chore(deps)(deps): bump the testing group across 1 directory with 2 updates

[dependabot]

Bumps the testing group with 2 updates in the / directory: hegeltest and rand.

Updates hegeltest from 0.8.1 to 0.23.4

Release notes

Sourced from hegeltest's releases.

v0.23.2

This release fixes a couple of Tree Borrows violations detected by Miri.

v0.23.1

This fixes caching of test-cases during shrinking, which was happening only for some test executions. This should significantly speed up shrinking in some cases.

v0.23.0

This release:

• changes the ip_addresses() generator to return std::net::IpAddr instead of String
• changes the IpAddressGenerator builder methods (v4() and v6()) to return new Ipv4AddressGenerator/Ipv6AddressGenerator types so that they can be used to implement DefaultGenerator
• implements DefaultGenerator for std::net::IpAddr, std::net::Ipv4Addr and std::net::Ipv6Addr

v0.22.0

This release is a major breaking change to the libhegel C ABI, but will have no effect on hegel-rust users.

It contains three distinct changes:

• Every function other than hegel_context_new and hegel_context_last_error now takes a hegel_context_t*as its first argument and returns ahegel_result_t code (HEGEL_OK` is zero; negatives are errors) All return values are through out parameters at the end of the function. This should simplify having a uniform error reporting interface for consumers.
• The engine no longer has a concept of "final test case". It runs until completion, then the caller is responsible for handling running the final test case(s). This makes it easier to handle error reporting and debugger integration in calling code, as it gives more control of how errors are propagated.
• All settings methods for configuring a settings object now have _set_ in their name to indicate they are setter rather than getter methods (getters will be added in a future release).

v0.21.2

Print to stderr indicating the start and end of the reuse, generate, and shrink phases when verbosity is Verbose or Debug.

v0.21.1

This patch reduces redundant test executions by the shrinker.

v0.21.0

This release reworks the stateful-testing value-pool API. The Variables<T> type is renamed to Pool<T> and the variables() constructor is renamed to pool(). The draw() and consume() methods are replaced by two generators you draw from with tc.draw():

• pool.values_reusable() returns a generator over &T — drawing from it yields a reference to a value in the pool without removing it (the old draw()).
• pool.values_consumed() returns a generator over T — drawing from it

... (truncated)

Changelog

Sourced from hegeltest's changelog.

0.23.4 - 2026-07-06

This patch makes cloned TestCases generate from independent choice streams. Cloning a test case and moving the clone to another thread was already supported, but concurrent draws across clones interleaved into one shared sequence: values changed run to run, failures involving concurrent generation shrank poorly or not at all, and the docs warned the feature was borderline-internal. Each clone now draws from its own stream, so threads generating concurrently no longer interfere with each other: the same seed reproduces the same values on every stream, failures shrink normally (including the values drawn inside clones), and the shrunk counterexample replays exactly.

Variable pools and engine-managed collections remain shared across clones; using one of those from two threads at the same time still makes the affected draws depend on scheduling order.

0.23.3 - 2026-07-03

This patch fixes a use-after-free: a TestCase moved to a thread that outlived its test could touch freed memory when it drew after the test had finished. Such a draw now fails with a clear panic in that thread instead. As before, any thread that draws should be joined before the test returns.

0.23.2 - 2026-06-29

This release fixes a couple of Tree Borrows violations detected by Miri.

0.23.1 - 2026-06-25

This fixes caching of test-cases during shrinking, which was happening only for some test executions. This should significantly speed up shrinking in some cases.

0.23.0 - 2026-06-24

This release:

• changes the ip_addresses() generator to return std::net::IpAddr instead of String
• changes the IpAddressGenerator builder methods (v4() and v6()) to return new Ipv4AddressGenerator/Ipv6AddressGenerator types so that they can be used to implement DefaultGenerator
• implements DefaultGenerator for std::net::IpAddr, std::net::Ipv4Addr and std::net::Ipv6Addr

0.22.0 - 2026-06-23

This release is a major breaking change to the libhegel C ABI, but will have no effect on hegel-rust users.

It contains three distinct changes:

• Every function other than hegel_context_new and hegel_context_last_error now takes a hegel_context_t*as its first argument and returns ahegel_result_t code (HEGEL_OK` is zero; negatives are errors) All return values are through out parameters at the end of the function. This should simplify having a uniform error reporting interface for consumers.

... (truncated)

Commits

• See full diff in compare view

Updates rand from 0.10.1 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

• Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

• Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
• Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

Commits

• 1540ea3 Prepare rand 0.10.2 (#1800)
• a29964a Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (#1801)
• ced9491 Tweak docs for RngExt::random_range and SampleRange (#1798)
• db14664 Check UniformChar validity on deser (#1790)
• bea8620 Bump the all-deps group with 2 updates (#1796)
• 4f44932 Bump actions/cache from 5 to 6 (#1795)
• b999a13 Bump actions/checkout from 6 to 7 (#1794)
• aeab810 Avoid unsafe where safety depends on non-local values (#1791)
• 1896d7c Add typos CI job (#1789)
• 43eddee Bump the all-deps group with 2 updates (#1788)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions