From 0f2643b944218c92f2d65b59eb58abdcfc8b0fd3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 30 Jun 2026 08:35:51 +0000
Subject: [PATCH] build(deps): bump rand

Bumps the cargo group with 1 update in the /src/crates/jf directory: [rand](https://github.com/rust-random/rand).


Updates `rand` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/0.9.3/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/rand_core-0.9.2...0.9.3)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.3
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/crates/Cargo.lock    | 31 ++++++++++++++++++++++++++++++-
 src/crates/Cargo.toml    |  2 +-
 src/crates/jf/Cargo.lock |  4 ++--
 3 files changed, 33 insertions(+), 4 deletions(-)

diff --git a/src/crates/Cargo.lock b/src/crates/Cargo.lock
index b0d4aee1183946..2728866e2eabbb 100644
--- a/src/crates/Cargo.lock
+++ b/src/crates/Cargo.lock
@@ -504,6 +504,17 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "chrono"
 version = "0.4.44"
@@ -1318,6 +1329,7 @@ dependencies = [
  "cfg-if",
  "libc",
  "r-efi 6.0.0",
+ "rand_core 0.10.1",
  "wasip2",
  "wasip3",
 ]
@@ -1995,7 +2007,7 @@ dependencies = [
  "nix 0.30.1",
  "notify",
  "parking_lot",
- "rand 0.9.4",
+ "rand 0.10.1",
  "rayon",
  "rdp",
  "regex",
@@ -3476,6 +3488,17 @@ dependencies = [
  "rand_core 0.9.5",
 ]
 
+[[package]]
+name = "rand"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2e8e8bcc7961af1fdac401278c6a831614941f6164ee3bf4ce61b7edb162207"
+dependencies = [
+ "chacha20",
+ "getrandom 0.4.2",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "rand_chacha"
 version = "0.3.1"
@@ -3514,6 +3537,12 @@ dependencies = [
  "getrandom 0.3.4",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+
 [[package]]
 name = "rand_xorshift"
 version = "0.4.0"
diff --git a/src/crates/Cargo.toml b/src/crates/Cargo.toml
index 4dbc8395d4ed52..704c2d0d54a3fe 100644
--- a/src/crates/Cargo.toml
+++ b/src/crates/Cargo.toml
@@ -57,7 +57,7 @@ ruzstd = "0.8"
 siphasher = "1.0"
 hashers = "1.0"
 twox-hash = { version = "2.1", default-features = false }
-rand = "0.9"
+rand = "0.10"
 lz4_flex = { version = "0.12", default-features = false, features = ["std", "safe-decode", "checked-decode"] }
 lzma-rust2 = { version = "0.15", default-features = false, features = ["std", "xz"] }
 md5 = "0.7"
diff --git a/src/crates/jf/Cargo.lock b/src/crates/jf/Cargo.lock
index 98ae9705da39de..a23478e5096fa0 100644
--- a/src/crates/jf/Cargo.lock
+++ b/src/crates/jf/Cargo.lock
@@ -476,9 +476,9 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
 dependencies = [
  "rand_chacha",
  "rand_core",