Update rand requirement to 0.5.4

[dependabot-preview]

Updates the requirements on rand to permit the latest version.

Changelog

Sourced from rand's changelog.

[0.5.4] - 2018-07-11

Platform support

• Make OsRng work via WASM/stdweb for WebWorkers

[0.5.3] - 2018-06-26

Platform support

• OpenBSD, Bitrig: fix compilation (broken in 0.5.1) (#530)

[0.5.2] - 2018-06-18

Platform support

• Hide OsRng and JitterRng on unsupported platforms (#512; fixes #503).

[0.5.1] - 2018-06-08

New distributions

• Added Cauchy distribution. (#474, #486)
• Added Pareto distribution. (#495)

Platform support and OsRng

• Remove blanket Unix implementation. (#484)
• Remove Wasm unimplemented stub. (#484)
• Dragonfly BSD: read from /dev/random. (#484)
• Bitrig: use getentropy like OpenBSD. (#484)
• Solaris: (untested) use getrandom if available, otherwise /dev/random. (#484)
• Emscripten, stdweb: split the read up in chunks. (#484)
• Emscripten, Haiku: don't do an extra blocking read from /dev/random. (#484)
• Linux, NetBSD, Solaris: read in blocking mode on first use in fill_bytes. (#484)
• Fuchsia, CloudABI: fix compilation (broken in Rand 0.5). (#484)

[0.5.0] - 2018-05-21

Crate features and organisation

• Minimum Rust version update: 1.22.0. (#239)
• Create a separate rand_core crate. (#288)
• Deprecate rand_derive. (#256)
• Add prelude (and module reorganisation). (#435)
• Add log feature. Logging is now available in JitterRng, OsRng, EntropyRng and ReseedingRng. (#246)
• Add serde1 feature for some PRNGs. (#189)
• stdweb feature for OsRng support on WASM via stdweb. (#272, #336)

Rng trait

• Split Rng in RngCore and Rng extension trait.
  next_u32, next_u64 and fill_bytes are now part of RngCore. (#265)
• Add Rng::sample. (#256)
• Deprecate Rng::gen_weighted_bool. (#308)
• Add Rng::gen_bool. (#308)
• Remove Rng::next_f32 and Rng::next_f64. (#273)
• Add optimized Rng::fill and Rng::try_fill methods. (#247)
• Deprecate Rng::gen_iter. (#286)
• Deprecate Rng::gen_ascii_chars. (#279)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because this dependency is pre-1.0.0.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #59.