Skip to content

fix: fix RUSTSEC-2026-0097 for rand 0.9#270

Merged
tvpeter merged 1 commit intobitcoindevkit:masterfrom
va-an:fix/rustsec-2026-0097-rand-0.9
Apr 21, 2026
Merged

fix: fix RUSTSEC-2026-0097 for rand 0.9#270
tvpeter merged 1 commit intobitcoindevkit:masterfrom
va-an:fix/rustsec-2026-0097-rand-0.9

Conversation

@va-an
Copy link
Copy Markdown
Contributor

@va-an va-an commented Apr 12, 2026

Fixes #269

Update transitive dependency rand from 0.9.2 to 0.9.3 via cargo update -p rand@0.9.2 to resolve RUSTSEC-2026-0097.

Note: #268 (rand 0.8.5 via secp256k1 and others) remains unaffected by this change and needs to be fixed upstream.

Checklists

All Submissions:

  • I've signed all my commits
  • I followed the contribution guidelines
  • I ran cargo fmt and cargo clippy before committing

@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 11.13%. Comparing base (07fd32f) to head (77dc466).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #270   +/-   ##
=======================================
  Coverage   11.13%   11.13%           
=======================================
  Files           8        8           
  Lines        2488     2488           
=======================================
  Hits          277      277           
  Misses       2211     2211           
Flag Coverage Δ
rust 11.13% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@tvpeter tvpeter merged commit dea7406 into bitcoindevkit:master Apr 21, 2026
9 checks passed
@github-project-automation github-project-automation Bot moved this to Done in BDK-CLI Apr 21, 2026
@va-an va-an deleted the fix/rustsec-2026-0097-rand-0.9 branch April 21, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

2 participants