Bump rand from 0.9 to 0.10 and sha2 from 0.10 to 0.11 (#497)

* Bump rand from 0.9 to 0.10 and sha2 from 0.10 to 0.11

- rand 0.10: Replace `rng.sample(distribution)` with
  `distribution.sample(&mut rng)` (Rng::sample was removed)
- sha2 0.11: finalize() now returns hybrid-array Array which
  doesn't implement LowerHex, use fold with write! instead

* Fix rustfmt formatting

* Use const_hex::encode for sha2 digest formatting

Author: schneems

Cargo.lock

@@ -20,7 +20,7 @@ libherokubuildpack = { version = "0.30", default-features = false, features = [
     "digest",
     "download",
 ] }
-rand = "0.9"
+rand = "0.10"
 # TODO: Consolidate on either the regex crate or the fancy-regex crate, since this repo currently uses both.
 regex = "1"
 serde = "1"

buildpacks/ruby/Cargo.toml

@@ -7,7 +7,7 @@ use libcnb::{
     data::{layer_name, store::Store},
     layer_env::Scope,
 };
-use rand::Rng;
+use rand::distr::{Alphanumeric, Distribution};
 
 // Set default environment values
 pub(crate) fn default_env(
@@ -31,7 +31,7 @@ pub(crate) fn default_env(
             let mut rng = rand::rng();
 
             (0..64)
-                .map(|_| rng.sample(rand::distr::Alphanumeric) as char)
+                .map(|_| Alphanumeric.sample(&mut rng) as char)
                 .collect::<String>()
                 .into()
         })

buildpacks/ruby/src/steps/default_env.rs

@@ -9,6 +9,7 @@ workspace = true
 [dependencies]
 cache_diff.workspace = true
 byte-unit = "5"
+const-hex = "1"
 # TODO: Consolidate on either the regex crate or the fancy-regex crate, since this repo currently uses both.
 fancy-regex = "0.17"
 fs_extra = "1"
@@ -17,7 +18,7 @@ glob = "0.3"
 libcnb = "0.30"
 regex = "1"
 serde = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 tempfile = "3"
 thiserror = "2"
 walkdir = "2"

commons/Cargo.toml

@@ -441,7 +441,7 @@ fn sha_from_env(env: &Env) -> ShaString {
 fn sha_from_string(str: &str) -> ShaString {
     let mut hasher = sha2::Sha256::new();
     hasher.update(str);
-    ShaString(format!("{:x}", hasher.finalize()))
+    ShaString(const_hex::encode(hasher.finalize()))
 }
 
 #[cfg(test)]