Changed jitter logic that used java.util.Random to use java.security.SecureRandom. Even though in this case it is not being used for any cryptographic purpose, but only to produce a pseudo-random delay, static analysis tools may still report every use of java.util.Random as a security risk by default. The purpose of this change is simply to avoid such warnings; it has no practical effect on the behavior of the library.
[1.11.3] - 2022-08-22
Changed:
java.util.Randomto usejava.security.SecureRandom. Even though in this case it is not being used for any cryptographic purpose, but only to produce a pseudo-random delay, static analysis tools may still report every use ofjava.util.Randomas a security risk by default. The purpose of this change is simply to avoid such warnings; it has no practical effect on the behavior of the library.