From c4b4dcd04d6d10c88e237d7d346d97c9ef7df72f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 00:44:43 +0000
Subject: [PATCH] chore(deps): bump getrandom from 0.3.4 to 0.4.2

Bumps [getrandom](https://github.com/rust-random/getrandom) from 0.3.4 to 0.4.2.
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/getrandom/compare/v0.3.4...v0.4.2)

---
updated-dependencies:
- dependency-name: getrandom
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                 | 6 +++---
 src/attestation/Cargo.toml | 2 +-
 src/lib/Cargo.toml         | 2 +-
 src/verify-core/Cargo.toml | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index ab62c22..554bd6b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4671,7 +4671,7 @@ dependencies = [
  "ct-codecs",
  "ecdsa",
  "ed25519-compact",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
  "hex",
  "hmac-sha256",
  "keyring",
@@ -4718,7 +4718,7 @@ dependencies = [
  "chrono",
  "ct-codecs",
  "ed25519-compact",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
  "hex",
  "in_toto_attestation",
  "serde",
@@ -4753,7 +4753,7 @@ version = "0.9.3"
 dependencies = [
  "ct-codecs",
  "ed25519-compact",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
  "hmac-sha256",
  "log",
  "thiserror 2.0.17",
diff --git a/src/attestation/Cargo.toml b/src/attestation/Cargo.toml
index 6e70c53..11c0848 100644
--- a/src/attestation/Cargo.toml
+++ b/src/attestation/Cargo.toml
@@ -18,7 +18,7 @@ serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 chrono = { version = "0.4", default-features = false, features = ["std", "clock"] }
 hex = "0.4"
-getrandom = "0.3"
+getrandom = "0.4"
 sha2 = "0.10"  # Proper SHA-256 for artifact hashing
 base64 = "0.22"  # DSSE envelope encoding
 
diff --git a/src/lib/Cargo.toml b/src/lib/Cargo.toml
index fcf7cc4..7b2b841 100644
--- a/src/lib/Cargo.toml
+++ b/src/lib/Cargo.toml
@@ -20,7 +20,7 @@ wsc-attestation = { version = "0.9.3", path = "../attestation" }
 anyhow = "1.0.100"
 ct-codecs = "1.1.6"
 ed25519-compact = { version = "2.1.1", features = ["pem"] }
-getrandom = { version = "0.3.4", features = ["wasm_js"] }
+getrandom = { version = "0.4.2", features = ["wasm_js"] }
 hmac-sha256 = "1.1.12"
 log = "0.4.28"
 # Structured audit logging
diff --git a/src/verify-core/Cargo.toml b/src/verify-core/Cargo.toml
index 1fe4a18..c9fc3e2 100644
--- a/src/verify-core/Cargo.toml
+++ b/src/verify-core/Cargo.toml
@@ -14,7 +14,7 @@ categories = ["cryptography", "wasm", "no-std"]
 [dependencies]
 ct-codecs = "1.1.6"
 ed25519-compact = { version = "2.1.1", features = ["pem"] }
-getrandom = { version = "0.3.4", features = ["wasm_js"] }
+getrandom = { version = "0.4.2", features = ["wasm_js"] }
 hmac-sha256 = "1.1.12"
 log = "0.4.28"
 thiserror = "2.0.17"