From 84aebb72778e22103315ee4e73d847ce2764413f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 13:12:23 +0000
Subject: [PATCH] fix(deps): update rust crate rand to v0.9.3 [security]

---
 pkgs/dht/Cargo.lock     | 28 ++++++------
 pkgs/id/Cargo.lock      | 38 ++++++++--------
 pkgs/web-gen/Cargo.lock | 98 +++++++++++++++++++++++++++++++++--------
 pkgs/web-gen/Cargo.toml |  2 +-
 4 files changed, 114 insertions(+), 52 deletions(-)

diff --git a/pkgs/dht/Cargo.lock b/pkgs/dht/Cargo.lock
index 80d5cec4..71703615 100644
--- a/pkgs/dht/Cargo.lock
+++ b/pkgs/dht/Cargo.lock
@@ -702,7 +702,7 @@ dependencies = [
  "ed25519-dalek",
  "iroh",
  "iroh-gossip",
- "rand 0.9.2",
+ "rand 0.9.3",
  "tokio",
  "tracing-subscriber",
 ]
@@ -761,7 +761,7 @@ dependencies = [
  "iroh-gossip",
  "mainline",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "sha2 0.10.9",
  "tokio",
@@ -830,7 +830,7 @@ checksum = "3553f25a4e38b5ca64b26c54f34e1dd5092d18a5dea03797ac235baab53eaf8f"
 dependencies = [
  "ed25519-dalek",
  "hpke",
- "rand 0.9.2",
+ "rand 0.9.3",
  "x25519-dalek",
 ]
 
@@ -1254,7 +1254,7 @@ dependencies = [
  "idna",
  "ipnet",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustls",
  "thiserror 2.0.17",
@@ -1278,7 +1278,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand 0.9.2",
+ "rand 0.9.3",
  "resolv-conf",
  "rustls",
  "smallvec",
@@ -1588,7 +1588,7 @@ dependencies = [
  "hyper",
  "hyper-util",
  "log",
- "rand 0.9.2",
+ "rand 0.9.3",
  "tokio",
  "url",
  "xmltree",
@@ -1697,7 +1697,7 @@ dependencies = [
  "pkarr",
  "pkcs8",
  "portmapper",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest",
  "rustls",
  "rustls-pki-types",
@@ -1758,7 +1758,7 @@ dependencies = [
  "n0-error",
  "n0-future",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "tokio",
  "tokio-util",
@@ -1874,7 +1874,7 @@ dependencies = [
  "pin-project",
  "pkarr",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest",
  "rustls",
  "rustls-pki-types",
@@ -2533,7 +2533,7 @@ dependencies = [
  "n0-error",
  "netwatch",
  "num_enum",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "smallvec",
  "socket2 0.6.1",
@@ -2650,7 +2650,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.4",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash",
  "rustls",
@@ -2704,9 +2704,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "7ec095654a25171c2124e9e3393a930bddbffdc939556c914957a4c3e0a87166"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -3532,7 +3532,7 @@ dependencies = [
  "getrandom 0.3.4",
  "http",
  "httparse",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustls-pki-types",
  "simdutf8",
diff --git a/pkgs/id/Cargo.lock b/pkgs/id/Cargo.lock
index 7051dc6e..47ce2ebe 100644
--- a/pkgs/id/Cargo.lock
+++ b/pkgs/id/Cargo.lock
@@ -1248,7 +1248,7 @@ dependencies = [
  "iroh-gossip",
  "mainline",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "sha2 0.10.9",
  "tokio",
@@ -1317,7 +1317,7 @@ checksum = "3553f25a4e38b5ca64b26c54f34e1dd5092d18a5dea03797ac235baab53eaf8f"
 dependencies = [
  "ed25519-dalek",
  "hpke",
- "rand 0.9.2",
+ "rand 0.9.3",
  "x25519-dalek",
 ]
 
@@ -1471,7 +1471,7 @@ checksum = "4e7f34442dbe69c60fe8eaf58a8cafff81a1f278816d8ab4db255b3bef4ac3c4"
 dependencies = [
  "getrandom 0.3.4",
  "libm",
- "rand 0.9.2",
+ "rand 0.9.3",
  "siphasher",
 ]
 
@@ -1993,7 +1993,7 @@ dependencies = [
  "idna",
  "ipnet",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustls 0.23.37",
  "thiserror 2.0.18",
@@ -2017,7 +2017,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand 0.9.2",
+ "rand 0.9.3",
  "resolv-conf",
  "rustls 0.23.37",
  "smallvec",
@@ -2407,7 +2407,7 @@ dependencies = [
  "libsql",
  "mime_guess",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rmp-serde",
  "rust-embed",
  "rustyline",
@@ -2477,7 +2477,7 @@ dependencies = [
  "hyper 1.8.1",
  "hyper-util",
  "log",
- "rand 0.9.2",
+ "rand 0.9.3",
  "tokio",
  "url",
  "xmltree",
@@ -2585,7 +2585,7 @@ dependencies = [
  "pkcs8",
  "portable-atomic",
  "portmapper",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest",
  "rustc-hash 2.1.1",
  "rustls 0.23.37",
@@ -2653,7 +2653,7 @@ dependencies = [
  "nested_enum_utils",
  "noq",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "range-collections",
  "redb",
  "ref-cast",
@@ -2693,7 +2693,7 @@ dependencies = [
  "noq",
  "num_enum",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "redb",
  "self_cell",
  "serde",
@@ -2730,7 +2730,7 @@ dependencies = [
  "n0-error",
  "n0-future",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "tokio",
  "tokio-util",
@@ -2806,7 +2806,7 @@ dependencies = [
  "pin-project",
  "pkarr",
  "postcard",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest",
  "rustls 0.23.37",
  "rustls-pki-types",
@@ -3534,7 +3534,7 @@ dependencies = [
  "getrandom 0.3.4",
  "identity-hash",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash 2.1.1",
  "rustls 0.23.37",
@@ -4044,7 +4044,7 @@ dependencies = [
  "n0-error",
  "netwatch",
  "num_enum",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "smallvec",
  "socket2 0.6.3",
@@ -4245,7 +4245,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.4",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash 2.1.1",
  "rustls 0.23.37",
@@ -4315,9 +4315,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "7ec095654a25171c2124e9e3393a930bddbffdc939556c914957a4c3e0a87166"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.5",
@@ -5244,7 +5244,7 @@ checksum = "1a5ab62937edac8b23fa40e55a358ea1924245b17fc1eb20d14929c8f11be98d"
 dependencies = [
  "acto",
  "hickory-proto",
- "rand 0.9.2",
+ "rand 0.9.3",
  "socket2 0.6.3",
  "thiserror 2.0.18",
  "tokio",
@@ -5547,7 +5547,7 @@ dependencies = [
  "getrandom 0.3.4",
  "http 1.4.0",
  "httparse",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustls-pki-types",
  "simdutf8",
diff --git a/pkgs/web-gen/Cargo.lock b/pkgs/web-gen/Cargo.lock
index ea2df3e2..95a577ea 100755
--- a/pkgs/web-gen/Cargo.lock
+++ b/pkgs/web-gen/Cargo.lock
@@ -1,6 +1,6 @@
 # This file is automatically @generated by Cargo.
 # It is not intended for manual editing.
-version = 3
+version = 4
 
 [[package]]
 name = "addr2line"
@@ -23,7 +23,7 @@ version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fcb51a0695d8f838b1ee009b3fbf66bda078cd64590202a864a8f3e8c4315c47"
 dependencies = [
- "getrandom",
+ "getrandom 0.2.10",
  "once_cell",
  "version_check",
 ]
@@ -35,7 +35,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2c99f64d1e06488f620f932677e24bc6e2897582980441ae90a671415bd7ec2f"
 dependencies = [
  "cfg-if",
- "getrandom",
+ "getrandom 0.2.10",
  "once_cell",
  "version_check",
 ]
@@ -1231,6 +1231,18 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi",
+ "wasip2",
+]
+
 [[package]]
 name = "gimli"
 version = "0.27.3"
@@ -2276,7 +2288,7 @@ dependencies = [
  "drain_filter_polyfill",
  "educe",
  "futures",
- "getrandom",
+ "getrandom 0.2.10",
  "html-escape",
  "indexmap 2.0.0",
  "itertools",
@@ -2403,9 +2415,9 @@ dependencies = [
 
 [[package]]
 name = "libc"
-version = "0.2.147"
+version = "0.2.189"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4668fb0ea861c1df094127ac5f1da3409a82116a4ba74fca2e58ef927159bb3"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
 
 [[package]]
 name = "libloading"
@@ -2632,7 +2644,7 @@ dependencies = [
  "num-integer",
  "num-iter",
  "num-traits",
- "rand",
+ "rand 0.8.5",
  "smallvec",
  "zeroize",
 ]
@@ -3007,6 +3019,12 @@ dependencies = [
  "syn 2.0.26",
 ]
 
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
 [[package]]
 name = "rand"
 version = "0.8.5"
@@ -3014,8 +3032,18 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
 dependencies = [
  "libc",
- "rand_chacha",
- "rand_core",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.5",
 ]
 
 [[package]]
@@ -3025,7 +3053,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
 dependencies = [
  "ppv-lite86",
- "rand_core",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
 ]
 
 [[package]]
@@ -3034,7 +3072,16 @@ version = "0.6.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
 dependencies = [
- "getrandom",
+ "getrandom 0.2.10",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
 ]
 
 [[package]]
@@ -3083,7 +3130,7 @@ version = "0.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b033d837a7cf162d7993aded9304e30a83213c648b6e389db233191f891e5c2b"
 dependencies = [
- "getrandom",
+ "getrandom 0.2.10",
  "redox_syscall 0.2.16",
  "thiserror",
 ]
@@ -3177,7 +3224,7 @@ dependencies = [
  "num-traits",
  "pkcs1",
  "pkcs8",
- "rand_core",
+ "rand_core 0.6.4",
  "signature",
  "spki",
  "subtle",
@@ -3502,7 +3549,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5e1788eed21689f9cf370582dfc467ef36ed9c707f073528ddafa8d83e3b8500"
 dependencies = [
  "digest",
- "rand_core",
+ "rand_core 0.6.4",
 ]
 
 [[package]]
@@ -3693,7 +3740,7 @@ dependencies = [
  "memchr",
  "once_cell",
  "percent-encoding",
- "rand",
+ "rand 0.8.5",
  "rsa",
  "serde",
  "sha1",
@@ -3732,7 +3779,7 @@ dependencies = [
  "md-5",
  "memchr",
  "once_cell",
- "rand",
+ "rand 0.8.5",
  "serde",
  "serde_json",
  "sha1",
@@ -4218,7 +4265,7 @@ version = "1.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "79daa5ed5740825c40b389c5e50312b9c86df53fccd33f281df655642b43869d"
 dependencies = [
- "getrandom",
+ "getrandom 0.2.10",
 ]
 
 [[package]]
@@ -4291,6 +4338,15 @@ version = "0.11.0+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
 
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen",
+]
+
 [[package]]
 name = "wasm-bindgen"
 version = "0.2.87"
@@ -4369,7 +4425,7 @@ dependencies = [
  "js-sys",
  "leptos",
  "leptos_router",
- "rand",
+ "rand 0.9.5",
  "serde",
  "sqlx",
  "tracing",
@@ -4598,6 +4654,12 @@ dependencies = [
  "winapi",
 ]
 
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
 [[package]]
 name = "xterm-query"
 version = "0.2.0"
diff --git a/pkgs/web-gen/Cargo.toml b/pkgs/web-gen/Cargo.toml
index 0147730b..4104ac8b 100755
--- a/pkgs/web-gen/Cargo.toml
+++ b/pkgs/web-gen/Cargo.toml
@@ -14,7 +14,7 @@ irust = "1.70.0"
 js-sys = "0.3.64"
 leptos = { version = "0.4.5", features = ["csr", "nightly"] }
 leptos_router = "0.4.5"
-rand = "0.8.5"
+rand = "0.9.0"
 serde = { version = "1.0.174", features = ["derive"] }
 sqlx = "0.7.1"
 tracing = "0.1.37"