[dependabot]

Bumps the all-dependencies group with 3 updates in the / directory: rusty-money, rand and tokio-test.

Updates rusty-money from 0.5.0 to 0.5.1

Release notes

Sourced from rusty-money's releases.

v0.5.1

Breaking Changes:

• Currency: Added default is_currency_mismatch() method; may conflict with same-named methods in downstream traits.

Minor Changes:

• Money: Added try_to_minor_units() for exact, checked conversion.
• Money: Added try_from_minor() and FastMoney::try_to_money() for checked custom currency scales.
• Fix: Arithmetic, exchange, and FastMoney conversions return errors on overflow instead of panicking.
• Fix: Split and allocation preserve totals at Decimal limits or return an error.
• Fix: Zero-weight allocations no longer receive remainder units.
• Fix: to_minor_units() handles large amounts and custom exponents without overflow.
• Fix: Parsing accepts long fractional amounts.
• Fix: Corrected Unicode digit grouping and capped formatting precision at 28.
• ISO: Added BOV, CHE, CHW, COU, MXV, USN, UYI, XAD, XSU, XUA, and XXX.
• Perf: Improved parsing, formatting, allocation, ISO lookup, and currency validation.

Changelog

Sourced from rusty-money's changelog.

[0.5.1] - 2026-09-24

Breaking Changes:

• Currency: Added default is_currency_mismatch() method; may conflict with same-named methods in downstream traits.

Minor Changes:

• Money: Added try_to_minor_units() for exact, checked conversion.
• Money: Added try_from_minor() and FastMoney::try_to_money() for checked custom currency scales.
• Fix: Arithmetic, exchange, and FastMoney conversions return errors on overflow instead of panicking.
• Fix: Split and allocation preserve totals at Decimal limits or return an error.
• Fix: Zero-weight allocations no longer receive remainder units.
• Fix: to_minor_units() handles large amounts and custom exponents without overflow.
• Fix: Parsing accepts long fractional amounts.
• Fix: Corrected Unicode digit grouping and capped formatting precision at 28.
• ISO: Added BOV, CHE, CHW, COU, MXV, USN, UYI, XAD, XSU, XUA, and XXX.
• Perf: Improved parsing, formatting, allocation, ISO lookup, and currency validation.

Commits

• 55c8dfe Merge pull request #150 from varunsrin/codex/release-0.5.1
• 6414434 Merge pull request #136 from varunsrin/codex/document-precision-contracts
• 2f221c4 docs: limit README edits to factual corrections
• 88ea6ca docs: mention checked custom-scale alternatives
• 614e175 docs: clarify precision rounding and allocation on current master
• c1b44f7 docs: organize release changes and omit comment updates
• 68529ec docs: focus release notes on consumer improvements
• 9ba9c64 chore: update changelog, bump version to 0.5.1
• 31bbc29 Merge pull request #152 from varunsrin/codex/iso-additions-history
• 1306278 Simplify ISO documentation and remove redundant addition tests
• Additional commits viewable in compare view

Updates rand from 0.10.2 to 0.10.3

Changelog

Sourced from rand's changelog.

[0.10.3] — 2026-09-20

Fixes

• Fix WeightedIndex panic when the sum of float weights is infinite; return Error::Overflow instead (#1808)
• Fix spurious Error::NonFinite from Uniform::new_inclusive on large finite float ranges such as 0.0..=f64::MAX (#1821)
• Fix possible panic due to sampling a deserialized Uniform<char> (#1831)

Changes

• Report exact remaining lengths from WeightedIndex::weights() and reduce overhead when reading weights (#1838)

#1808: rust-random/rand#1808 #1821: rust-random/rand#1821 #1831: rust-random/rand#1831 #1838: rust-random/rand#1838

Commits

• 9e7d328 Prepare rand 0.10.3 (#1840)
• f73ce74 Optimize WeightedIndex weight lookup and iteration (#1838)
• ef9e044 Avoid panic from deserialized Uniform\<char> where range == 0 (#1831)
• c994eb1 docs: fix angle unit in quick start example (#1839)
• 33dea4f Test that WeightedIndex rejects INFINITY with Error::Overflow (#1822)
• 94c9078 Fix Uniform::new_inclusive overflow on large finite float ranges (#1821)
• bb1262f Use Xoshiro256PlusPlus in examples/rayon-monte-carlo.rs (#1805)
• 521fab6 Stop pinning dependencies (#1820)
• 3f7c433 Stop pinning dependencies
• cf4f73e sample_efraimidis_spirakis: error on more than amount non-finite weights (#1814)
• Additional commits viewable in compare view

Updates tokio-test from 0.4.5 to 0.4.6

Commits

• f987088 chore: prepare tokio-test 0.4.6 (#8508)
• 1daf3c5 io: add inspect adapter accessors (#8486)
• ec6d2af stream: implement FusedStream for Throttle (#8485)
• 3930bd1 net: add Safety docs and Default impls for named pipe options (#8378)
• e37e284 io: retry on Interrupted in more operations (#8460)
• e43fb07 rt: suggest .await in nested block_on panic (#8501)
• 2ebac75 stream: implement FusedStream for MPSC receiver wrappers (#8500)
• 9bc516a stream: clarify readiness docs for basic streams (#8495)
• 5d5ca11 rt: avoid overflow in shutdown_timeout() (#8497)
• dd826ef io: reject zero capacity in BufReader (#8494)
• Additional commits viewable in compare view

---

Note

Medium Risk
rusty-money behavior and API changes affect ledger currency/money handling even though only the lockfile changes; rand/tokio-test bumps are low impact.

Overview
Updates Cargo.lock only to pull in newer patch releases: rand 0.10.3, rusty-money 0.5.1 (adds arrayvec in the lockfile), and tokio-test 0.4.6. Transitive consumers in the lockfile (cala-ledger, examples, perf, job) now resolve to rand 0.10.3; there are no application source changes in this diff.

rusty-money 0.5.1 is the meaningful bump for this repo: safer money arithmetic (errors instead of panics on overflow), new checked conversion helpers, and a possible trait conflict from a default is_currency_mismatch() on Currency—worth a quick compile/test pass on money/currency paths. rand and tokio-test are minor fixes and test harness updates with no direct code edits here.

^{Reviewed by Cursor Bugbot for commit 9b7b570. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

📊 Performance Report

Commit: 9b7b570
Updated: 2026-10-08 08:29:11 UTC

Cala Performance Benchmark Results (non-representative)

Criterion Benchmark Results (single-threaded)

Benchmark	Time per Run	Throughput	% vs Baseline
post_simple_transaction	3.094ms	323 tx/s	0 (baseline)
post_backdated_transaction_with_effective_balances_365_days	16.512ms	60 tx/s	-433.0%
post_multi_layer_transaction	3.597ms	277 tx/s	-16.0%
post_simple_transaction_with_effective_balances	4.889ms	204 tx/s	-57.0%
post_simple_transaction_with_skipped_velocity	2.691ms	371 tx/s	+13.0%
post_simple_transaction_with_velocity	2.639ms	378 tx/s	+14.0%
post_simple_transaction_with_hit_velocity	1.156ms	864 tx/s	+62.0%
post_simple_transaction_with_one_account_set	3.327ms	300 tx/s	-7.0%
post_simple_transaction_with_five_account_sets	5.556ms	179 tx/s	-79.0%
post_simple_transaction_with_ec_account_set	2.246ms	445 tx/s	+27.0%

Load Testing Results (parallel-execution)

Scenario	tx/s
1 parallel	202.08
2 parallel	434.72
5 parallel	477.44
10 parallel	485.79
20 parallel	535.50
2 contention	159.26
5 contention	287.61
2 acct_sets	213.01
5 acct_sets	203.43

---

Note: Performance results may vary based on system resources and database state.

Last updated by commit 9b7b570