From 192caa661c741ea4da43d1afdb721cc2cb5443a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Apr 2026 13:52:46 +0000
Subject: [PATCH 1/2] Update rand requirement from 0.9.0 to 0.10.1

Updates the requirements on [rand](https://github.com/rust-random/rand) to permit the latest version.
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/rand/compare/rand_core-0.9.1...0.10.1)

---
updated-dependencies:
- dependency-name: rand
  dependency-version: 0.10.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.toml  | 2 +-
 src/pkce.rs | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index ea49e62..603aaed 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -15,7 +15,7 @@ lto = "fat"
 [dependencies]
 fastly = "0.12.0"
 hmac-sha256 = "1.1.7"
-rand = "0.9.0"
+rand = "0.10.1"
 serde = { version = "1.0.203", features = ["derive"] }
 serde_json = "1.0.120"
 base64 = "0.22.1"
diff --git a/src/pkce.rs b/src/pkce.rs
index c336811..7cd33de 100644
--- a/src/pkce.rs
+++ b/src/pkce.rs
@@ -5,7 +5,7 @@ use base64::{
 };
 use hmac_sha256::Hash;
 use rand::distr::Alphanumeric;
-use rand::{rng, Rng};
+use rand::{rng, RngExt};
 use std::iter;
 const CUSTOM_ENGINE: engine::GeneralPurpose =
     engine::GeneralPurpose::new(&alphabet::URL_SAFE, general_purpose::NO_PAD);

From 0efffb50d883de83e5a26ea51cea151218ef405e Mon Sep 17 00:00:00 2001
From: "Kevin P. Fleming" <kevin.fleming@fastly.com>
Date: Thu, 16 Apr 2026 09:59:35 -0400
Subject: [PATCH 2/2] Unpin Rust version, use 'stable.

---
 rust-toolchain.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rust-toolchain.toml b/rust-toolchain.toml
index b458106..d56ec4b 100644
--- a/rust-toolchain.toml
+++ b/rust-toolchain.toml
@@ -1,4 +1,4 @@
 [toolchain]
-channel = "1.90"
+channel = "stable"
 targets = [ "wasm32-wasip1" ]
 profile = "default"