Skip to content

deps(deps): bump nanoid from 0.4.0 to 0.5.0 - #2657

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-nanoid-0.5.0
Open

deps(deps): bump nanoid from 0.4.0 to 0.5.0#2657
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-cargo-nanoid-0.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps nanoid from 0.4.0 to 0.5.0.

Changelog

Sourced from nanoid's changelog.

0.5.0

  • Bump rand to 0.9
  • Add rngs::thread_local random source (#36)
  • format now accepts any FnMut(usize) -> Vec<u8> random generator, enabling seeded and stateful RNGs (#32, #41). Non-capturing fn(usize) -> Vec<u8> callers continue to work unchanged.
  • nanoid! macro size argument now accepts any expression, not only a single token (#28)
  • Specialized fast path for alphabets whose size is a power of two (#35). Note: for seeded RNGs paired with a power-of-two alphabet (e.g. SAFE, the new HEX_* presets), the number of random bytes consumed per ID has changed — the output for a given seed will differ from 0.4.0.
  • Add alphabet::HEX_LOWERCASE and alphabet::HEX_UPPERCASE presets (#39)
  • Optional smartstring feature for small-string-optimized output (#29)
  • Refreshed CI (GitHub Actions across OS matrix), drop Travis/AppVeyor
  • Switched benchmarks to criterion
Commits
  • 359c02d chore: 0.5.0 release
  • f0ad07f #39: Add hex alphabets
  • 7f961f2 Merge pull request #35 from tmccombs/fast-impl
  • 91a79fc Update fast impl for actual format signature
  • ed800e9 feat: Use specialized implementation for alphabets with size 2^n
  • fef0b2e Merge pull request #41 from sidarth164/sid/fnmut
  • 61e0606 docs: update README and added an example
  • 2004ff9 feat: support passing mutable functions as random generators
  • 3d405c5 Fix ci for prs
  • 7011b10 Fixup readme, delete old example
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file rust labels Aug 31, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 31, 2026 12:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dependabot rust labels Aug 31, 2026

@cloudwalk-review-agent cloudwalk-review-agent Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Dependency bump is consistent and low-risk in this diff: Cargo.toml and Cargo.lock both move nanoid from 0.4.0 to 0.5.0, with lockfile checksum and transitive rand linkage updated accordingly. No application code, API surface, auth/permissions, money movement, or migration logic changed here.

No concrete blocking issues found in the provided changes.

@github-actions

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • nanoid 0.5.0 — Codex initialization unavailable or blocked; requires manual review.

@dependabot
dependabot Bot force-pushed the dependabot-cargo-nanoid-0.5.0 branch from 84a21bb to df3c551 Compare August 31, 2026 13:59
@github-actions

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • nanoid 0.5.0 — Codex initialization unavailable or blocked; requires manual review.

@dependabot
dependabot Bot force-pushed the dependabot-cargo-nanoid-0.5.0 branch from df3c551 to c9a2770 Compare September 2, 2026 17:52
@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • nanoid 0.5.0 — Codex initialization unavailable or blocked; requires manual review.

Bumps [nanoid](https://github.com/mrdimidium/nanoid) from 0.4.0 to 0.5.0.
- [Changelog](https://github.com/mrdimidium/nanoid/blob/main/CHANGELOG.md)
- [Commits](mrdimidium/nanoid@v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-cargo-nanoid-0.5.0 branch from c9a2770 to 8d671e1 Compare September 4, 2026 21:43
@github-actions

github-actions Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

🧾 cargo-vet automated audit summary

  • Vetted (auto-certified): 0

  • Unvetted (needs manual review): 1

  • Codex reasoning: fallback mode (manual review required)

  • cargo vet --locked after apply: ❌ fail (exit 255)

  • Patch generated: no audit files were produced

CI did not commit anything. Review the patch locally and create the final signed commit yourself.

⚠️ Needs manual review

  • nanoid 0.5.0 — Codex initialization unavailable or blocked; requires manual review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file rust

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants