build(deps): bump the cargo group with 6 updates

[dependabot]

Bumps the cargo group with 6 updates:

Package	From	To
brioche-pack	ef3e1af	c4ade73
ulid	1.2.1	2.0.1
getrandom	0.3.4	0.4.3
r-efi	5.3.0	6.0.0
rand	0.9.5	0.10.2
rand_core	0.9.5	0.10.1

Updates brioche-pack from ef3e1af to c4ade73

Commits

• c4ade73 Update Rust to the latest version (#488)
• See full diff in compare view

Updates ulid from 1.2.1 to 2.0.1

Commits

• 82c545a Fix wasm32 build
• a30176c Cleanup in prep for release
• 1af7ec8 bump version to v2.0.0
• 13b3614 Cleanup clippy warnings
• ce49f86 Add the ability for Generator to overflow
• 5fe66d5 Remove deprecated method
• 4ac1cf7 Rename Ulid::new -> Ulid::gen; add Ulid::max
• 926ebfa Update rand to v0.10
• 8a24ed3 Rewrite encode_to* functions to const fn
• See full diff in compare view

Updates getrandom from 0.3.4 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

• wasm64-unknown-unknown target support for wasm_js backend #848

Changed

• Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

0.4.2 - 2026-03-03

Changed

• Bump r-efi dependency to v6 #814

Fixed

• Read errno only when it is set #810
• Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

0.4.1 - 2026-02-03

Fixed

• Documentation build on docs.rs #801

#801: rust-random/getrandom#801

0.4.0 - 2026-02-02

Added

• RawOsError type alias #739
• SysRng behind new feature sys_rng #751
• WASIp3 support #779
• extern_impl opt-in backend #786 #794
• Motor OS support #797

Changed

• Use Edition 2024 and MSRV 1.85 #749

#739: rust-random/getrandom#739 #749: rust-random/getrandom#749 #751: rust-random/getrandom#751 #779: rust-random/getrandom#779

... (truncated)

Commits

• 5e7cd57 Release v0.4.3 (#853)
• 1ea268a Use manual bindings for WASIp2/3 (#830)
• f7290b0 Update Cargo.lock (#852)
• 16ce801 Update Cargo.lock (#850)
• e5adfca Add wasm64-unknown-unknown support for wasm_js backend (#848)
• 626df8d Update Cargo.lock (#846)
• 4a01cb2 Update Cargo.lock (#841)
• f87bf39 Update Cargo.lock (#836)
• eadb879 ci: re-enable build job for x86_64-pc-cygwin (#832)
• d715d73 CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)
• Additional commits viewable in compare view

Updates r-efi from 5.3.0 to 6.0.0

Release notes

Sourced from r-efi's releases.

r-efi-6.0.0

# r-efi - UEFI Reference Specification Protocol Constants and Definitions
CHANGES WITH 6.0.0:
* Change all function prototypes to use `unsafe fn`. This is a major
  change, but reflects what all downstream users have already assumed.


Drop the obsolete efiapi and examples feature flags. The former

was unused, and the latter is an alias for native.


The eficall!{} macro is now fully inline in all of r-efi. It is

still provided for external users, but will no longer be used by

r-efi. All users are recommended to use extern "efiapi" directly.


Contributions from: Alan Egerton, David Rheinsberg

Dußlingen, 2026-02-03

Changelog

Sourced from r-efi's changelog.

CHANGES WITH 6.0.0:

    * Change all function prototypes to use `unsafe fn`. This is a major
      change, but reflects what all downstream users have already assumed.
* Drop the obsolete `efiapi` and `examples` feature flags. The former
  was unused, and the latter is an alias for `native`.

The eficall!{} macro is now fully inline in all of r-efi. It is

still provided for external users, but will no longer be used by

r-efi. All users are recommended to use extern "efiapi" directly.

Contributions from: Alan Egerton, David Rheinsberg

Dußlingen, 2026-02-03

Commits

• 7e1b032 r-efi: prepare v6.0.0
• 96504bb r-efi: inline eficall!{}
• ea21433 build: drop unused feature flags
• 48b1a11 r-efi: extend the transpose guidelines
• e701536 build: synchronize AUTHORS
• 6f2330e r-efi: update remaining prototypes to unsafe fn
• 60793e0 Fix signatures of most EFI functions to be unsafe
• See full diff in compare view

Updates rand from 0.9.5 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

... (truncated)

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Updates rand_core from 0.9.5 to 0.10.1

Release notes

Sourced from rand_core's releases.

v0.10.1

Fixed

• Reference to the rand crate in TryRng docs (#75)

#75: rust-random/rand_core#75

New Contributors

• @​jtojnar made their first contribution in rust-random/rand_core#75

Full Changelog: rust-random/rand_core@v0.10.0...v0.10.1

v0.10.0

What's Changed

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

• Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
• RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
• Rng is now an extension trait of TryRng<Error = Infallible> (#45)
• TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
• Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

• SeedableRng::{fork, try_fork} methods (#17)
• Re-export of core::convert::Infallible (#56)

Removed

• TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
• os_rng crate feature ([rand#1674])
• OsRng and OsError structs ([rand#1674])
• SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
• getrandom dependency ([rand#1674])
• std crate feature ([rand#1674])
• Optional serde dependency (#28)
• UnwrapMut struct and Rng::unwrap_mut method (#45)
• Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

• BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
• block::Generator::drop method (#35)
• BlockRng::word_offset method (#44)

Changed

• Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
• Rename BlockRng::generate_and_set method to reset_and_skip (#44)

... (truncated)

Changelog

Sourced from rand_core's changelog.

0.10.1 - 2026-04-13

Fixed

• Reference to the rand crate in TryRng docs (#75)

#75: rust-random/rand_core#75

[0.10.0] - 2026-02-01

This release makes a number of significant changes which we hope will be the last significant breakage before 1.0. Code has moved from the [rust-random/rand] repository to its own [rust-random/rand_core].

User-facing API changes

Changed

• Edition changed to 2024 and MSRV bumped to 1.85 ([rand#1668])
• RngCore and TryRngCore are renamed to Rng and TryRng respectively (#54)
• Rng is now an extension trait of TryRng<Error = Infallible> (#45)
• TryRng::Error is bound on core::error::Error instead of Debug + Display (#58)
• Relax Sized bound on impls of SeedableRng ([rand#1641])

Added

• SeedableRng::{fork, try_fork} methods (#17)
• Re-export of core::convert::Infallible (#56)

Removed

• TryRng::read_adapter method (replaced with rand::RngReader) ([rand#1669])
• os_rng crate feature ([rand#1674])
• OsRng and OsError structs ([rand#1674])
• SeedableRng::from_os_rng and SeedableRng::try_from_os_rng methods ([rand#1674])
• getrandom dependency ([rand#1674])
• std crate feature ([rand#1674])
• Optional serde dependency (#28)
• UnwrapMut struct and Rng::unwrap_mut method (#45)
• Rng::unwrap_err method in favor of explicit wrapping in UnwrapErr (#53)

API changes to PRNG implementation helpers

Added

• BlockRng::reconstruct and BlockRng::remaining_results methods (#36)
• block::Generator::drop method (#35)
• BlockRng::word_offset method (#44)

Changed

• Replaced le helper functions with new utils helpers ([rand#1667], #34, #38, #45)
• Rename BlockRng::generate_and_set method to reset_and_skip (#44)
• Rename block::BlockRngCore trait to block::Generator (#26)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions