Bryan Helmkamp 5946047202 deps: bump rand 0.8 → 0.9 (#163) ... ## Summary - Bumps `rand` from 0.8 to 0.9 to resolve Dependabot alert #16 (low severity: "Rand is unsound with a custom logger using rand::rng()", fixed in 0.9.3). - Migrates call sites to the renamed 0.9 APIs. ## API changes applied - `rand::thread_rng()` → `rand::rng()` - `Rng::gen_range(..)` → `Rng::random_range(..)` - `Rng::gen::<T>()` → `Rng::random::<T>()` - `OsRng.fill_bytes(..)` → `OsRng.try_fill_bytes(..).expect("OS RNG")` — in 0.9 `OsRng` implements `TryRngCore` instead of `RngCore` directly. ## Test plan - [x] `cargo build --workspace` - [x] `cargo nextest run -p fabro-util -p fabro-server -p fabro-workflow -p fabro-oauth` (1270 passed) - [x] `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-17 07:57:10 -04:00
..
src	deps: bump rand 0.8 → 0.9 (#163)	2026-04-17 07:57:10 -04:00
tests	fix: unblock clippy and nextest on main	2026-04-16 18:16:06 -04:00
build.rs	fix(server): embed git SHA and build date in server binary	2026-04-14 20:08:45 -04:00
Cargo.toml	fix(server): embed git SHA and build date in server binary	2026-04-14 20:08:45 -04:00