand#1804

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.8.7 branch from 51dca71 to 370e47f Compare July 21, 2026 20:12
Bumps [rand](https://github.com/rust-random/rand) from 0.8.6 to 0.8.7.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.8.7/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.6...0.8.7)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rand-0.8.7 branch from 370e47f to 4a56fe5 Compare July 30, 2026 20:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants