diff --git a/Cargo.lock b/Cargo.lock
index eb39d54e..92c1abf2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1907,7 +1907,7 @@ dependencies = [
  "httpmock",
  "oxide",
  "oxide-httpmock",
- "rand 0.9.2",
+ "rand 0.9.4",
  "tempfile",
  "test-common",
  "tokio",
@@ -2595,7 +2595,7 @@ dependencies = [
  "flume",
  "futures",
  "progenitor-client",
- "rand 0.9.2",
+ "rand 0.9.4",
  "regress 0.11.1",
  "reqwest",
  "schemars",
@@ -2648,7 +2648,7 @@ dependencies = [
  "oxnet",
  "predicates",
  "pretty_assertions",
- "rand 0.9.2",
+ "rand 0.9.4",
  "ratatui 0.30.0",
  "rcgen",
  "reqwest",
@@ -3045,7 +3045,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.4",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.4",
  "ring",
  "rustc-hash",
  "rustls 0.23.36",
@@ -3099,9 +3099,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.5",
@@ -4277,7 +4277,7 @@ name = "test-common"
 version = "0.0.0"
 dependencies = [
  "chrono",
- "rand 0.9.2",
+ "rand 0.9.4",
  "schemars",
  "serde",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index 6dcb9b70..bbc6c67e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -48,7 +48,7 @@ predicates = "3.1.4"
 pretty_assertions = "1.4.1"
 progenitor = { git = "https://github.com/oxidecomputer/progenitor", default-features = false }
 progenitor-client = "0.13.0"
-rand = "0.9.2"
+rand = "0.9.3"
 ratatui = "0.30.0"
 rcgen = { version = "0.14.7", features = ["pem"] }
 regex = "1.12.3"