chore(deps): Update rand and friends to version 0.10

[matheus23]

Description

Updates the rand dependency to version 0.10.
As part of that, this also updates rand_core, rand_chacha, and a bunch of cryptography crates like curve25519-dalek, ed25519-dalek, digest, sha1 and sha2. Some of the latter ones to prerelease versions to enable compilation.

Breaking Changes

• rand is updated to version 0.10, so the CryptoRng trait used in the public interface of e.g. SecretKey::generate has changed.

Notes & open questions

This is still draft, because
cargo tree -i rand@0.9 -e normal still shows quite a few libraries that haven't upgraded yet:

rand v0.9.2
├── fastbloom v0.14.1
│   └── iroh-quinn-proto v0.15.1
│       ├── iroh v0.96.1 (/home/philipp/program/work/iroh/iroh)
│       │   └── iroh-bench v0.96.1 (/home/philipp/program/work/iroh/iroh/bench)
│       ├── iroh-quinn v0.16.1
│       │   ├── iroh v0.96.1 (/home/philipp/program/work/iroh/iroh) (*)
│       │   ├── iroh-bench v0.96.1 (/home/philipp/program/work/iroh/iroh/bench)
│       │   └── iroh-relay v0.96.1 (/home/philipp/program/work/iroh/iroh-relay)
│       │       └── iroh v0.96.1 (/home/philipp/program/work/iroh/iroh) (*)
│       └── iroh-relay v0.96.1 (/home/philipp/program/work/iroh/iroh-relay) (*)
├── governor v0.10.4
│   ├── iroh-dns-server v0.96.1 (/home/philipp/program/work/iroh/iroh-dns-server)
│   └── tower_governor v0.8.0
│       └── iroh-dns-server v0.96.1 (/home/philipp/program/work/iroh/iroh-dns-server)
├── hickory-proto v0.25.2
│   ├── hickory-resolver v0.25.2
│   │   ├── iroh v0.96.1 (/home/philipp/program/work/iroh/iroh) (*)
│   │   └── iroh-relay v0.96.1 (/home/philipp/program/work/iroh/iroh-relay) (*)
│   └── hickory-server v0.25.2
│       └── iroh-dns-server v0.96.1 (/home/philipp/program/work/iroh/iroh-dns-server)
├── hickory-resolver v0.25.2 (*)
├── igd-next v0.16.2
│   ├── iroh v0.96.1 (/home/philipp/program/work/iroh/iroh) (*)
│   └── portmapper v0.14.0
│       └── iroh v0.96.1 (/home/philipp/program/work/iroh/iroh) (*)
├── iroh-quinn-proto v0.15.1 (*)
├── portmapper v0.14.0 (*)
└── tokio-websockets v0.12.3
    └── iroh-relay v0.96.1 (/home/philipp/program/work/iroh/iroh-relay) (*)

We should probably wait for them to catch up to avoid putting two rands in all of our user's dependency trees.

Change checklist

• Self-review.
• Documentation updates following the style guide, if relevant.
• Tests if relevant.
• All breaking changes documented.
  • List all breaking changes in the above "Breaking Changes" section.
  • Open an issue or PR on any number0 repos that are affected by this breaking change. Give guidance on how the updates should be handled or do the actual updates themselves. The major ones are:
    • quic-rpc
    • iroh-gossip
    • iroh-blobs
    • dumbpipe
    • sendme

[github-actions]

Documentation for this PR has been generated and is available at: https://n0-computer.github.io/iroh/pr/3922/docs/iroh/

Last updated: 2026-02-10T11:03:48Z

[dignifiedquire]

wasm failures, your favorite

[matheus23]

@dignifiedquire did you intentionally close this? And if so, why? 😅