fix(ci): repair post-merge dependency breakage

Author: ericflo

Cargo.lock

@@ -20,7 +20,7 @@ reqwest = { workspace = true }
 tower = "0.5"
 tower-http = { version = "0.6", features = ["fs", "trace"] }
 sqlx = { workspace = true }
-tower-sessions = "0.15"
+tower-sessions = "0.14"
 tower-sessions-sqlx-store = { version = "0.15", features = ["postgres"] }
 uuid = { version = "1", features = ["v4", "serde"] }
 chrono = { workspace = true }

crates/modelrelay-cloud/Cargo.toml

@@ -4,7 +4,7 @@ use axum::body::Bytes;
 use axum::extract::State;
 use axum::http::{HeaderMap, StatusCode};
 use axum::response::IntoResponse;
-use hmac::{Hmac, Mac};
+use hmac::{Hmac, KeyInit, Mac};
 use sha2::Sha256;
 use sqlx::PgPool;
 
@@ -384,6 +384,7 @@ async fn handle_payment_failed(pool: &PgPool, payload: &serde_json::Value) -> Re
 #[cfg(test)]
 mod tests {
     use super::*;
+    use hmac::KeyInit;
 
     /// Helper: compute the real HMAC-SHA256 hex digest for `"{timestamp}.{payload}"`.
     fn compute_sig(secret: &str, timestamp: &str, payload: &[u8]) -> String {

crates/modelrelay-cloud/src/routes/webhook.rs

@@ -3,7 +3,7 @@ use std::fmt;
 use std::sync::Arc;
 use std::time::SystemTime;
 
-use rand::Rng;
+use rand::RngExt;
 use sha2::{Digest, Sha256};
 use tokio::sync::RwLock;