refactor: update dependencies and code for latest ecosystem changes

- Update many dependencies to latest versions across all crates
- Switch from `once_cell::OnceCell` to `std::sync::OnceLock` where appropriate
- Update OAuth to use stateful `reqwest` for HTTP requests
- Fix Rodio backend to honor the requested sample format

Author: roderickvd

Cargo.lock

@@ -56,14 +56,25 @@ version = "0.6.0-dev"
 
 [dependencies]
 data-encoding = "2.5"
-env_logger =  { version = "0.11.2", default-features = false, features = ["color", "humantime", "auto-color"] }
+env_logger = { version = "0.11.2", default-features = false, features = [
+    "color",
+    "humantime",
+    "auto-color",
+] }
 futures-util = { version = "0.3", default-features = false }
 getopts = "0.2"
 log = "0.4"
 sha1 = "0.10"
-sysinfo = { version = "0.33.0", default-features = false, features = ["system"] }
-thiserror = "2.0"
-tokio = { version = "1.40", features = ["rt", "macros", "signal", "sync", "parking_lot", "process"] }
+sysinfo = { version = "0.37", default-features = false, features = ["system"] }
+thiserror = "2"
+tokio = { version = "1", features = [
+    "rt",
+    "macros",
+    "signal",
+    "sync",
+    "parking_lot",
+    "process",
+] }
 url = "2.2"
 
 [features]
@@ -97,9 +108,21 @@ available in the official library."""
 section = "sound"
 priority = "optional"
 assets = [
-    ["target/release/librespot", "usr/bin/", "755"],
-    ["contrib/librespot.service", "lib/systemd/system/", "644"],
-    ["contrib/librespot.user.service", "lib/systemd/user/", "644"]
+    [
+        "target/release/librespot",
+        "usr/bin/",
+        "755",
+    ],
+    [
+        "contrib/librespot.service",
+        "lib/systemd/system/",
+        "644",
+    ],
+    [
+        "contrib/librespot.user.service",
+        "lib/systemd/user/",
+        "644",
+    ],
 ]
 
 [workspace.package]

Cargo.toml

@@ -17,11 +17,11 @@ aes = "0.8"
 bytes = "1"
 ctr = "0.9"
 futures-util = "0.3"
-hyper = { version = "1.3", features = [] }
+hyper = "1.6"
 hyper-util = { version = "0.1", features = ["client"] }
-http-body-util = "0.1.1"
+http-body-util = "0.1"
 log = "0.4"
 parking_lot = { version = "0.12", features = ["deadlock_detection"] }
 tempfile = "3"
-thiserror = "2.0"
+thiserror = "2"
 tokio = { version = "1", features = ["macros", "parking_lot", "sync"] }

audio/Cargo.toml

@@ -11,13 +11,13 @@ edition = "2021"
 [dependencies]
 futures-util = "0.3"
 log = "0.4"
-protobuf = "3.5"
-rand = { version = "0.8", default-features = false, features = ["small_rng"] }
+protobuf = "3.7"
+rand = { version = "0.9", default-features = false, features = ["small_rng"] }
 serde_json = "1.0"
-thiserror = "2.0"
+thiserror = "2"
 tokio = { version = "1", features = ["macros", "parking_lot", "sync"] }
 tokio-stream = "0.1"
-uuid = { version = "1.11.0", features = ["v4"] }
+uuid = { version = "1.18", features = ["v4"] }
 
 [dependencies.librespot-core]
 path = "../core"

connect/Cargo.toml

@@ -58,7 +58,7 @@ impl<T> ShuffleVec<T> {
         let indices: Vec<_> = {
             (1..self.vec.len())
                 .rev()
-                .map(|i| rng.gen_range(0..i + 1))
+                .map(|i| rng.random_range(0..i + 1))
                 .collect()
         };
 
@@ -89,7 +89,7 @@ mod test {
 
     #[test]
     fn test_shuffle_with_seed() {
-        let seed = rand::thread_rng().gen_range(0..10000000000000);
+        let seed = rand::rng().random_range(0..10000000000000);
 
         let vec = (0..100).collect::<Vec<_>>();
         let base_vec: ShuffleVec<i32> = vec.into();

connect/src/shuffle_vec.rs

@@ -68,8 +68,8 @@ impl ConnectState {
         // we don't need to include the current track, because it is already being played
         ctx.skip_track = current_track;
 
-        let seed = seed
-            .unwrap_or_else(|| rand::thread_rng().gen_range(100_000_000_000..1_000_000_000_000));
+        let seed =
+            seed.unwrap_or_else(|| rand::rng().random_range(100_000_000_000..1_000_000_000_000));
 
         ctx.tracks.shuffle_with_seed(seed);
         ctx.set_shuffle_seed(seed);

connect/src/state/options.rs

@@ -69,7 +69,7 @@ impl<'ct> ConnectState {
 
     pub fn set_current_track_random(&mut self) -> Result<(), Error> {
         let max_tracks = self.get_context(self.active_context)?.tracks.len();
-        let rng_track = rand::thread_rng().gen_range(0..max_tracks);
+        let rng_track = rand::rng().random_range(0..max_tracks);
         self.set_current_track(rng_track)
     }
 

connect/src/state/tracks.rs

@@ -20,64 +20,104 @@ version = "0.6.0-dev"
 [dependencies]
 aes = "0.8"
 base64 = "0.22"
-byteorder = "1.4"
+byteorder = "1.5"
 bytes = "1"
-form_urlencoded = "1.0"
+form_urlencoded = "1.2"
 futures-core = "0.3"
-futures-util = { version = "0.3", features = ["alloc", "bilock", "sink", "unstable"] }
-governor = { version = "0.8", default-features = false, features = ["std", "jitter"] }
+futures-util = { version = "0.3", features = [
+    "alloc",
+    "bilock",
+    "sink",
+    "unstable",
+] }
+governor = { version = "0.10", default-features = false, features = [
+    "std",
+    "jitter",
+] }
 hmac = "0.12"
-httparse = "1.7"
-http = "1.0"
-hyper = { version = "1.3", features = ["http1", "http2"] }
+httparse = "1.10"
+http = "1.3"
+hyper = { version = "1.6", features = ["http1", "http2"] }
 hyper-util = { version = "0.1", features = ["client"] }
-http-body-util = "0.1.1"
+http-body-util = "0.1"
 log = "0.4"
 nonzero_ext = "0.3"
-num-bigint = { version = "0.4", features = ["rand"] }
+num-bigint = "0.4"
 num-derive = "0.4"
 num-integer = "0.1"
 num-traits = "0.2"
-once_cell = "1"
 parking_lot = { version = "0.12", features = ["deadlock_detection"] }
 pbkdf2 = { version = "0.12", default-features = false, features = ["hmac"] }
 pin-project-lite = "0.2"
-priority-queue = "2.0"
-protobuf = "3.5"
-quick-xml = { version = "0.37.1", features = ["serialize"] }
-rand = "0.8"
-rsa = "0.9.2"
+priority-queue = "2.5"
+protobuf = "3.7"
+quick-xml = { version = "0.38", features = ["serialize"] }
+rand = "0.9"
+rsa = "0.9"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 sha1 = { version = "0.10", features = ["oid"] }
 shannon = "0.2"
-sysinfo = { version = "0.33.0", default-features = false, features = ["system"] }
-thiserror = "2.0"
+sysinfo = { version = "0.37", default-features = false, features = ["system"] }
+thiserror = "2"
 time = { version = "0.3", features = ["formatting", "parsing"] }
-tokio = { version = "1", features = ["io-util", "macros", "net", "parking_lot", "rt", "sync", "time"] }
+tokio = { version = "1", features = [
+    "io-util",
+    "macros",
+    "net",
+    "parking_lot",
+    "rt",
+    "sync",
+    "time",
+] }
 tokio-stream = "0.1"
 tokio-util = { version = "0.7", features = ["codec"] }
 url = "2"
-uuid = { version = "1", default-features = false, features = ["fast-rng", "v4"] }
-data-encoding = "2.5"
-flate2 = "1.0.33"
-protobuf-json-mapping = "3.5"
+uuid = { version = "1", default-features = false, features = ["v4"] }
+data-encoding = "2.9"
+flate2 = "1.1"
+protobuf-json-mapping = "3.7"
 
 # Eventually, this should use rustls-platform-verifier to unify the platform-specific dependencies
 # but currently, hyper-proxy2 and tokio-tungstenite do not support it.
 [target.'cfg(any(target_os = "windows", target_os = "macos", target_os = "linux"))'.dependencies]
-hyper-proxy2 = { version = "0.1", default-features = false, features = ["rustls"] }
-hyper-rustls = { version = "0.27.2", default-features = false, features = ["aws-lc-rs", "http1", "logging", "tls12", "native-tokio", "http2"] }
-tokio-tungstenite = { version = "0.24", default-features = false, features = ["rustls-tls-native-roots"] }
+hyper-proxy2 = { version = "0.1", default-features = false, features = [
+    "rustls",
+] }
+hyper-rustls = { version = "0.27", default-features = false, features = [
+    "aws-lc-rs",
+    "http1",
+    "logging",
+    "tls12",
+    "native-tokio",
+    "http2",
+] }
+tokio-tungstenite = { version = "0.27", default-features = false, features = [
+    "rustls-tls-native-roots",
+] }
 
 [target.'cfg(not(any(target_os = "windows", target_os = "macos", target_os = "linux")))'.dependencies]
-hyper-proxy2 = { version = "0.1", default-features = false, features = ["rustls-webpki"] }
-hyper-rustls = { version = "0.27.2", default-features = false, features = ["aws-lc-rs", "http1", "logging", "tls12", "webpki-tokio", "http2"] }
-tokio-tungstenite = { version = "0.24", default-features = false, features = ["rustls-tls-webpki-roots"] }
+hyper-proxy2 = { version = "0.1", default-features = false, features = [
+    "rustls-webpki",
+] }
+hyper-rustls = { version = "0.27", default-features = false, features = [
+    "aws-lc-rs",
+    "http1",
+    "logging",
+    "tls12",
+    "webpki-tokio",
+    "http2",
+] }
+tokio-tungstenite = { version = "0.27", default-features = false, features = [
+    "rustls-tls-webpki-roots",
+] }
 
 [build-dependencies]
-rand = "0.8"
-vergen-gitcl = { version = "1.0.0", default-features = false, features = ["build"] }
+rand = "0.9"
+rand_distr = "0.5"
+vergen-gitcl = { version = "1.0", default-features = false, features = [
+    "build",
+] }
 
 [dev-dependencies]
 tokio = { version = "1", features = ["macros", "parking_lot"] }

core/Cargo.toml

@@ -1,4 +1,5 @@
-use rand::{distributions::Alphanumeric, Rng};
+use rand::Rng;
+use rand_distr::Alphanumeric;
 use vergen_gitcl::{BuildBuilder, Emitter, GitclBuilder};
 
 fn main() -> Result<(), Box<dyn std::error::Error>> {
@@ -18,7 +19,7 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
         .expect("Unable to generate the cargo keys!");
     let build_id = match std::env::var("SOURCE_DATE_EPOCH") {
         Ok(val) => val,
-        Err(_) => rand::thread_rng()
+        Err(_) => rand::rng()
             .sample_iter(Alphanumeric)
             .take(8)
             .map(char::from)

core/build.rs

@@ -3,7 +3,7 @@ use std::{env::consts::ARCH, io};
 use byteorder::{BigEndian, ByteOrder, WriteBytesExt};
 use hmac::{Hmac, Mac};
 use protobuf::Message;
-use rand::{thread_rng, RngCore};
+use rand::RngCore;
 use rsa::{BigUint, Pkcs1v15Sign, RsaPublicKey};
 use sha1::{Digest, Sha1};
 use thiserror::Error;
@@ -49,7 +49,7 @@ pub enum HandshakeError {
 pub async fn handshake<T: AsyncRead + AsyncWrite + Unpin>(
     mut connection: T,
 ) -> io::Result<Framed<T, ApCodec>> {
-    let local_keys = DhLocalKeys::random(&mut thread_rng());
+    let local_keys = DhLocalKeys::random(&mut rand::rng());
     let gc = local_keys.public_key();
     let mut accumulator = client_hello(&mut connection, gc).await?;
     let message: APResponseMessage = recv_packet(&mut connection, &mut accumulator).await?;
@@ -108,7 +108,7 @@ where
     T: AsyncWrite + Unpin,
 {
     let mut client_nonce = vec![0; 0x10];
-    thread_rng().fill_bytes(&mut client_nonce);
+    rand::rng().fill_bytes(&mut client_nonce);
 
     let platform = match crate::config::OS {
         "freebsd" | "netbsd" | "openbsd" => match ARCH {