Build(deps): bump rand from 0.8.5 to 0.9.0

Cargo.toml

@@ -24,6 +24,7 @@ jsonwebtoken = "9.3"
 log = { version = "0.4.27", features = ["std", "serde"] }
 once_cell = "1.21"
 parking_lot = "0.12.3"
+rand = "0.9.0"
 reqwest = { version = "0.12.15", default-features = false, features = ["json"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"

deny.toml

@@ -19,7 +19,7 @@ skip-tree = [
     { name = "rustix", version = "*" },
     { name = "security-framework", version = "2.11.1" }, # keyring uses old version
     { name = "thiserror", version = "1.0" },             # dialoguer uses old version
-    { name = "getrandom", version = "0.2.15" },          # rand uses old version
+    { name = "rand", version = "0.8.5" },                # p256 uses old version
 ]
 
 [sources]

lib/Cargo.toml

@@ -23,7 +23,7 @@ hyper.workspace = true
 jsonwebtoken.workspace = true
 log.workspace = true
 parking_lot.workspace = true
-rand = "0.8.5"
+rand.workspace = true
 reqwest.workspace = true
 serde.workspace = true
 serde_json.workspace = true

lib/src/mcu/auth/oauth2.rs

@@ -7,7 +7,7 @@ use async_trait::async_trait;
 use chrono::{DateTime, Utc};
 use jsonwebtoken::Header;
 use log::debug;
-use rand::Rng;
+use rand::{Rng, TryRngCore};
 use serde::ser::SerializeStruct;
 use tokio::sync::Mutex;
 
@@ -90,8 +90,8 @@ impl<'callback> OAuth2<'callback> {
     }
 
     fn generate_token_id() -> String {
-        let mut rng = rand::rngs::OsRng;
-        let bytes: [u8; 18] = rng.gen();
+        let mut rng = rand::rngs::OsRng.unwrap_err(); // Panic on OS-level RNG failure
+        let bytes: [u8; 18] = rng.random();
         hex::encode(bytes)
     }
 

test_helpers/Cargo.toml

@@ -17,7 +17,7 @@ log.workspace = true
 once_cell.workspace = true
 parking_lot.workspace = true
 p256 = "0.13.2"
-rand = "0.8.5"
+rand.workspace = true
 serde.workspace = true
 serde_json.workspace = true
 serde_with.workspace = true

test_helpers/src/fs/config.rs

@@ -2,9 +2,9 @@ use std::path::PathBuf;
 
 use chrono::{serde::ts_seconds_option, DateTime, Utc};
 use googletest::prelude::*;
+use p256::elliptic_curve::rand_core::OsRng;
 use p256::pkcs8::*;
 use p256::{ecdsa, pkcs8::LineEnding};
-use rand::rngs::OsRng;
 use serde::Serialize;
 use toml::{self, Value};