Used rand 0.8 API (thread_rng/gen_range) so the code works with
whatever version cargo resolves, matching the other unpinned deps.

Assisted-by: Claude Opus 4.6 via pi

diff --git a/Cargo.lock b/Cargo.lock
index 007d55d..d6aaedb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -531,18 +531,6 @@ dependencies = [
  "wasi",
 ]
 
-[[package]]
-name = "getrandom"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi",
- "wasip2",
-]
-
 [[package]]
 name = "getrandom"
 version = "0.4.1"
@@ -902,7 +890,7 @@ dependencies = [
  "num-integer",
  "num-iter",
  "num-traits",
- "rand 0.8.5",
+ "rand",
  "smallvec",
  "zeroize",
 ]
@@ -1118,18 +1106,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
 dependencies = [
  "libc",
- "rand_chacha 0.3.1",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand"
-version = "0.9.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
-dependencies = [
- "rand_chacha 0.9.0",
- "rand_core 0.9.5",
+ "rand_chacha",
+ "rand_core",
 ]
 
 [[package]]
@@ -1139,17 +1117,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
 dependencies = [
  "ppv-lite86",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.9.5",
+ "rand_core",
 ]
 
 [[package]]
@@ -1161,15 +1129,6 @@ dependencies = [
  "getrandom 0.2.17",
 ]
 
-[[package]]
-name = "rand_core"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
-dependencies = [
- "getrandom 0.3.4",
-]
-
 [[package]]
 name = "ranger"
 version = "0.1.0"
@@ -1178,7 +1137,7 @@ dependencies = [
  "assert_cmd",
  "chrono",
  "clap",
- "rand 0.9.2",
+ "rand",
  "serde",
  "serde_json",
  "sqlx",
@@ -1225,7 +1184,7 @@ dependencies = [
  "num-traits",
  "pkcs1",
  "pkcs8",
- "rand_core 0.6.4",
+ "rand_core",
  "signature",
  "spki",
  "subtle",
@@ -1369,7 +1328,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
 dependencies = [
  "digest",
- "rand_core 0.6.4",
+ "rand_core",
 ]
 
 [[package]]
@@ -1530,7 +1489,7 @@ dependencies = [
  "memchr",
  "once_cell",
  "percent-encoding",
- "rand 0.8.5",
+ "rand",
  "rsa",
  "serde",
  "sha1",
@@ -1568,7 +1527,7 @@ dependencies = [
  "md-5",
  "memchr",
  "once_cell",
- "rand 0.8.5",
+ "rand",
  "serde",
  "serde_json",
  "sha2",
diff --git a/Cargo.toml b/Cargo.toml
index 6437243..99dad85 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -11,7 +11,7 @@ path = "src/bin/ranger/main.rs"
 anyhow = "*"
 chrono = { version = "*", features = ["serde"] }
 clap = { version = "*", features = ["derive", "env"] }
-rand = "0.9"
+rand = "*"
 serde = { version = "*", features = ["derive"] }
 serde_json = "*"
 sqlx = { version = "*", features = ["runtime-tokio", "sqlite"] }
diff --git a/src/key.rs b/src/key.rs
index 3dea937..d048554 100644
--- a/src/key.rs
+++ b/src/key.rs
@@ -9,10 +9,10 @@ const ALPHABET: &[char] = &[
 const KEY_LENGTH: usize = 16;
 
 pub fn generate_key() -> String {
-    let mut rng = rand::rng();
+    let mut rng = rand::thread_rng();
     (0..KEY_LENGTH)
         .map(|_| {
-            let idx = rng.random_range(0..ALPHABET.len());
+            let idx = rng.gen_range(0..ALPHABET.len());
             ALPHABET[idx]
         })
         .collect()