From 409889f22f9a2260dbb97135c1a505dbe12d9c8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Feb 2026 15:09:17 +0000
Subject: [PATCH] Bump rand from 0.8.5 to 0.9.2

Bumps [rand](https://github.com/rust-random/rand) from 0.8.5 to 0.9.2.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/0.8.5...rand_core-0.9.2)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                       | 2 +-
 crates/rustapi-extras/Cargo.toml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 5e15f55..c1b7993 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3107,7 +3107,7 @@ dependencies = [
  "opentelemetry_sdk",
  "proptest",
  "r2d2",
- "rand 0.8.5",
+ "rand 0.9.2",
  "reqwest",
  "rustapi-core",
  "rustapi-openapi",
diff --git a/crates/rustapi-extras/Cargo.toml b/crates/rustapi-extras/Cargo.toml
index 1374564..6554990 100644
--- a/crates/rustapi-extras/Cargo.toml
+++ b/crates/rustapi-extras/Cargo.toml
@@ -66,7 +66,7 @@ opentelemetry-semantic-conventions = { version = "0.14", optional = true }
 tracing-opentelemetry = { version = "0.32", optional = true }
 
 # CSRF (feature-gated)
-rand = { version = "0.8", optional = true }
+rand = { version = "0.9", optional = true }
 base64 = { version = "0.22", optional = true }
 
 # OAuth2 (feature-gated)