diff --git a/CHANGELOG.md b/CHANGELOG.md
index 62a7e713..873c2443 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,6 @@
 - Enabled calling the `/auth-refresh` endpoint with nonrenewable tokens.
     _When used with nonrenewable tokens (e.g. impersonate) the endpoint will simply return the same token with the up-to-date user data associated with it._
 
-
 - Added the triggered rate rimit rule in the error log `details`.
 
 - Other minor improvements (wrapped the backup restore in a transaction as an extra precaution, updated npm deps, regenerated JSVM docs with the recent tygoja changes, etc.).
diff --git a/tools/security/random_by_regex_test.go b/tools/security/random_by_regex_test.go
index cac7ae10..ac7cef76 100644
--- a/tools/security/random_by_regex_test.go
+++ b/tools/security/random_by_regex_test.go
@@ -26,10 +26,9 @@ func TestRandomStringByRegex(t *testing.T) {
 		{`\d{1,10}`, nil, false},
 		{`\d{3}`, nil, false},
 		{`\d{0,}-abc`, nil, false},
-		{`[a-zA-Z]*`, nil, false},
+		{`[a-zA-Z_]*`, nil, false},
 		{`[^a-zA-Z]{5,30}`, nil, false},
 		{`\w+_abc`, nil, false},
-		{`[a-zA-Z_]*`, nil, false},
 		{`[2-9]{5}-\w+`, nil, false},
 		{`(a|b|c)`, nil, false},
 	}