From 7da62b29140084a8553d620e8fa9369384d71da6 Mon Sep 17 00:00:00 2001
From: Nicolas Mattia <nicolas.mattia@dfinity.org>
Date: Mon, 20 Jul 2026 14:17:30 +0200
Subject: [PATCH 1/3] chore: clarify rand dependencies

This updates the Cargo.tomls and Bazel `spec` related to `rand` and
`rand_chacha` to reflect what's actually being pulled in
---
 Cargo.Bazel.json.lock       | 2 +-
 Cargo.toml                  | 4 ++--
 bazel/rust.MODULE.bazel     | 1 +
 packages/ic-hpke/Cargo.toml | 4 ++--
 4 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/Cargo.Bazel.json.lock b/Cargo.Bazel.json.lock
index 7ded22914581..c5252eaab547 100644
--- a/Cargo.Bazel.json.lock
+++ b/Cargo.Bazel.json.lock
@@ -1,5 +1,5 @@
 {
-  "checksum": "1f1282b2d826a19f5348514e87e1bde8f79b2482a6d7e56dcfd31dbaa38ab8f0",
+  "checksum": "74b4f3aa4684027e07e90fabdca12b8024e031fd86de7c112515010e777140ea",
   "crates": {
     "actix-codec 0.5.1": {
       "name": "actix-codec",
diff --git a/Cargo.toml b/Cargo.toml
index c7fd2f1ca9d4..ce94391457ca 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -831,8 +831,8 @@ quinn = { version = "0.11.11", default-features = false, features = [
 ] }
 quinn-udp = "0.5.5"
 quote = "1.0.37"
-rand = { version = "0.8.6", features = ["small_rng"] }
-rand_chacha = "0.3.1"
+rand = { version = "0.8.6", default-features = false, features = ["small_rng"] }
+rand_chacha = { version = "0.3.1", default-features = false }
 rand_distr = "^0.4"
 rand_pcg = "^0.3.1"
 ratatui = "0.29"
diff --git a/bazel/rust.MODULE.bazel b/bazel/rust.MODULE.bazel
index 93762ca9bc3c..b4c2c51cb658 100644
--- a/bazel/rust.MODULE.bazel
+++ b/bazel/rust.MODULE.bazel
@@ -1309,6 +1309,7 @@ crate.spec(
 crate.spec(
     package = "rand_chacha",
     version = "^0.3.1",
+    default_features = False,
 )
 crate.spec(
     package = "rand_distr",
diff --git a/packages/ic-hpke/Cargo.toml b/packages/ic-hpke/Cargo.toml
index bbf5f6cda22c..b38f306b977d 100644
--- a/packages/ic-hpke/Cargo.toml
+++ b/packages/ic-hpke/Cargo.toml
@@ -15,5 +15,5 @@ hpke = { version = "0.12", default-features = false, features = [ "p384", "alloc
 
 [dev-dependencies]
 hex = { workspace = true }
-rand = { version = "0.8", default-features = false, features = ["getrandom"] }
-rand_chacha = { version = "0.3", default-features = false }
+rand = { workspace = true }
+rand_chacha = { workspace = true }

From 3bddbf7b4c04aa8b39fc78629f4e715f4790d80c Mon Sep 17 00:00:00 2001
From: IDX GitHub Automation <infra+github-automation@dfinity.org>
Date: Mon, 20 Jul 2026 12:22:53 +0000
Subject: [PATCH 2/3] Automatically fixing code for linting and formatting
 issues

---
 bazel/rust.MODULE.bazel | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bazel/rust.MODULE.bazel b/bazel/rust.MODULE.bazel
index b4c2c51cb658..52ee3fa61f30 100644
--- a/bazel/rust.MODULE.bazel
+++ b/bazel/rust.MODULE.bazel
@@ -1307,9 +1307,9 @@ crate.spec(
     version = "^0.8.6",
 )
 crate.spec(
+    default_features = False,
     package = "rand_chacha",
     version = "^0.3.1",
-    default_features = False,
 )
 crate.spec(
     package = "rand_distr",

From 3dbed0d3e89daa4e507abc9156109ee7eaac09ee Mon Sep 17 00:00:00 2001
From: IDX GitHub Automation <infra+github-automation@dfinity.org>
Date: Mon, 20 Jul 2026 15:01:18 +0000
Subject: [PATCH 3/3] Automatically updated Cargo*.lock

---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 62845f0fe77e..6db8e9cf578b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9736,8 +9736,8 @@ version = "0.1.0"
 dependencies = [
  "hex",
  "hpke",
- "rand 0.9.3",
- "rand_chacha 0.9.0",
+ "rand 0.8.6",
+ "rand_chacha 0.3.1",
 ]
 
 [[package]]