Skip to content

chore(deps): bump fake from 4.4.0 to 5.1.0#108

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/fake-5.1.0
Open

chore(deps): bump fake from 4.4.0 to 5.1.0#108
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/fake-5.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps fake from 4.4.0 to 5.1.0.

Release notes

Sourced from fake's releases.

v5.0.0

What's Changed

New Contributors

Full Changelog: cksac/fake-rs@v4.4.0...v5.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fake](https://github.com/cksac/fake-rs) from 4.4.0 to 5.1.0.
- [Release notes](https://github.com/cksac/fake-rs/releases)
- [Commits](https://github.com/cksac/fake-rs/commits)

---
updated-dependencies:
- dependency-name: fake
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 26, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps bot commented Mar 26, 2026

Greptile Summary

This PR is an automated Dependabot bump of the fake crate from 4.4.0 to 5.1.0 (a major version jump), which is used exclusively as a dev-dependency for generating test/fixture data in src/ui/testing.rs. No production code is affected.\n\nKey points to be aware of:\n\n- rand major bump inside fake: fake 5.x upgrades its rand dependency from 0.9.x to 0.10.0. testing.rs re-exports symbols via fake::rand (SeedableRng, prelude::IndexedRandom, rngs::StdRng). If any of these have moved or been renamed in rand 0.10, the test build will fail — this should be verified by running cargo test.\n- Significant transitive dependency growth: rand 0.10.0 now depends on chacha20 0.10.0 directly (replacing rand_chacha) and on getrandom 0.4.2 (a new major of getrandom). getrandom 0.4.2 introduces a wasip3 dependency which in turn pulls in a large new WASM/WIT tooling tree (wit-bindgen-*, wasm-encoder, wasmparser, wit-component, wit-parser). This is a notable increase in the dev-dependency closure, but has no effect on the release binary.\n- Duplicate major versions in lock file: Several crates now appear in two major versions simultaneously (getrandom 0.3.4 + 0.4.2, rand_core 0.9.5 + 0.10.0, cpufeatures 0.2.17 + 0.3.0, r-efi 5.3.0 + 6.0.0). This is expected when incrementally upgrading part of the dependency graph and is not a problem in itself.\n- indexmap now compiled with serde feature: The lock file shows serde and serde_core added to indexmap's dependency list, likely enabled by the new wit-component/wasm-metadata chain. This is benign since serde is already a first-party dependency.

Important Files Changed

Filename Overview
Cargo.toml Bumps fake dev-dependency from 4.4.0 to 5.1.0; no production dependency changes.
Cargo.lock Locks in fake 5.1.0 and its new transitive deps: rand 0.10.0, rand_core 0.10.0, chacha20 0.10.0, getrandom 0.4.2, and a large WASM/WIT tooling tree (wasip3, wit-bindgen-*, wasm-encoder, wasmparser); all are dev-only.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["fake 5.1.0\n(dev-dep)"] --> B["rand 0.10.0"]
    B --> C["chacha20 0.10.0"]
    B --> D["getrandom 0.4.2"]
    B --> E["rand_core 0.10.0"]
    C --> E
    D --> F["wasip3 0.4.0"]
    D --> E
    F --> G["wit-bindgen 0.51.0"]
    G --> H["wit-bindgen-rust-macro"]
    H --> I["wit-bindgen-rust"]
    I --> J["wit-component 0.244.0"]
    J --> K["wasm-encoder 0.244.0"]
    J --> L["wasmparser 0.244.0"]
    J --> M["wit-parser 0.244.0"]
    K --> L
    M --> L
Loading

Comments Outside Diff (1)

  1. src/ui/testing.rs, line 9 (link)

    P1 fake::rand re-export API compatibility with rand 0.10.0

    fake 5.1.0 upgrades its internal rand dependency from 0.9.x to 0.10.0, and this file re-exports symbols from fake::rand — specifically SeedableRng, prelude::IndexedRandom, and rngs::StdRng. The rand 0.9 → 0.10 transition is a major version bump that included breaking changes (e.g. rand_chacha was replaced by the chacha20 crate directly). While StdRng and SeedableRng are expected to remain stable, prelude::IndexedRandom was introduced in rand 0.9 and its exact location/name in 0.10 should be confirmed.

    Since fake is a dev-dependency only and no source changes accompany this PR, please ensure cargo test passes cleanly against the new version before merging, so any API surface changes in fake::rand (re-exported from rand 0.10.0) are caught early.

Reviews (1): Last reviewed commit: "chore(deps): bump fake from 4.4.0 to 5.1..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants