From 4f84e7973cde25b1bbe54a69759887684ed43deb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 7 Jul 2026 19:56:06 +0000
Subject: [PATCH] chore(deps): Bump getrandom from 0.2.17 to 0.4.2 in /turbo

Bumps [getrandom](https://github.com/rust-random/getrandom) from 0.2.17 to 0.4.2.
- [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-random/getrandom/compare/v0.2.17...v0.4.2)

---
updated-dependencies:
- dependency-name: getrandom
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 turbo/Cargo.lock                  | 13 +------------
 turbo/crates/turbo-cli/Cargo.toml |  2 +-
 2 files changed, 2 insertions(+), 13 deletions(-)

diff --git a/turbo/Cargo.lock b/turbo/Cargo.lock
index 67feb404..ce0d153f 100644
--- a/turbo/Cargo.lock
+++ b/turbo/Cargo.lock
@@ -504,17 +504,6 @@ dependencies = [
  "libc",
 ]
 
-[[package]]
-name = "getrandom"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
-dependencies = [
- "cfg-if",
- "libc",
- "wasi",
-]
-
 [[package]]
 name = "getrandom"
 version = "0.3.4"
@@ -1290,7 +1279,7 @@ dependencies = [
  "ariadne",
  "clap",
  "ctrlc",
- "getrandom 0.2.17",
+ "getrandom 0.4.2",
  "libc",
  "notify",
  "notify-debouncer-mini",
diff --git a/turbo/crates/turbo-cli/Cargo.toml b/turbo/crates/turbo-cli/Cargo.toml
index ea2a7560..e7e6f0af 100644
--- a/turbo/crates/turbo-cli/Cargo.toml
+++ b/turbo/crates/turbo-cli/Cargo.toml
@@ -28,7 +28,7 @@ notify = { workspace = true }
 notify-debouncer-mini = { workspace = true }
 ctrlc = { workspace = true }
 libc = { workspace = true }
-getrandom = "0.2"
+getrandom = "0.4"
 tempfile = "3"
 # Already compiled into the binary via turbo-codegen-cranelift; used here to
 # parse the package registry index (registry.rs). Adds no new supply-chain