Skip to content

fix(deps): update rand 0.9.0 -> 0.9.4 (unsound rng)#38

Merged
jonathanperis merged 1 commit into
mainfrom
fix/update-rand-dep
Apr 18, 2026
Merged

fix(deps): update rand 0.9.0 -> 0.9.4 (unsound rng)#38
jonathanperis merged 1 commit into
mainfrom
fix/update-rand-dep

Conversation

@jonathanperis

Copy link
Copy Markdown
Owner

Summary

  • Update rand from 0.9.00.9.4 via cargo update
  • Resolves Dependabot security alert: rand is unsound with a custom global logger during rand::rng() initialization

Details

Field Value
Package rand (transitive dep)
Severity Low
Was 0.9.0
Now 0.9.4 ✅

Test plan

  • CI passes
  • Cargo.lock shows rand v0.9.4

🤖 Generated with Claude Code

…logger

rand 0.9.0 is unsound when a custom global logger is active during
rand::rng() initialization. Fixed in 0.9.3.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jonathanperis jonathanperis merged commit ee9654b into main Apr 18, 2026
3 checks passed
@jonathanperis jonathanperis deleted the fix/update-rand-dep branch April 18, 2026 14:27
@jonathanperis jonathanperis restored the fix/update-rand-dep branch May 2, 2026 17:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant