updated TestRandomStringByRegex to avoid collisions

CHANGELOG.md

@@ -3,7 +3,6 @@
 - Enabled calling the `/auth-refresh` endpoint with nonrenewable tokens.
     _When used with nonrenewable tokens (e.g. impersonate) the endpoint will simply return the same token with the up-to-date user data associated with it._
 
-
 - Added the triggered rate rimit rule in the error log `details`.
 
 - Other minor improvements (wrapped the backup restore in a transaction as an extra precaution, updated npm deps, regenerated JSVM docs with the recent tygoja changes, etc.).

tools/security/random_by_regex_test.go

@@ -26,10 +26,9 @@ func TestRandomStringByRegex(t *testing.T) {
 		{`\d{1,10}`, nil, false},
 		{`\d{3}`, nil, false},
 		{`\d{0,}-abc`, nil, false},
-		{`[a-zA-Z]*`, nil, false},
+		{`[a-zA-Z_]*`, nil, false},
 		{`[^a-zA-Z]{5,30}`, nil, false},
 		{`\w+_abc`, nil, false},
-		{`[a-zA-Z_]*`, nil, false},
 		{`[2-9]{5}-\w+`, nil, false},
 		{`(a|b|c)`, nil, false},
 	}