Merge pull request #643 from supabase/rs/bump-rand

fix: bump rand to a minimum version of 0.8.6 to fix a dependabot alert

Author: imor