fix(deps): update rand to 0.8.6 - #478
Conversation
|
We don't modify the cargo.lock file like this, if you don't see it in the Cargo.toml, then it is a "transitive dependency". |
denjell-crabnebula
left a comment
There was a problem hiding this comment.
Find the responsible dep and update that.
|
Hmm, i have to disagree with that, especially since cargo does not have a way to patch crates.io dependencies with crates.io dependencies. We can update all the rand dependents and it could still stay on 0.8.5 since virtually no library crates update the patch versions of their dependencies to keep wide compatibility. Adding rand directly to the Cargo.toml dependencies may work but would be kinda ugly as well and against ecosystem standards. We also have to keep in mind that this repo contains libraries (which should have lax min versions requirements) and bins (which should have secure lockfiles for installations via |
|
Sure - but you don't provide an answer. |
Updates rand from 0.8.5 to 0.8.6 in Cargo.lock