Skip to content

chore(deps): bump getrandom from 0.2.17 to 0.3.4#5

Merged
hyperpolymath merged 1 commit into
mainfrom
dependabot/cargo/getrandom-0.3.4
Mar 23, 2026
Merged

chore(deps): bump getrandom from 0.2.17 to 0.3.4#5
hyperpolymath merged 1 commit into
mainfrom
dependabot/cargo/getrandom-0.3.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 22, 2026

Bumps getrandom from 0.2.17 to 0.3.4.

Changelog

Sourced from getrandom's changelog.

0.3.4 - 2025-10-14

Major change to wasm_js backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used by default. Users of wasm32-unknown-unknown targeting JavaScript environments like the Web and Node.js will no longer need to specify:

--cfg getrandom_backend="wasm_js"

in RUSTFLAGS for the crate to compile. They can now simple enable a feature.

Note: this should not affect non-JS users of the wasm32-unknown-unknown target. Using --cfg getrandom_backend will still override the source of randomness even if the wasm_js feature is enabled. This includes --cfg getrandom_backend=custom and --cfg getrandom_backend=unsupported.

For more information, see the discussions in #671, #675, and #730.

Added

  • unsupported opt-in backend #667
  • windows_legacy opt-in backend #724

Changed

  • Implement Memory Sanitizer unpoisoning more precisely #678
  • Relax MSRV for the linux_raw opt-in backend on ARM targets #688
  • Use getrandom syscall on all RISC-V Linux targets #699
  • Replaced wasi dependency with wasip2 #721
  • Enable wasm_js backend by default if the wasm_js feature is enabled #730

Removed

  • Unstable rustc-dep-of-std crate feature #694

#667: rust-random/getrandom#667 #671: rust-random/getrandom#671 #675: rust-random/getrandom#675 #678: rust-random/getrandom#678 #688: rust-random/getrandom#688 #694: rust-random/getrandom#694 #699: rust-random/getrandom#699 #721: rust-random/getrandom#721 #724: rust-random/getrandom#724 #730: rust-random/getrandom#730

[0.3.3] - 2025-05-09

Changed

  • Doc improvements #632 #634 #635
  • Add crate version to docs.rs links used in compile_error!s #639

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getrandom](https://github.com/rust-random/getrandom) from 0.2.17 to 0.3.4.
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](rust-random/getrandom@v0.2.17...v0.3.4)

---
updated-dependencies:
- dependency-name: getrandom
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 22, 2026
@hyperpolymath hyperpolymath merged commit 8a30213 into main Mar 23, 2026
10 of 19 checks passed
@hyperpolymath hyperpolymath deleted the dependabot/cargo/getrandom-0.3.4 branch March 23, 2026 07:21
hyperpolymath added a commit that referenced this pull request May 26, 2026
## Summary

\`FUTURE-IMPROVEMENTS.md\` was written on **2026-02-08** when
panic-attack was at **v1.0.0**, surveying ten Eclexia-scan-driven
improvement ideas. We're now at **v2.5.0**; four of the ten items have
shipped but the doc still presents them as future work.

This PR adds a status block at the top of the file and inline **Status:
SHIPPED** markers on the four landed sections, with file/line evidence
so a reader can verify the claims at a glance.

### Shipped (4)

| # | Improvement | Code reference |
|---|-------------|----------------|
| 1 | Test Code Exclusion | \`Analyzer::strip_cfg_test_modules_rs\` —
\`src/assail/analyzer.rs:923-934\` |
| 2 | Framework Detection Accuracy | \`Analyzer::detect_frameworks\` —
\`src/assail/analyzer.rs:4993\` |
| 3 | Safe Unwrap Variant Distinction | \`safe_unwrap_calls\` field on
\`ProgramStatistics\` / \`FileStatistics\` — \`src/types.rs:451,518\` |
| 6 | Differential Scanning | \`Commands::Diff\` — \`src/main.rs:483\`;
logic in \`src/report/diff.rs\` |

### Outstanding (6)

- **#4 Language-Specific Severity Calibration** — no "Hardened" tier
yet; *was* gated on #1+#3 (now both shipped, so genuinely unblocked).
- **#5 Workspace-Level Consolidated Reporting** — no Cargo workspace
mode in CLI.
- **#7 Allocation Site Context** — no \`AllocationCategory\` enum.
- **#8 Resource Dimension Awareness** — long-term, no plugin surface.
- **#9 Error Handling Maturity** — no metric yet.
- **#10 Configurable CI Thresholds** — no \`[thresholds]\` parser; *was*
gated on #1-4 (now mostly unblocked).

## Preservation

- The historical header (\`Date: 2026-02-08\`, \`Tool version:
panic-attack v1.0.0\`) is preserved as a historical record of what was
true at scan time.
- A new \`Audit refreshed: 2026-05-26\` line records when this status
update was performed.
- Body text of each improvement section is unchanged — only the priority
line on shipped items gets a "Status: SHIPPED" suffix.

## Test plan

- [x] Markdown renders correctly (status table, inline markers)
- [x] All cited file:line locations grep clean against current main
- [x] Signed commit

## Not in this PR

Acting on the now-unblocked items (#4, #10) is separate work. Filing
this hygiene update first so future planning has accurate ground truth.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant