Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update rust crate rand to 0.9.0 [security]](../pull/7)
- [ ] [chore(deps): pin dependencies](../pull/4) (`criterion`, `priority-queue`)
- [ ] [chore(deps): update rust crate criterion to 0.8.0](../pull/5)
- [ ] [fix(deps): update rust crate thiserror to v2](../pull/3)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `2`/`2` CVEs have Renovate fixes.

cargo

Cargo.toml

rand

- [GHSA-cq8v-f236-94qc](https://osv.dev/vulnerability/GHSA-cq8v-f236-94qc) (fixed in >= 0.9.3)
- [RUSTSEC-2026-0097](https://osv.dev/vulnerability/RUSTSEC-2026-0097) (fixed in >= 0.8.6)

## Detected Dependencies

cargo (1)

Cargo.toml (4)

- `thiserror 1.0.64` → [Updates: `2.0.0`]
- `criterion 0.5.1` → [Updates: `=0.5.1`, `0.8.0`]
- `rand 0.8.5` → [Updates: `0.9.0`]
- `priority-queue 2.1.1` → [Updates: `=2.1.1`]

Start with the Dependency Dashboard and Cargo.toml, then inspect the linked Renovate pull requests for rand, thiserror, criterion, and dependency pinning. The dashboard's listed updates and vulnerabilities are already represented by open pull requests; completion would require an explicitly assigned dependency task rather than work directly on this issue.

Written by the indexing model from the issue text.