Arnaud GourlayandClaude Opus 5 0e33974697 Replace permutation_iterator with rand's index sampler (#10217) ...

`cargo audit` flags rand 0.7.3 as unsound (RUSTSEC-2026-0097), and
permutation_iterator 0.1.2 is its sole importer. The crate is
unmaintained, so the finding is permanent for as long as we depend on
it.

Everything we used it for is "pick k distinct random indices out of n",
which is exactly `rand::seq::index::sample` from the workspace rand.
Switch the three src call sites and the two benches over, and drop the
dependency. 11 crates leave Cargo.lock.

Also fix a comment in quantile.rs claiming the permutation was
deterministic per count: the old crate keyed itself from thread_rng on
every call, so it never was.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-14 13:51:08 +02:00

..

benches

Replace permutation_iterator with rand's index sampler (#10217)

2026-08-14 13:51:08 +02:00

cpp

Hotfix for Windows ARM64 builds, disable some Neon features (#7690)

2025-12-05 10:56:48 +01:00

src

Replace permutation_iterator with rand's index sampler (#10217)

2026-08-14 13:51:08 +02:00

tests/integration

[UpdateOnly] implement the appendable quantized-vector overlay (dense, Binary/Turbo) (#10161)

2026-08-11 10:57:47 +02:00

build.rs

fix(quantization): skip cc compile when no SIMD sources were added (#10209)

2026-08-13 01:30:56 +00:00

Cargo.toml

Replace permutation_iterator with rand's index sampler (#10217)

2026-08-14 13:51:08 +02:00