Bryan Helmkamp 5946047202 deps: bump rand 0.8 → 0.9 (#163) ... ## Summary - Bumps `rand` from 0.8 to 0.9 to resolve Dependabot alert #16 (low severity: "Rand is unsound with a custom logger using rand::rng()", fixed in 0.9.3). - Migrates call sites to the renamed 0.9 APIs. ## API changes applied - `rand::thread_rng()` → `rand::rng()` - `Rng::gen_range(..)` → `Rng::random_range(..)` - `Rng::gen::<T>()` → `Rng::random::<T>()` - `OsRng.fill_bytes(..)` → `OsRng.try_fill_bytes(..).expect("OS RNG")` — in 0.9 `OsRng` implements `TryRngCore` instead of `RngCore` directly. ## Test plan - [x] `cargo build --workspace` - [x] `cargo nextest run -p fabro-util -p fabro-server -p fabro-workflow -p fabro-oauth` (1270 passed) - [x] `cargo +nightly-2026-04-14 clippy --workspace --all-targets -- -D warnings` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-17 07:57:10 -04:00
..
data	rename Arc to Fabro in all Rust crates, symbols, env vars, and supporting files	2026-03-12 12:25:58 -04:00
src	deps: bump rand 0.8 → 0.9 (#163)	2026-04-17 07:57:10 -04:00
tests	feat(auth): add dev-token local server auth	2026-04-13 07:04:47 -04:00
build.rs	fmt: apply nightly rustfmt after merge	2026-04-11 13:43:30 -04:00
Cargo.toml	Add publish = false to all crates to prevent accidental crates.io publish	2026-03-29 13:47:09 -04:00