Skip to content

deps: bump getrandom from 0.2.17 to 0.3.4#6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/getrandom-0.3.4
Open

deps: bump getrandom from 0.2.17 to 0.3.4#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/getrandom-0.3.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown

Bumps getrandom from 0.2.17 to 0.3.4.

Changelog

Sourced from getrandom's changelog.

0.3.4 - 2025-10-14

Major change to wasm_js backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used by default. Users of wasm32-unknown-unknown targeting JavaScript environments like the Web and Node.js will no longer need to specify:

--cfg getrandom_backend="wasm_js"

in RUSTFLAGS for the crate to compile. They can now simple enable a feature.

Note: this should not affect non-JS users of the wasm32-unknown-unknown target. Using --cfg getrandom_backend will still override the source of randomness even if the wasm_js feature is enabled. This includes --cfg getrandom_backend=custom and --cfg getrandom_backend=unsupported.

For more information, see the discussions in #671, #675, and #730.

Added

  • unsupported opt-in backend #667
  • windows_legacy opt-in backend #724

Changed

  • Implement Memory Sanitizer unpoisoning more precisely #678
  • Relax MSRV for the linux_raw opt-in backend on ARM targets #688
  • Use getrandom syscall on all RISC-V Linux targets #699
  • Replaced wasi dependency with wasip2 #721
  • Enable wasm_js backend by default if the wasm_js feature is enabled #730

Removed

  • Unstable rustc-dep-of-std crate feature #694

#667: rust-random/getrandom#667 #671: rust-random/getrandom#671 #675: rust-random/getrandom#675 #678: rust-random/getrandom#678 #688: rust-random/getrandom#688 #694: rust-random/getrandom#694 #699: rust-random/getrandom#699 #721: rust-random/getrandom#721 #724: rust-random/getrandom#724 #730: rust-random/getrandom#730

[0.3.3] - 2025-05-09

Changed

  • Doc improvements #632 #634 #635
  • Add crate version to docs.rs links used in compile_error!s #639

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getrandom](https://github.com/rust-random/getrandom) from 0.2.17 to 0.3.4.
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.2.17...v0.3.4)

---
updated-dependencies:
- dependency-name: getrandom
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 21, 2026
lguzzon pushed a commit to lguzzon-scratchbook/MattJackson-busbarAI that referenced this pull request Jun 21, 2026
…ay headers) and MattJackson#6 (probe headers)

The two final-audit fixes that previously lacked dedicated tests were harness-limited. Extend the
mock harness so they (and future indistinguishability work) are testable:

- MockServerState: capture the full incoming request header set (record_request_headers /
  get_last_request_header) — for asserting what the upstream actually received.
- MockResponse::ServerErrorWithHeaders: an error response that also carries arbitrary response
  headers — for asserting the proxy relays them verbatim.

Then the two regression tests:
- MattJackson#6 health.rs: an active probe must send the same native User-Agent / Accept organic traffic sends
  (egress_user_agent / egress_accept), or a backend could fingerprint probes.
- MattJackson#2 forward.rs: the forward_once degraded same-protocol Bedrock error relay must forward both
  x-amzn-requestid and x-amzn-errortype verbatim.

All four gates green; 1076 tests.
lguzzon pushed a commit to lguzzon-scratchbook/MattJackson-busbarAI that referenced this pull request Jun 21, 2026
…pearance (no tool/text collision)

The R20 MattJackson#6 fix keyed the tool base on the LIVE text_block_open flag, which is false at tool-time when
a functionCall part precedes the first text part — so the tool took index 0 AND the later text block
took index 0, emitting two BlockStart frames at index 0 (a protocol violation a strict Anthropic SDK
rejects). The verification audit caught this as fix-incomplete.

Replace the order-dependent base with index-by-FIRST-APPEARANCE: the text block claims the next free
index (count of tools already opened) the first time it opens and stores it in a new persistent
StreamDecodeState.text_index; the tool base keys on text_index.is_some() (a persistent marker, not the
live flag). This is collision-free AND contiguous for every ordering: tool-only stays 0,1,2..;
text-before-tool → text 0, tools 1..; tool-before-text → tool 0, text 1. Text BlockDelta/BlockStop now
route to the claimed index, not a hardcoded 0. +regression test (intra- and inter-chunk tool-before-text).

All four gates green; 1134 tests.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants