chore(deps): bump rand_dev from 0.1.1 to 0.3.0

[dependabot]

Bumps rand_dev from 0.1.1 to 0.3.0.

Changelog

Sourced from rand_dev's changelog.

v0.3.0

• BREAKING: update rand_core dep to latest v0.10. Replace the optional rand-v09 feature and re-export with rand-v10

See #5

v0.2.0

• BREAKING: update rand_core dep to latest v0.9
• POSSIBLY BREAKING: the seed is now printed to stderr instead of stdout
• Replace dependency on hex with better-maintained const-hex v1
• Add optional feature rand-v09: when it's enabled, library re-exports rand v0.9 that will be accessible as rand_dev::rand
• Improve CI workflow

See #4

Commits

• e70224a Merge pull request #5 from maurges/main
• 6319b1b Review suggestions + workflow fixes
• ab06a8d Update to rand 0.10. Bump major version
• 8f1c0aa Merge pull request #4 from survived/update-rand
• 6665d5c Update changelog
• d273be8 Print the seed to stderr instead of stdout
• 9c8d6f1 Parellize CI workflows
• 1bd48b0 Add an optional feature rand-v09 that re-exports rand crate
• 764b372 Replace hex dep with better maintained const-hex
• 6298fda Update CI workflow
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[tangletools]

✅ Auto-approved PR — 963e2a67

Blanket team auto-approval is enabled for this reviewer service.
The full PR reviewer audit still runs separately and will publish findings if it detects issues.

_{tangletools · auto-approval · reason: blanket_auto_approve · 2026-06-15T12:10:09Z}

[tangletools]

🟢 Value Audit — sound

Verdict	sound
Concerns	0 (none)
Heuristic	0.0s
Duplication	0.0s
Interrogation	900.8s (2 bridge agents)
Total	900.8s

No concerns — sound change, no better or existing approach found. ✅

---

What this audit checks

It judges the change on its merits — not whether it was tasked out in an issue. Unticketed, fast-moving work is fine; the question is whether the change is good and whether a better or existing approach should be used instead.

Pass	What it asks
Heuristic	Vague title? Whitespace-only or cruft-bearing diff? (content signals only)
Duplication	Do added function/class names already exist elsewhere in the repo?
Value Audit	What does it do? What goal does it achieve? Is it good? Better architecture or already-exists?
Usefulness Audit	Does it integrate and fit? Will it hold up in real use and actually get used?

Findings are concerns, not blocks — the human reviewer decides what to do with them.

_{value-audit · 20260615T123422Z}

[tangletools]

❌ Needs Work — 963e2a67

Readiness 57/100 · Confidence 70/100 · 2 findings (1 critical, 1 low)

glm: Correctness 57 · Security 57 · Testing 57 · Architecture 57

Full multi-shot audit completed 2/2 planned shots over 3 changed files. Global verifier still owns final merge decision.

Blocking

🟣 CRITICAL rand_dev 0.3 bump breaks round-based test compilation (split rand_core trait) — crates/networking/extensions/round-based/Cargo.toml

Line 59 rand_dev = "0.3". Verified failure: cargo check --tests -p blueprint-networking-round-based-extension emits 12x error[E0277]: the trait bound DevRng: RngCore is not satisfied, failing compilation of test target rand_protocol. Call sites: tests/rand_protocol.rs:222,239,336,346 construct rand_dev::DevRng::new() and pass it into protocol_of_random_generation<R> (tests/rand_protocol.rs:46) whose bound at line 54 is R: rand::RngCore. The workspace rand is 0.8.6 (rand_core 0.6.4)

Other

🟡 LOW agg-sig-gossip declares rand_dev dev-dep but never uses it — crates/networking/extensions/agg-sig-gossip/Cargo.toml

Line 56 rand_dev = "0.3". grep for rand_dev/DevRng across crates/networking/extensions/agg-sig-gossip/ returns zero source references; the crate compiles with or without this line. Not introduced by this PR (was already unused at 0.1), but the bump perpetuates a dead dev-dependency. Optional cleanup: drop the line entirely. No compile/runtime impact.

---

_{tangletools · 2026-06-15T12:34:24Z · trace}

[tangletools]

❌ 1 Blocking Finding — 963e2a67

Full multi-shot audit completed 2/2 planned shots over 3 changed files. Global verifier still owns final merge decision.

Full immutable report for this review: trace

Summary comment for this run: full summary

---

_{tangletools · 2026-06-15T12:34:24Z · immutable trace}