docs: fix CHANGELOG conflict marker and document rand security fix

Inspect CHANGELOG.md and docs/dependencies.md, starting with the [Unreleased] section and the existing dependency graph and per-file changelog table. Done means the stale conflict marker is gone, the rand security update and RUSTSEC-2026-0097 are documented, rand and its sub-crates appear under transitive dev dependencies, and the date and version label are updated.

[!CAUTION]
Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: CHANGELOG.md

Summary

Two documentation issues found after the fix(security): update rand to 0.9.3 (RUSTSEC-2026-0097) commit:

1. Leftover merge conflict marker in CHANGELOG.md

A >>>>>>> 28aebca (feat(release): adopt attested delivery pipeline) conflict marker was left unresolved in the [Unreleased] section. Removed.

2. Security fix not recorded in changelog or dependency reference

The rand crate was updated (transitively via proptest) to remediate [RUSTSEC-2026-0097]((rustsec.org/redacted), but no changelog entry existed.

Changes

• CHANGELOG.md: Remove stale >>>>>>> conflict marker; add ### Security entry for rand 0.9.4 / RUSTSEC-2026-0097.
• docs/dependencies.md:
  • Add rand under a new Transitive Dev Dependencies section (pulled in by proptest).
  • Expand dependency graph to show rand and its sub-crates under proptest.
  • Add a row to the per-file changelog table for the 2026-06-12 security update.
  • Update Last Updated date and version label.

Generated by Update Docs · 336.6 AIC · ⌖ 14.5 AIC · ⊞ 34.9K · ◷

gh aw add githubnext/agentics/workflows/update-docs.md@adea00ee5830135f24022f1000d706c7f5fa24c4

[!NOTE]
This was originally intended as a pull request, but the git push operation failed.

Workflow Run: View run details and download bundle artifact

The bundle file is available in the agent artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 27437146327 -n agent -D /tmp/agent-27437146327

# Fetch the bundle into a temporary ref, then update the local branch
git fetch /tmp/agent-27437146327/aw-docs-fix-changelog-and-dependencies-rand-security.bundle refs/heads/docs/fix-changelog-and-dependencies-rand-security:refs/bundles/create-pr-docs-fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76-bce9c7df
git update-ref refs/heads/docs/fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76 refs/bundles/create-pr-docs-fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76-bce9c7df
git checkout docs/fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76
# Ensure the working tree matches the updated branch
git reset --hard
# Remove the temporary bundle ref
git update-ref -d refs/bundles/create-pr-docs-fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76-bce9c7df

# Push the branch to origin
git push origin docs/fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76

# Create the pull request
gh pr create --title 'docs: fix CHANGELOG conflict marker and document rand security fix' --base main --head docs/fix-changelog-and-dependencies-rand-security-ddbbe41eb0af1a76 --repo zircote/adrscope