From b41aeb1fda927c007a5798237062071d7ea1f5bb Mon Sep 17 00:00:00 2001
From: Jordan Rose <jrose@signal.org>
Date: Mon, 20 Apr 2026 12:35:32 -0700
Subject: [PATCH] Update rand 0.8 as well (dev-dependency only)

---
 .cargo/audit.toml | 1 -
 Cargo.lock        | 6 +++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/.cargo/audit.toml b/.cargo/audit.toml
index 626f543ad..2caecbb0d 100644
--- a/.cargo/audit.toml
+++ b/.cargo/audit.toml
@@ -3,5 +3,4 @@ ignore = [
     "RUSTSEC-2024-0370", # proc-macro-error is unmaintained, used by libcrux
     "RUSTSEC-2024-0436", # paste is unmaintained, used by libsignal-bridge
     "RUSTSEC-2025-0141", # bincode is unmaintained, used by zkgroup
-    "RUSTSEC-2026-0097", # The older version of rand is only used as a dev-dependency
 ]
diff --git a/Cargo.lock b/Cargo.lock
index cc3708846..e2c4ff357 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3634,7 +3634,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
 dependencies = [
  "phf_shared",
- "rand 0.8.5",
+ "rand 0.8.6",
 ]
 
 [[package]]
@@ -4048,9 +4048,9 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "rand_core 0.6.4",
 ]