From 3421912abcebc1cff12f5c3e72aa64776b68a9c4 Mon Sep 17 00:00:00 2001
From: Dmitry Prudnikov <mail@polaz.com>
Date: Mon, 31 Aug 2026 18:06:33 +0300
Subject: [PATCH] build(deps): bump rand to 0.8.8 in the embedded extension

A patch release on the 0.8 line, lock-only: nothing in this crate names
rand directly, it arrives through the engine's dependency graph.

The uv group's proposal alongside it, langsmith 0.7.26 to 0.8.18, has
nothing to apply. The lock already resolves 0.11.2, which the dev tooling
bump brought in ahead of it, so `uv lock --upgrade-package langsmith`
leaves the file unchanged.

Checked rather than assumed: cargo check, clippy and fmt clean, the wheel
rebuilds, and the unit suite passes against it at 131.
---
 coordinode-embedded/Cargo.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/coordinode-embedded/Cargo.lock b/coordinode-embedded/Cargo.lock
index ab3b8fe..398534b 100644
--- a/coordinode-embedded/Cargo.lock
+++ b/coordinode-embedded/Cargo.lock
@@ -1924,7 +1924,7 @@ dependencies = [
  "num-integer",
  "num-iter",
  "num-traits",
- "rand 0.8.5",
+ "rand 0.8.8",
  "smallvec",
  "zeroize",
 ]
@@ -2267,7 +2267,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
 dependencies = [
  "phf_shared",
- "rand 0.8.5",
+ "rand 0.8.8",
 ]
 
 [[package]]
@@ -2571,9 +2571,9 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c"
 dependencies = [
  "rand_chacha",
  "rand_core 0.6.4",