chore: Bump getrandom to 0.3, rand to 0.9, etc.

Also: ahash, arboard, ashpd, async-io, base64, hermit-abi,
polling, ppv-lite86, quinn, quinn-proto, rand_chacha,
rand_core, reqwest, rfd, ring, tempfile, toml_edit,
webbrowser, webpki-roots, zbus, zerocopy, zopfli, zvariant

Author: torokati44

Cargo.lock

@@ -76,7 +76,7 @@ wasm-bindgen = "=0.2.100"
 walkdir = "2.5.0"
 tokio = "1.45.0"
 # Switching from the `async-std` to the `tokio` runtime, which we depend on anyway.
-rfd = { version = "0.15.2", default-features = false, features = ["tokio", "xdg-portal"] }
+rfd = { version = "0.15.3", default-features = false, features = ["tokio", "xdg-portal"] }
 
 [workspace.lints.rust]
 # Clippy nightly often adds new/buggy lints that we want to ignore.

Cargo.toml

@@ -37,7 +37,7 @@ thiserror = { workspace = true }
 chrono = { workspace = true, features = ["clock"] }
 web-time = "1.1.0"
 encoding_rs = "0.8.35"
-rand = { version = "0.8.5", features = ["std", "small_rng"], default-features = false }
+rand = { version = "0.9.1", features = ["std", "small_rng", "os_rng"], default-features = false }
 serde = { workspace = true }
 serde_json = { version = "1.0", features = ["preserve_order"] }
 nellymoser-rs = { git = "https://github.com/ruffle-rs/nellymoser", rev = "073eb48d907201f46dea0c8feb4e8d9a1d92208c", optional = true }

core/Cargo.toml

@@ -1858,7 +1858,7 @@ impl<'a, 'gc> Activation<'a, 'gc> {
         // The max value is clamped to the range [0, 2^31 - 1).
         let max = self.context.avm1.pop().coerce_to_f64(self)? as i32;
         let result = if max > 0 {
-            self.context.rng.gen_range(0..max)
+            self.context.rng.random_range(0..max)
         } else {
             0
         };

core/src/avm1/activation.rs

@@ -156,7 +156,7 @@ pub fn random<'gc>(
     // See https://github.com/adobe/avmplus/blob/858d034a3bd3a54d9b70909386435cf4aec81d21/core/MathUtils.cpp#L1731C24-L1731C44
     // This generated a restricted set of 'f64' values, which some SWFs implicitly rely on.
     const MAX_VAL: u32 = 0x7FFFFFFF;
-    let rand = activation.context.rng.gen_range(0..MAX_VAL);
+    let rand = activation.context.rng.random_range(0..MAX_VAL);
     Ok(((rand as f64) / (MAX_VAL as f64 + 1f64)).into())
 }
 

core/src/avm1/globals/math.rs

@@ -3,7 +3,7 @@
 use crate::avm2::error::{make_error_2004, Error2004Type};
 use crate::avm2::object::TObject;
 use crate::avm2::{Activation, Error, Value};
-use rand::{rngs::OsRng, RngCore};
+use rand::{rngs::OsRng, TryRngCore};
 
 /// Implements `flash.crypto.generateRandomBytes`
 pub fn generate_random_bytes<'gc>(
@@ -32,7 +32,7 @@ pub fn generate_random_bytes<'gc>(
 
     let mut rng = OsRng {};
 
-    rng.fill_bytes(ba_write.bytes_mut());
+    rng.try_fill_bytes(ba_write.bytes_mut()).unwrap();
 
     Ok(ba.into())
 }

core/src/avm2/globals/flash/crypto.rs

@@ -148,6 +148,6 @@ pub fn random<'gc>(
     // See https://github.com/adobe/avmplus/blob/858d034a3bd3a54d9b70909386435cf4aec81d21/core/MathUtils.cpp#L1731C24-L1731C44
     // This generated a restricted set of 'f64' values, which some SWFs implicitly rely on.
     const MAX_VAL: u32 = 0x7FFFFFFF;
-    let rand = activation.context.rng.gen_range(0..MAX_VAL);
+    let rand = activation.context.rng.random_range(0..MAX_VAL);
     Ok(((rand as f64) / (MAX_VAL as f64 + 1f64)).into())
 }

core/src/avm2/globals/math.rs

@@ -23,13 +23,13 @@ impl LehmerRng {
 
     /// Generate the next value in the sequence via the following formula
     /// X_(k+1) = a * X_k mod m
-    pub fn gen(&mut self) -> u32 {
+    pub fn random(&mut self) -> u32 {
         self.x = ((self.x as u64).overflowing_mul(16_807).0 % 2_147_483_647) as u32;
         self.x
     }
 
-    pub fn gen_range(&mut self, rng: Range<u8>) -> u8 {
-        rng.start + (self.gen() % ((rng.end - rng.start) as u32 + 1)) as u8
+    pub fn random_range(&mut self, rng: Range<u8>) -> u8 {
+        rng.start + (self.random() % ((rng.end - rng.start) as u32 + 1)) as u8
     }
 }
 

core/src/bitmap/bitmap_data.rs

@@ -211,35 +211,35 @@ pub fn noise<'gc>(
     for y in 0..write.height() {
         for x in 0..write.width() {
             let pixel_color = if gray_scale {
-                let gray = rng.gen_range(low..high);
+                let gray = rng.random_range(low..high);
                 let alpha = if channel_options.contains(ChannelOptions::ALPHA) {
-                    rng.gen_range(low..high)
+                    rng.random_range(low..high)
                 } else {
                     255
                 };
 
                 Color::argb(alpha, gray, gray, gray)
             } else {
                 let r = if channel_options.contains(ChannelOptions::RED) {
-                    rng.gen_range(low..high)
+                    rng.random_range(low..high)
                 } else {
                     0
                 };
 
                 let g = if channel_options.contains(ChannelOptions::GREEN) {
-                    rng.gen_range(low..high)
+                    rng.random_range(low..high)
                 } else {
                     0
                 };
 
                 let b = if channel_options.contains(ChannelOptions::BLUE) {
-                    rng.gen_range(low..high)
+                    rng.random_range(low..high)
                 } else {
                     0
                 };
 
                 let a = if channel_options.contains(ChannelOptions::ALPHA) {
-                    rng.gen_range(low..high)
+                    rng.random_range(low..high)
                 } else {
                     255
                 };

core/src/bitmap/operations.rs

@@ -14,15 +14,13 @@ allow = [
     "BSD-2-Clause",
     "BSD-3-Clause",
     "ISC",
-    "Unicode-DFS-2016",
     "Unicode-3.0",
     "MPL-2.0",
     "BSL-1.0",
     "CC0-1.0",
     "OFL-1.1",
-    "LicenseRef-UFL-1.0",
     "Ubuntu-font-1.0",
-    "OpenSSL"
+    "CDLA-Permissive-2.0",
 ]
 
 # Some crates don't have (easily) machine readable licensing information,