Prepare 0.17.13 (#596)

* Update getrandom and CHANGELOG

* Update GH Actions deps

* Update rand to 0.10 and delete feature no longer needed

* v0.17.13

* nit

Author: brycx

.github/workflows/workflow_audit.yml

@@ -26,15 +26,15 @@ jobs:
           persist-credentials: false
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b
 
       - name: Run zizmor 🌈
         run: uvx zizmor --persona=auditor --format sarif . > results.sarif 
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89
+        uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2
         with:
           sarif_file: results.sarif
           category: zizmor

CHANGELOG.md

@@ -1,3 +1,12 @@
+### 0.17.13
+
+**Date:** February 23, 2026.
+
+**Changelog:**
+- Make memory zeroization an optional feature (enabled by default - equivalent to before the change) ([#592](https://github.com/orion-rs/orion/pull/592), credits: [@achimcc](https://github.com/achimcc)).
+- Update `getrandom` to `0.4.1`.
+- Update `rand` (dev-dependency) to `0.10`.
+
 ### 0.17.12
 
 **Date:** January 8, 2026.

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "orion"
-version = "0.17.12"
+version = "0.17.13"
 authors = ["brycx <brycx@protonmail.com>"]
 description = "Usable, easy and safe pure-Rust crypto"
 keywords = ["cryptography", "crypto", "aead", "pqc", "kem"]
@@ -17,7 +17,7 @@ exclude = [".gitignore", ".travis.yml", "tests/*"]
 subtle = { version = "^2.2.2", default-features = false }
 zeroize = { version = "1.1.0", optional = true, default-features = false }
 fiat-crypto = { version = "0.3.0", default-features = false }
-getrandom = { version = "0.3.0", optional = true }
+getrandom = { version = "0.4.1", optional = true }
 ct-codecs = { version = "1.1.1", optional = true }
 
 [dependencies.serde]
@@ -41,7 +41,7 @@ serde = { version = "1.0", features = ["derive"] }
 quickcheck = "1"
 quickcheck_macros = "1"
 criterion = "0.8.1"
-rand = { version = "0.9.0", features = ["thread_rng", "small_rng"] }
+rand = { version = "0.10.0", features = ["thread_rng"] }
 num-rational = { version = "0.4.2", default-features = false }
 
 [[bench]]

src/test_framework/hpke_interface.rs

@@ -22,7 +22,7 @@
 
 use crate::errors::UnknownCryptoError;
 use core::ops::Range;
-use rand::{rngs::SmallRng, Rng, SeedableRng};
+use rand::{rngs::SmallRng, Rng, RngExt, SeedableRng};
 
 /// A testable HPKE implementation. This is implemented separately for each HPKE mode.
 pub trait TestableHpke: Clone {