From 8b1ec594d9b96d67734bf925b844f52fde426d59 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 8 Nov 2026 19:44:04 +0000
Subject: [PATCH] build(deps): bump getrandom from 0.3.4 to 0.4.2

Bumps [getrandom](https://github.com/rust-random/getrandom) from 0.3.4 to 0.4.2.
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/getrandom/compare/v0.3.4...v0.4.2)

---
updated-dependencies:
- dependency-name: getrandom
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 2 +-
 Cargo.toml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index d8e77536..d567d889 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -793,7 +793,7 @@ dependencies = [
  "clap",
  "encoding_rs",
  "flate2",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
  "hmac",
  "httparse",
  "hwp-convert",
diff --git a/Cargo.toml b/Cargo.toml
index 7def70ec..412ad635 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -38,7 +38,7 @@ sha2 = "0.11"
 # GATE-01) — already pulled in via zip's AES-encrypted-archive support, so the
 # dependency graph does not grow.
 aes = "0.9.1"
-getrandom = "0.3"
+getrandom = "0.4"
 pulldown-cmark = { version = "0.13.6", default-features = false }
 # `hwp serve` HTTP adapter (issue #312, decision record in doc 22 §4) — a
 # synchronous thread model, so no tokio. httparse owns request-head parsing