[deps]: Update Rust crate getrandom to >=0.2.9, <0.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
getrandom	dependencies	minor	>=0.2.9, <0.3 → >=0.2.9, <0.5

---

Release Notes

rust-random/getrandom (getrandom)

v0.4.1

Compare Source

Fixed

• Documentation build on docs.rs #​801

v0.4.0

Compare Source

Added

• RawOsError type alias #​739
• SysRng behind new feature sys_rng #​751
• WASIp3 support #​779
• extern_impl opt-in backend #​786 #​794
• Motor OS support [#​797]

Changed

• Use Edition 2024 and MSRV 1.85 #​749

v0.3.4

Compare Source

Major change to wasm_js backend

Now, when the wasm_js feature is enabled, the wasm_js backend will be used
by default. Users of wasm32-unknown-unknown targeting JavaScript environments
like the Web and Node.js will no longer need to specify:

--cfg getrandom_backend="wasm_js"

in RUSTFLAGS for the crate to compile. They can now simple enable a feature.

Note: this should not affect non-JS users of the wasm32-unknown-unknown
target. Using --cfg getrandom_backend will still override the source of
randomness even if the wasm_js feature is enabled. This includes
--cfg getrandom_backend=custom and --cfg getrandom_backend=unsupported.

For more information, see the discussions in #​671, #​675, and #​730.

Added

• unsupported opt-in backend #​667
• windows_legacy opt-in backend #​724

Changed

• Implement Memory Sanitizer unpoisoning more precisely #​678
• Relax MSRV for the linux_raw opt-in backend on ARM targets #​688
• Use getrandom syscall on all RISC-V Linux targets #​699
• Replaced wasi dependency with wasip2 #​721
• Enable wasm_js backend by default if the wasm_js feature is enabled #​730

Removed

• Unstable rustc-dep-of-std crate feature #​694

v0.3.3

Compare Source

Changed

• Doc improvements #​632 #​634 #​635
• Add crate version to docs.rs links used in compile_error!s #​639

Fixed

• Error handling in WASI p1 #​661

v0.3.2

Compare Source

Added

• efi_rng opt-in backend #​570
• linux_raw opt-in backend #​572
• .cargo/config.toml example in the crate-level docs #​591
• getrandom_test_linux_without_fallback configuration flag to test that file fallback
  is not triggered in the linux_android_with_fallback backend #​605
• Built-in support for *-linux-none targets #​618
• Cygwin support #​626

Changed

• Update wasi dependency to v0.14 #​594
• Add #[inline] attribute to the inner functions #​596
• Update WASI and Emscripten links in the crate-level docs #​597
• Do not use dlsym on MUSL targets in the linux_android_with_fallback backend #​602
• Remove linux_android.rs and use getrandom.rs instead #​603
• Always use RtlGenRandom on Windows targets when compiling with pre-1.78 Rust #​610
• Internal representation of the Error type #​614
• Remove windows-targets dependency and use raw-dylib directly #​627

Removed

• Error::INTERNAL_START and Error::CUSTOM_START associated constants #​614

v0.3.1

Compare Source

Fixed

• Build error on Android #​588

v0.3.0

Compare Source

Breaking Changes

Changed

• Bump MSRV to 1.63 #​542
• Rename getrandom and getrandom_uninit functions to fill and fill_uninit respectively #​532

Removed

• wasm32-wasi target support (use wasm32-wasip1 or wasm32-wasip2 instead) #​499
• linux_disable_fallback, rdrand, js, test-in-browser, and custom crate features
  in favor of configuration flags #​504
• register_custom_getrandom! macro #​504
• Implementation of From<NonZeroU32> for Error and Error::code method #​507
• Internet Explorer 11 support #​554
• Target-specific associated Error constants #​562

Changed

• Use ProcessPrng on Windows 10 and up, and use RtlGenRandom on older Windows versions #​415
• Do not use locale-specific strerror_r for retrieving error code descriptions #​440
• Avoid assuming usize is the native word size in the rdrand backend #​442
• Do not read from errno when libc did not indicate error on Solaris #​448
• Switch from libpthread's mutex to futex on Linux and to nanosleep-based wait loop
  on other targets in the use_file backend #​490
• Do not retry on EAGAIN while polling /dev/random on Linux #​522
• Remove separate codepath for Node.js in the wasm_js backend
  (bumps minimum supported Node.js version to v19) #​557
• Use js_namespace in the wasm_js backend #​559

Added

• wasm32-wasip1 and wasm32-wasip2 support #​499
• getrandom_backend configuration flag for selection of opt-in backends #​504
• Error::new_custom method #​507
• rndr opt-in backend #​512
• Automatic MemorySanitizer support #​521 #​571
• u32 and u64 functions for generating random values of the respective type #​544
• wasm32v1-none support in the wasm_js backend #​560
• wasm_js crate feature which allows users to enable the wasm_js opt-in backend #​574

Fixed

• NetBSD fallback code based on KERN_ARND #​555

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/bitwarden-core/Cargo.toml --package getrandom@0.2.17 --precise 0.4.1
    Updating git repository `https://github.com/mozilla/uniffi-rs`
From https://github.com/mozilla/uniffi-rs
 * [new ref]           6d46b3f756dde3213357c477d86771a0fc5da7b4 -> refs/commit/6d46b3f756dde3213357c477d86771a0fc5da7b4
    Updating crates.io index
    Updating git repository `https://github.com/bitwarden/passkey-rs`
From https://github.com/bitwarden/passkey-rs
 * [new ref]         043279e92e2eb5f509bf87eb7fa50987fd377e32 -> refs/commit/043279e92e2eb5f509bf87eb7fa50987fd377e32
error: failed to select a version for `getrandom`.
    ... required by package `bitwarden-core v2.0.0 (/tmp/renovate/repos/github/bitwarden/sdk-internal/crates/bitwarden-core)`
    ... which satisfies path dependency `bitwarden-core` (locked to 2.0.0) of package `bitwarden-commercial-vault v2.0.0 (/tmp/renovate/repos/github/bitwarden/sdk-internal/bitwarden_license/bitwarden-commercial-vault)`
versions that meet the requirements `>=0.2.9, <0.5` (locked to 0.3.4) are: 0.3.4

package `bitwarden-core` depends on `getrandom` with feature `js` but `getrandom` does not have that feature.
 package `getrandom` does have feature `std`


failed to select a version for `getrandom` which could resolve this conflict

[bitwarden-bot]

Internal tracking:

• ID: PM-32313
• Link: https://bitwarden.atlassian.net/browse/PM-32313

[github-actions]

🔍 SDK Breaking Change Detection Results

SDK Version: renovate/getrandom-0.x (bdb5df4)
Completed: 2026-02-16 03:13:16 UTC
Total Time: 244s

Client	Status	Details
typescript	✅ No breaking changes detected	TypeScript compilation passed with new SDK version - View Details

---

Breaking change detection completed. View SDK workflow

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.25%. Comparing base (5072549) to head (bdb5df4).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #765   +/-   ##
=======================================
  Coverage   81.25%   81.25%           
=======================================
  Files         316      316           
  Lines       36369    36369           
=======================================
  Hits        29553    29553           
  Misses       6816     6816           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.