Skip to content

chore(deps): bump the rust-dependencies group across 1 directory with 4 updates - #46

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-b855a39ef6
Open

chore(deps): bump the rust-dependencies group across 1 directory with 4 updates#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-b855a39ef6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 4 updates in the / directory: rand, log, thiserror and statrs.

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

  • Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
  • Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
  • Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

  • Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits
  • 9e7d328 Prepare rand 0.10.3 (#1840)
  • f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
  • ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
  • c994eb1 docs: fix angle unit in quick start example (#1839)
  • 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
  • 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
  • bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
  • 521fab6 Stop pinning dependencies (#1820)
  • 3f7c433 Stop pinning dependencies
  • cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
  • Additional commits viewable in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Updates thiserror from 2.0.20 to 2.0.21

Release notes

Sourced from thiserror's releases.

2.0.21

  • Fix parsing of generic unit variants in display expressions (#459)
Commits
  • b1827ee Release 2.0.21
  • 58037b5 Merge pull request #459 from dtolnay/turbofish
  • f82a0cf Keep track of nested turbofish depth
  • 72ea492 Raise required compiler to Rust 1.77
  • 72eea0d Resolve io_other_error clippy lint in tests
  • 07f09a2 Raise required compiler to Rust 1.74
  • 2715388 Update ui test suite to nightly-2026-09-22
  • 5a306c7 Update ui test suite to nightly-2026-09-05
  • ef9383b Update ui test suite to nightly-2026-08-22
  • 8336b84 Update ui tests for version 2.0.20
  • See full diff in compare view

Updates statrs from 0.19.0 to 0.19.1

Release notes

Sourced from statrs's releases.

v0.19.1

Added

  • let callers choose the binomial sampling algorithm

Fixed

  • Correct exact distribution boundaries
  • Beta::sf returning exactly 1.0 for tiny x
  • order the selection fast paths by total_cmp, not <=
  • replace hand-rolled quickselect with select_nth_unstable_by
  • address review on the BINV/BTPE sampler

Other

  • Alias f64 constants
  • Fix nightly f64 deprecation warnings
  • add a selection benchmark, and ordered fast paths it exposed
  • build the NaN order-statistic test under no_std
  • move binomial sampling into its own module
  • split the sampler's branch selection out of the RNG path
  • require std for the BTPE chi-square test
  • sample Binomial via BINV/BTPE instead of n Bernoulli trials
  • Bound the Newton iteration count and cover the quantile guards
  • Add safeguarded-Newton inverse_cdf for Chi and InverseGamma
Changelog

Sourced from statrs's changelog.

0.19.1 - 2026-08-11

Added

  • let callers choose the binomial sampling algorithm

Fixed

  • Correct exact distribution boundaries
  • Beta::sf returning exactly 1.0 for tiny x
  • order the selection fast paths by total_cmp, not <=
  • replace hand-rolled quickselect with select_nth_unstable_by
  • address review on the BINV/BTPE sampler

Other

  • Alias f64 constants
  • Fix nightly f64 deprecation warnings
  • add a selection benchmark, and ordered fast paths it exposed
  • build the NaN order-statistic test under no_std
  • move binomial sampling into its own module
  • split the sampler's branch selection out of the RNG path
  • require std for the BTPE chi-square test
  • sample Binomial via BINV/BTPE instead of n Bernoulli trials
  • Bound the Newton iteration count and cover the quantile guards
  • Add safeguarded-Newton inverse_cdf for Chi and InverseGamma
Commits
  • 4775e87 chore: update MSRV lockfile
  • 8b8a4ee chore: release v0.19.1
  • a73c016 chore: Alias f64 constants
  • a77efb3 chore: Fix nightly f64 deprecation warnings
  • f1a7c52 fix: Correct exact distribution boundaries
  • 0901747 fix: Beta::sf returning exactly 1.0 for tiny x
  • 02fdab6 fix: order the selection fast paths by total_cmp, not <=
  • 91f128b perf: add a selection benchmark, and ordered fast paths it exposed
  • 86af064 test: build the NaN order-statistic test under no_std
  • c66c7c7 fix: replace hand-rolled quickselect with select_nth_unstable_by
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the rust-dependencies group across 1 directory with…
f11804b 
… 4 updates

Bumps the rust-dependencies group with 4 updates in the / directory: [rand](https://github.com/rust-random/rand), [log](https://github.com/rust-lang/log), [thiserror](https://github.com/dtolnay/thiserror) and [statrs](https://github.com/statrs-dev/statrs).


Updates `rand` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.10.2...0.10.3)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

Updates `thiserror` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@2.0.20...2.0.21)

Updates `statrs` from 0.19.0 to 0.19.1
- [Release notes](https://github.com/statrs-dev/statrs/releases)
- [Changelog](https://github.com/statrs-dev/statrs/blob/main/CHANGELOG.md)
- [Commits](statrs-dev/statrs@v0.19.0...v0.19.1)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: thiserror
  dependency-version: 2.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: statrs
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 29, 2026
@dependabot
dependabot Bot requested a review from lavs9 as a code owner September 29, 2026 19:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 29, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lavs9 lavs9 Awaiting requested review from lavs9 lavs9 is a code owner

At least 0 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants