Bryan Helmkamp 5946047202 deps: bump rand 0.8 → 0.9 (#163) ... ## Summary - Bumps `rand` from 0.8 to 0.9 to resolve Dependabot alert #16 (low severity: "Rand is unsound with a custom logger using rand::rng()", fixed in 0.9.3). - Migrates call sites to the renamed 0.9 APIs. ## API changes applied - `rand::thread_rng()` → `rand::rng()` - `Rng::gen_range(..)` → `Rng::random_range(..)` - `Rng::gen::<T>()` → `Rng::random::<T>()` - `OsRng.fill_bytes(..)` → `OsRng.try_fill_bytes(..).expect("OS RNG")` — in 0.9 `OsRng` implements `TryRngCore` instead of `RngCore` directly. ## Test plan - [x] `cargo build --workspace` - [x] `cargo nextest run -p fabro-util -p fabro-server -p fabro-workflow -p fabro-oauth` (1270 passed) - [x] `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-17 07:57:10 -04:00
..
src	deps: bump rand 0.8 → 0.9 (#163)	2026-04-17 07:57:10 -04:00
tests/it	fix(test): make release-mode unit tests pass workspace-wide	2026-04-17 07:48:08 -04:00
build.rs	refactor(async): lint std::process::Command across all targets	2026-04-12 13:35:57 -04:00
Cargo.toml	refactor(graphviz): extract graphviz-sys into fabro-sh/graphviz-sys	2026-04-14 19:03:01 -04:00