From 4db4dedd7d1123372c2571c29647499165c44cfc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 23 Apr 2026 23:10:13 +0000
Subject: [PATCH] build(deps): bump rand from 0.8.5 to 0.10.1

Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.10.1.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/0.8.5...0.10.1)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock         | 32 ++++++++++++++++----------------
 src/dfx/Cargo.toml |  2 +-
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 84a7df1c15..57ceea8844 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -435,7 +435,7 @@ dependencies = [
  "getrandom 0.2.17",
  "instant",
  "pin-project-lite",
- "rand 0.8.5",
+ "rand 0.8.6",
  "tokio",
 ]
 
@@ -885,7 +885,7 @@ dependencies = [
  "num-bigint 0.4.6",
  "num-traits",
  "pretty 0.12.5",
- "rand 0.8.5",
+ "rand 0.8.6",
  "serde",
  "thiserror 1.0.69",
  "toml",
@@ -1740,7 +1740,7 @@ dependencies = [
  "petgraph",
  "pocket-ic",
  "proptest",
- "rand 0.8.5",
+ "rand 0.10.1",
  "regex",
  "reqwest 0.13.2",
  "ring",
@@ -2191,7 +2191,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2d391ba4af7f1d93f01fcf7b2f29e2bc9348e109dfdbf4dcbdc51dfa38dab0b6"
 dependencies = [
  "deunicode",
- "rand 0.8.5",
+ "rand 0.8.6",
 ]
 
 [[package]]
@@ -3129,7 +3129,7 @@ dependencies = [
  "js-sys",
  "leb128",
  "log",
- "rand 0.8.5",
+ "rand 0.8.6",
  "serde",
  "serde-wasm-bindgen",
  "serde_cbor",
@@ -3176,7 +3176,7 @@ dependencies = [
  "pairing",
  "parking_lot 0.12.5",
  "paste",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rand_chacha 0.3.1",
  "sha2 0.10.9",
  "subtle",
@@ -3190,7 +3190,7 @@ source = "git+https://github.com/dfinity/ic.git?rev=724ae4101bfdd8d4443126a6a8b1
 dependencies = [
  "hex",
  "ic-crypto-sha2",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rand_chacha 0.3.1",
  "serde",
  "zeroize",
@@ -3219,7 +3219,7 @@ dependencies = [
  "ic-crypto-sha2",
  "ic-types",
  "parking_lot 0.12.5",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rand_chacha 0.3.1",
  "serde",
  "serde_bytes",
@@ -3299,7 +3299,7 @@ dependencies = [
  "hkdf",
  "ic_principal",
  "pem 3.0.6",
- "rand 0.8.5",
+ "rand 0.8.6",
  "thiserror 2.0.18",
  "zeroize",
 ]
@@ -3612,7 +3612,7 @@ dependencies = [
  "once_cell",
  "phantom_newtype",
  "prost",
- "rand 0.8.5",
+ "rand 0.8.6",
  "serde",
  "serde_bytes",
  "serde_cbor",
@@ -3685,7 +3685,7 @@ dependencies = [
  "ic_bls12_381",
  "lazy_static",
  "pairing",
- "rand 0.8.5",
+ "rand 0.8.6",
  "sha2 0.10.9",
 ]
 
@@ -4614,7 +4614,7 @@ dependencies = [
  "httparse",
  "lazy_static",
  "log",
- "rand 0.8.5",
+ "rand 0.8.6",
  "regex",
  "serde_json",
  "serde_urlencoded",
@@ -5530,9 +5530,9 @@ checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "libc",
  "rand_chacha 0.3.1",
@@ -5896,7 +5896,7 @@ dependencies = [
  "borsh",
  "bytes",
  "num-traits",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rkyv",
  "serde",
  "serde_json",
@@ -6923,7 +6923,7 @@ dependencies = [
  "hmac",
  "once_cell",
  "pbkdf2",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rustc-hash 1.1.0",
  "sha2 0.10.9",
  "thiserror 1.0.69",
diff --git a/src/dfx/Cargo.toml b/src/dfx/Cargo.toml
index fd38b2dc6f..8bbd269599 100644
--- a/src/dfx/Cargo.toml
+++ b/src/dfx/Cargo.toml
@@ -86,7 +86,7 @@ patch = "0.7.0"
 pem.workspace = true
 petgraph = "0.6.0"
 pocket-ic = { git = "https://github.com/dfinity/ic", rev = "719ff387aab462ce5759c4c20c30de959fe9538c" }
-rand = "0.8.5"
+rand = "0.10.1"
 regex = "1.5.5"
 reqwest = { workspace = true, features = ["blocking", "json"] }
 ring.workspace = true