From 776d03be2ef41df43633b3b237338c94b1ed5d35 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Jul 2026 12:15:52 +0000
Subject: [PATCH] build(deps): bump rand from 0.8.6 to 0.9.4

Bumps [rand](https://github.com/rust-random/rand) from 0.8.6 to 0.9.4.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.4/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/0.8.6...0.9.4)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                               | 10 +++++-----
 builtins/plugins/identity-jwt/Cargo.toml |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 1cc98b6e..f83c8951 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -338,7 +338,7 @@ dependencies = [
  "pkcs8 0.9.0",
  "prost 0.10.4",
  "prost-types 0.10.1",
- "rand 0.8.6",
+ "rand 0.8.7",
  "rand_core 0.6.4",
  "regex",
  "serde_json",
@@ -878,7 +878,7 @@ dependencies = [
  "futures",
  "jsonwebtoken",
  "mockito",
- "rand 0.8.6",
+ "rand 0.9.4",
  "reqwest",
  "rsa",
  "serde",
@@ -2280,7 +2280,7 @@ dependencies = [
  "num-integer",
  "num-iter",
  "num-traits",
- "rand 0.8.6",
+ "rand 0.8.7",
  "smallvec",
  "zeroize",
 ]
@@ -2868,9 +2868,9 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
 [[package]]
 name = "rand"
-version = "0.8.6"
+version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
+checksum = "22f6172bdec972074665ed81ed53b71da00bfc44b65a753cfde883ec4c702a1a"
 dependencies = [
  "libc",
  "rand_chacha 0.3.1",
diff --git a/builtins/plugins/identity-jwt/Cargo.toml b/builtins/plugins/identity-jwt/Cargo.toml
index 7fd1a54b..85ef5bf1 100644
--- a/builtins/plugins/identity-jwt/Cargo.toml
+++ b/builtins/plugins/identity-jwt/Cargo.toml
@@ -90,7 +90,7 @@ rsa = { version = "0.9", features = ["pem"] }
 # satisfies that. Pinned to 0.8: rsa 0.9 (latest stable) depends on
 # rand_core 0.6, which rand 0.9 (rand_core 0.9) no longer implements,
 # so the two are incompatible until rsa 0.10 ships. Test-only dep.
-rand = "0.8"
+rand = "0.9"
 
 [lints]
 workspace = true