From 3f54389c5a40f3ef5754bfe5b43c7789bcdcecc6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 13 Jan 2026 21:13:23 +0000
Subject: [PATCH] Bump rand from 0.8.5 to 0.9.2

Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.9.2.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/0.8.5...rand_core-0.9.2)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock            | 63 +++++++++++++++++++++++++++++++------------
 full-node/Cargo.toml  |  2 +-
 lib/Cargo.toml        |  4 +--
 light-base/Cargo.toml |  2 +-
 4 files changed, 50 insertions(+), 21 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index ddea0380a8..b080393598 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -807,7 +807,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
 dependencies = [
  "generic-array",
- "rand_core",
+ "rand_core 0.6.4",
  "typenum",
 ]
 
@@ -983,7 +983,7 @@ dependencies = [
  "ed25519",
  "hashbrown 0.15.5",
  "pkcs8",
- "rand_core",
+ "rand_core 0.6.4",
  "sha2 0.10.9",
  "subtle",
  "zeroize",
@@ -1277,7 +1277,7 @@ version = "0.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6ea1015b5a70616b688dc230cfe50c8af89d972cb132d5a622814d29773b10b9"
 dependencies = [
- "rand_core",
+ "rand_core 0.6.4",
 ]
 
 [[package]]
@@ -1572,7 +1572,7 @@ dependencies = [
  "libsecp256k1-core",
  "libsecp256k1-gen-ecmult",
  "libsecp256k1-gen-genmult",
- "rand",
+ "rand 0.8.5",
  "serde",
  "sha2 0.9.9",
  "typenum",
@@ -1691,7 +1691,7 @@ checksum = "58c38e2799fc0978b65dfff8023ec7843e2330bb462f19198840b34b6582397d"
 dependencies = [
  "byteorder",
  "keccak",
- "rand_core",
+ "rand_core 0.6.4",
  "zeroize",
 ]
 
@@ -1702,7 +1702,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "69672161530e8aeca1d1400fbf3f1a1747ff60ea604265a4e906c2442df20532"
 dependencies = [
  "futures",
- "rand",
+ "rand 0.8.5",
  "thrift",
 ]
 
@@ -2113,8 +2113,18 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
 dependencies = [
  "libc",
- "rand_chacha",
- "rand_core",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.5",
 ]
 
 [[package]]
@@ -2124,7 +2134,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
 dependencies = [
  "ppv-lite86",
- "rand_core",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
 ]
 
 [[package]]
@@ -2136,6 +2156,15 @@ dependencies = [
  "getrandom 0.2.17",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
 [[package]]
 name = "rayon"
 version = "1.11.0"
@@ -2294,7 +2323,7 @@ dependencies = [
  "curve25519-dalek",
  "getrandom_or_panic",
  "merlin",
- "rand_core",
+ "rand_core 0.6.4",
  "serde_bytes",
  "sha2 0.10.9",
  "subtle",
@@ -2518,8 +2547,8 @@ dependencies = [
  "pbkdf2",
  "pin-project",
  "poly1305",
- "rand",
- "rand_chacha",
+ "rand 0.9.2",
+ "rand_chacha 0.3.1",
  "rusqlite",
  "ruzstd",
  "schnorrkel",
@@ -2561,7 +2590,7 @@ dependencies = [
  "humantime",
  "lru",
  "mick-jaeger",
- "rand",
+ "rand 0.9.2",
  "serde",
  "serde_json",
  "siphasher",
@@ -2596,8 +2625,8 @@ dependencies = [
  "lru",
  "parking_lot",
  "pin-project",
- "rand",
- "rand_chacha",
+ "rand 0.9.2",
+ "rand_chacha 0.3.1",
  "serde",
  "serde_json",
  "siphasher",
@@ -2640,7 +2669,7 @@ dependencies = [
  "futures",
  "httparse",
  "log",
- "rand",
+ "rand 0.8.5",
  "sha1",
 ]
 
@@ -3536,7 +3565,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
 dependencies = [
  "curve25519-dalek",
- "rand_core",
+ "rand_core 0.6.4",
  "serde",
  "zeroize",
 ]
diff --git a/full-node/Cargo.toml b/full-node/Cargo.toml
index 8e32172208..1d2b4342a5 100644
--- a/full-node/Cargo.toml
+++ b/full-node/Cargo.toml
@@ -31,7 +31,7 @@ hex = { version = "0.4.3", default-features = false }
 humantime = { version = "2.1.0", default-features = false }
 lru = { version = "0.16.3", default-features = false, features = ["hashbrown"] }
 mick-jaeger = "0.1.8"
-rand = "0.8.5"
+rand = "0.9.2"
 serde = { version = "1.0.183", default-features = false, features = ["derive"] }
 serde_json = { version = "1.0.104", default-features = false, features = ["std"] }
 siphasher = { version = "1.0.1", default-features = false }
diff --git a/lib/Cargo.toml b/lib/Cargo.toml
index 50da53289f..5ae5376354 100644
--- a/lib/Cargo.toml
+++ b/lib/Cargo.toml
@@ -64,7 +64,7 @@ num-rational = { version = "0.4.1", default-features = false, features = ["num-b
 num-traits = { version = "0.2.19", default-features = false }
 pbkdf2 = { version = "0.12.1", default-features = false }
 poly1305 = { version = "0.8.0", default-features = false }
-rand = { version = "0.8.5", default-features = false, features = ["alloc"] }
+rand = { version = "0.9.2", default-features = false, features = ["alloc"] }
 rand_chacha = { version = "0.3.1", default-features = false }
 ruzstd = { version = "0.8.0", default-features = false }
 schnorrkel = { version = "0.11.2", default-features = false, features = ["preaudit_deprecated", "alloc"] }
@@ -100,7 +100,7 @@ wasmtime = { version = "36.0.3", default-features = false, features = ["async",
 [dev-dependencies]
 criterion = "0.5.1"
 futures-executor = { version = "0.3.28", default-features = false }
-rand = { version = "0.8.5", default-features = false, features = ["std", "std_rng"] }
+rand = { version = "0.9.2", default-features = false, features = ["std", "std_rng"] }
 tempfile = "3.10.0"
 wat = "1.216.0"
 
diff --git a/light-base/Cargo.toml b/light-base/Cargo.toml
index dc5529fcd6..65e9584511 100644
--- a/light-base/Cargo.toml
+++ b/light-base/Cargo.toml
@@ -30,7 +30,7 @@ hex = { version = "0.4.3", default-features = false }
 itertools = { version = "0.14.0", default-features = false, features = ["use_alloc"] }
 lru = { version = "0.16.3", default-features = false, features = ["hashbrown"] } # The `hashbrown` feature brings no-std compatibility.
 pin-project = "1.1.5"
-rand = { version = "0.8.5", default-features = false, features = ["alloc"] }
+rand = { version = "0.9.2", default-features = false, features = ["alloc"] }
 rand_chacha = { version = "0.3.1", default-features = false }
 serde = { version = "1.0.183", default-features = false, features = ["alloc", "derive"] }
 serde_json = { version = "1.0.104", default-features = false, features = ["alloc"] }