chore: bump rand from 0.9.5 to 0.10.2

[dependabot]

Bumps rand from 0.9.5 to 0.10.2.

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

• Document panic behavior of make_rng and add #[track_caller] (#1761)
• Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

• The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
• Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
• Use Edition 2024 and MSRV 1.85 (#1653)
• Let Fill be implemented for element types, not sliceable types (#1652)
• Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
• Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
• Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
• Remove Clone support for StdRng, ReseedingRng (#1677)
• Use postcard instead of bincode to test the serde feature (#1693)
• Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
• Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
• Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

• Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
• Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
• Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
• Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

• Removed ReseedingRng (#1722)
• Removed unused feature "nightly" (#1732)
• Removed feature small_rng (#1732)

... (truncated)

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[git-mind-pr-guardian]

GitMind PR Review

{'pr_url': '#18', 'repo': 'Ayyankhan101/Transformer-In-Rust', 'pr_num': '18', 'title': 'chore: bump rand from 0.9.5 to 0.10.2', 'author': 'dependabot[bot]', 'additions': 66, 'deletions': 11, 'changed_files': 2, 'review': '## Summary\nUpdates the rand crate from 0.9.5 to 0.10.2, addressing a memory safety fix in UniformChar deserialization. The dependency graph is correctly resolved in Cargo.lock, maintaining rand 0.9.5 for rand_distr compatibility while upgrading the direct dependency. No source code modifications are required.\n\n## Issues\nNo significant issues found.\n\n## Verdict\n✅ APPROVE\nThis is a straightforward and beneficial dependency bump that patches a known safety issue. The lockfile correctly manages version coexistence, and the lack of source changes indicates API compatibility. Ready to merge.'}

---

Auto-generated by GitMind — AI-powered code analysis.

[git-mind-pr-guardian]

GitMind PR Review

{'pr_url': '#18', 'repo': 'Ayyankhan101/Transformer-In-Rust', 'pr_num': '18', 'title': 'chore: bump rand from 0.9.5 to 0.10.2', 'author': 'dependabot[bot]', 'additions': 70, 'deletions': 15, 'changed_files': 2, 'review': '## Summary\nThe PR updates rand to 0.10.2 but leaves the old 0.9.5 version in the lockfile and does not address transitive dependencies that still require the older version, which may cause compilation or runtime issues.\n\n## Issues\nCargo.lock:1520 — [MEDIUM] Potential breakage due to mixed rand versions — Both rand 0.9.5 and rand 0.10.2 are now present in the lockfile. Several crates (e.g., rand_distr) still depend on rand 0.9.5. This can lead to duplicate versions being compiled, increased binary size, and possible type mismatches if code inadvertently uses types from both versions.\nCargo.lock:1556 — [MEDIUM] rand_distr pinned to old rand version — rand_distr 0.5.1 depends on rand 0.9.5. Upgrading the top‑level rand to 0.10 without also upgrading rand_distr means the workspace will continue to pull in the older rand. Consider bumping rand_distr to a version that supports rand 0.10 (e.g., 0.5.3 or later).\nCargo.toml:28 — [MEDIUM] Direct dependency version bump not verified against codebase — rand 0.10 introduced breaking API changes (e.g., partial_shuffle now #[must_use], changes to UniformChar). The repository’s source code has not been reviewed for usage of these APIs. Ensure the code compiles and all tests pass after the bump.\n\n## Verdict\n⚠️ REQUEST CHANGES\nThe version bump introduces potential compatibility problems due to mixed rand versions and transitive dependencies still locked to the old version. The change should be verified by compiling the entire project, running the test suite, and updating dependent crates (like rand_distr) to versions compatible with rand 0.10 before merging.'}

---

Auto-generated by GitMind — AI-powered code analysis.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.