chore(libdd-data-pipeline): solve cargo deny [APMSP-3884]

LICENSE-3rdparty.csv

@@ -418,6 +418,7 @@ sval_ref,https://github.com/sval-rs/sval,Apache-2.0 OR MIT,Ashley Mannix <ashley
 sval_serde,https://github.com/sval-rs/sval,Apache-2.0 OR MIT,Ashley Mannix <ashleymannix@live.com.au>
 symbolic-common,https://github.com/getsentry/symbolic,MIT,"Armin Ronacher <armin.ronacher@active-4.com>, Jan Michael Auer <mail@jauer.org>"
 symbolic-demangle,https://github.com/getsentry/symbolic,MIT,"Armin Ronacher <armin.ronacher@active-4.com>, Jan Michael Auer <mail@jauer.org>"
+symlink,https://gitlab.com/chris-morgan/symlink,MIT OR Apache-2.0,Chris Morgan <me@chrismorgan.info>
 syn,https://github.com/dtolnay/syn,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 sync_wrapper,https://github.com/Actyx/sync_wrapper,Apache-2.0,Actyx AG <developer@actyx.io>
 synstructure,https://github.com/mystor/synstructure,MIT,Nika Layzell <nika@thelayzells.com>

datadog-sidecar/Cargo.toml

@@ -42,7 +42,7 @@ http-body-util = "0.1"
 datadog-ipc = { path = "../datadog-ipc", features = ["tiny-bytes"] }
 datadog-ipc-macros = { path = "../datadog-ipc-macros" }
 
-rand = "0.8.3"
+rand = ">=0.8.6, <0.9"
 rmp-serde = "1.3.0"
 serde = { version = "1.0", features = ["derive", "rc"] }
 serde_with = "3.6.0"

deny.toml

@@ -1,5 +1,8 @@
 [advisories]
 unmaintained = "workspace"
+ignore = [
+  { id = "RUSTSEC-2026-0009", reason = "the fixed version requires rust >=1.88.0. TODO: remove this after bumping MSRV"}
+]
 
 [bans]
 multiple-versions = "warn"

libdd-common/Cargo.toml

@@ -27,7 +27,7 @@ mime = { version = "0.3.16", optional = true }
 multer = { version = "3.1", optional = true }
 bytes = { version = "1.11.1" }
 pin-project = "1"
-rand = { version = "0.8", optional = true }
+rand = { version = ">=0.8.6, <0.9", optional = true }
 regex = "1.5"
 regex-lite = { version = "0.1", optional = true }
 # Use hickory-dns instead of the default system DNS resolver to avoid fork safety issues.
@@ -85,7 +85,7 @@ maplit = "1.0"
 mime = "0.3.16"
 multer = "3.1"
 bytes = "1.11.1"
-rand = "0.8"
+rand = ">=0.8.6, <0.9"
 tempfile.workspace = true
 tokio = { version = "1.23", features = ["rt", "macros", "time"] }
 

libdd-crashtracker/Cargo.toml

@@ -61,7 +61,7 @@ num-traits = "0.2.19"
 os_info = "3.14.0"
 page_size = "0.6.0"
 portable-atomic = { version = "1.6.0", features = ["serde"] }
-rand = "0.8.5"
+rand = ">=0.8.6, <0.9"
 schemars = "0.8.21"
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true, features = ["std"] }

libdd-data-pipeline/Cargo.toml

@@ -77,7 +77,7 @@ libdd-trace-utils = { path = "../libdd-trace-utils", features = [
 ] }
 httpmock = "0.8.0-alpha.1"
 prost = "0.14.1"
-rand = "0.8.5"
+rand = ">=0.8.6, <0.9"
 tempfile.workspace = true
 tokio = { version = "1.23", features = [
     "rt",

libdd-ddsketch/Cargo.toml

@@ -20,7 +20,7 @@ protoc-bin-vendored = { workspace = true, optional = true }
 
 [dev-dependencies]
 criterion.workspace = true
-rand = "0.8.5"
+rand = ">=0.8.6, <0.9"
 rand_chacha = "0.3.1"
 
 [features]

libdd-library-config/Cargo.toml

@@ -25,7 +25,7 @@ serde = { workspace = true, features = ["derive"] }
 serde_yaml = "0.9.34"
 prost = "0.14.1"
 anyhow.workspace = true
-rand = "0.8.3"
+rand = ">=0.8.6, <0.9"
 rmp = "0.8.14"
 rmp-serde = "1.3.0"
 

libdd-profiling/Cargo.toml

@@ -47,7 +47,7 @@ libdd-profiling-protobuf = { version = "2.0.0", path = "../libdd-profiling-proto
 mime = "0.3.16"
 parking_lot = { version = "0.12", default-features = false }
 prost = "0.14.1"
-rand = "0.8"
+rand = ">=0.8.6, <0.9"
 # Use rustls to align with the rest of the workspace (libdd-common, libdd-telemetry, etc.)
 # Non-FIPS builds use ring as the crypto provider; FIPS builds use aws-lc-rs.
 # Use hickory-dns instead of the default system DNS resolver to avoid fork safety issues.

libdd-trace-normalization/Cargo.toml

@@ -21,7 +21,7 @@ arbitrary = { version = "1.3", features = ["derive"], optional = true }
 fuzzing = ["arbitrary"]
 
 [dev-dependencies]
-rand = "0.8.5"
+rand = ">=0.8.6, <0.9"
 duplicate = "0.4.1"
 criterion.workspace = true
 

libdd-trace-stats/Cargo.toml

@@ -48,7 +48,7 @@ path = "benches/main.rs"
 criterion.workspace = true
 httpmock = "0.8.0-alpha.1"
 libdd-trace-utils = { path = "../libdd-trace-utils", features = ["test-utils"] }
-rand = "0.8.5"
+rand = ">=0.8.6, <0.9"
 tokio = { version = "1.23", features = ["rt-multi-thread", "macros", "test-util", "time"], default-features = false }
 
 [features]

libdd-trace-utils/Cargo.toml

@@ -40,7 +40,7 @@ serde_json = { workspace = true, features = ["std"] }
 serde-transcode = "1.1"
 futures.workspace = true
 tokio = { workspace = true, features = ["macros"] }
-rand = "0.8.5"
+rand = ">=0.8.6, <0.9"
 bytes = "1.11.1"
 rmpv = { version = "1.3.0", default-features = false }
 rmp = { version = "0.8.14", default-features = false }