deps: bump rand 0.9.2 -> 0.9.4

Patches GHSA-cq8v-f236-94qc (RUSTSEC-2026-0097) for direct rand usage.
The transitive rand 0.8.x remains in the lockfile via cookie, sentry,
slatedb, and phf_generator pending upstream bumps.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Bryan Helmkamp 2026-04-18 13:16:59 -04:00
parent 01dfe2a4fe
commit 977f4b4a77
No known key found for this signature in database

48
Cargo.lock generated
View file

@ -819,7 +819,7 @@ dependencies = [
"hkdf",
"hmac",
"percent-encoding",
"rand 0.8.5",
"rand 0.8.6",
"sha2",
"subtle",
"time",
@ -1621,7 +1621,7 @@ dependencies = [
"paste",
"predicates",
"progenitor-client",
"rand 0.9.2",
"rand 0.9.4",
"regex",
"ring",
"rustls",
@ -1789,7 +1789,7 @@ dependencies = [
"http",
"httpmock",
"insta",
"rand 0.9.2",
"rand 0.9.4",
"serde",
"serde_json",
"thiserror 2.0.18",
@ -1844,7 +1844,7 @@ dependencies = [
"hex",
"httpmock",
"open",
"rand 0.9.2",
"rand 0.9.4",
"serde",
"serde_json",
"sha2",
@ -1897,7 +1897,7 @@ dependencies = [
"futures",
"git2",
"glob",
"rand 0.9.2",
"rand 0.9.4",
"serde",
"serde_json",
"shlex",
@ -1956,7 +1956,7 @@ dependencies = [
"mime_guess",
"multer",
"object_store",
"rand 0.9.2",
"rand 0.9.4",
"regex",
"rustls",
"rustls-pemfile",
@ -2130,7 +2130,7 @@ dependencies = [
"console 0.15.11",
"dirs",
"insta",
"rand 0.9.2",
"rand 0.9.4",
"regex",
"serde",
"serde_json",
@ -2205,7 +2205,7 @@ dependencies = [
"mime_guess",
"object_store",
"predicates",
"rand 0.9.2",
"rand 0.9.4",
"regex",
"scopeguard",
"serde",
@ -2231,7 +2231,7 @@ checksum = "5666e8ca4ec174d896fb742789c29b1bea9319dcfd623c41bececc0a60c4939d"
dependencies = [
"log",
"once_cell",
"rand 0.8.5",
"rand 0.8.6",
]
[[package]]
@ -2474,7 +2474,7 @@ dependencies = [
"parking_lot",
"paste",
"pin-project",
"rand 0.9.2",
"rand 0.9.4",
"serde",
"thiserror 2.0.18",
"tokio",
@ -3670,7 +3670,7 @@ dependencies = [
"madsim-macros",
"naive-timer",
"panic-message",
"rand 0.8.5",
"rand 0.8.6",
"rand_xoshiro 0.6.0",
"rustversion",
"serde",
@ -4273,7 +4273,7 @@ dependencies = [
"parking_lot",
"percent-encoding",
"quick-xml",
"rand 0.9.2",
"rand 0.9.4",
"reqwest 0.12.28",
"ring",
"serde",
@ -4590,7 +4590,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
dependencies = [
"phf_shared 0.11.3",
"rand 0.8.5",
"rand 0.8.6",
]
[[package]]
@ -4924,7 +4924,7 @@ dependencies = [
"bytes",
"getrandom 0.3.4",
"lru-slab",
"rand 0.9.2",
"rand 0.9.4",
"ring",
"rustc-hash",
"rustls",
@ -4967,9 +4967,9 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
[[package]]
name = "rand"
version = "0.8.5"
version = "0.8.6"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
dependencies = [
"libc",
"rand_chacha 0.3.1",
@ -4978,9 +4978,9 @@ dependencies = [
[[package]]
name = "rand"
version = "0.9.2"
version = "0.9.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
dependencies = [
"rand_chacha 0.9.0",
"rand_core 0.9.5",
@ -5670,7 +5670,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f9f8b6dcd4fbae1e3e22b447f32670360b27e31b62ab040f7fb04e0f80c04d92"
dependencies = [
"once_cell",
"rand 0.8.5",
"rand 0.8.6",
"sentry-types",
"serde",
"serde_json",
@ -5696,7 +5696,7 @@ checksum = "a71ed3a389948a6a6d92b98e997a2723ca22f09660c5a7b7388ecd509a70a527"
dependencies = [
"debugid",
"hex",
"rand 0.8.5",
"rand 0.8.6",
"serde",
"serde_json",
"thiserror 1.0.69",
@ -6025,7 +6025,7 @@ dependencies = [
"once_cell",
"ouroboros",
"parking_lot",
"rand 0.9.2",
"rand 0.9.4",
"rand_xoshiro 0.7.0",
"serde",
"serde_json",
@ -6742,7 +6742,7 @@ dependencies = [
"http",
"httparse",
"log",
"rand 0.9.2",
"rand 0.9.4",
"rustls",
"rustls-pki-types",
"sha1",
@ -6792,7 +6792,7 @@ version = "2.1.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "9ea3136b675547379c4bd395ca6b938e5ad3c3d20fad76e7fe85f9e0d011419c"
dependencies = [
"rand 0.9.2",
"rand 0.9.4",
]
[[package]]
@ -6854,7 +6854,7 @@ version = "1.2.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "470dbf6591da1b39d43c14523b2b469c86879a53e8b758c8e090a470fe7b1fbe"
dependencies = [
"rand 0.9.2",
"rand 0.9.4",
"serde",
"web-time",
]