diff --git a/Cargo.lock b/Cargo.lock
index 84339b9a9..4e206f45a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1412,7 +1412,7 @@ dependencies = [
  "prio",
  "prometheus",
  "querystrong",
- "rand 0.8.5",
+ "rand 0.9.0",
  "rcgen",
  "regex",
  "rustc_version",
@@ -1475,7 +1475,7 @@ dependencies = [
  "janus_collector",
  "janus_messages",
  "prio",
- "rand 0.8.5",
+ "rand 0.9.0",
  "serde",
  "serde_json",
  "serde_yaml",
@@ -5089,7 +5089,7 @@ dependencies = [
  "fastrand",
  "pretty_assertions",
  "querystrong",
- "rand 0.8.5",
+ "rand 0.9.0",
  "sea-orm",
  "serde",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index 6bbc67f28..365420a65 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -47,7 +47,7 @@ opentelemetry-prometheus = { version = "0.27.0", features = ["prometheus-encodin
 prio = "0.16.7"
 prometheus = "0.13.4"
 querystrong = "0.3.0"
-rand = "0.8.5"
+rand = "0.9.0"
 serde = { version = "1.0.218", features = ["derive"] }
 serde_json = "1.0.139"
 serde_path_to_error = "0.1.16"
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index 58d871d1c..4eb2eaa83 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -44,7 +44,7 @@ env_logger = "0.11.6"
 colored = "3.0.0"
 const_format = "0.2.34"
 hpke-dispatch = { version = "0.7.0", features = ["serde"], optional = true }
-rand = { version = "0.8.5", optional = true }
+rand = { version = "0.9.0", optional = true }
 janus_client = "0.7.30"
 janus_collector = "0.7.21"
 url = "2.5.2"
diff --git a/test-support/Cargo.toml b/test-support/Cargo.toml
index 56a068512..72cf02ec2 100644
--- a/test-support/Cargo.toml
+++ b/test-support/Cargo.toml
@@ -30,7 +30,7 @@ url = "2.5.2"
 uuid = { version = "1.14.0", features = ["v4", "fast-rng", "serde"] }
 sea-orm = { version = "1.0.1", features = ["sqlx-sqlite"] }
 pretty_assertions = "1.4.1"
-rand = "0.8.5"
+rand = "0.9.0"
 base64 = "0.22.1"
 querystrong = "0.3.0"
 test-harness = "0.3.0"