diff --git a/Cargo.lock b/Cargo.lock
index 8f202534ab..52359887a3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1067,7 +1067,7 @@ dependencies = [
  "num-bigint-dig",
  "num-traits",
  "quick-xml",
- "rand 0.9.2",
+ "rand 0.9.4",
  "regex",
  "serde",
  "serde_json",
@@ -1099,7 +1099,7 @@ dependencies = [
  "libloading",
  "lru 0.16.3",
  "pkcs11-sys",
- "rand 0.9.2",
+ "rand 0.9.4",
  "thiserror 2.0.17",
  "uuid",
  "zeroize",
@@ -1405,7 +1405,7 @@ dependencies = [
  "p256",
  "pkcs1",
  "pkcs11-sys",
- "rand 0.9.2",
+ "rand 0.9.4",
  "serial_test",
  "strum_macros",
  "thiserror 2.0.17",
@@ -3141,7 +3141,7 @@ dependencies = [
  "native-tls",
  "pem",
  "percent-encoding",
- "rand 0.9.2",
+ "rand 0.9.4",
  "serde",
  "serde_json",
  "socket2 0.5.10",
@@ -3561,7 +3561,7 @@ dependencies = [
  "glob",
  "opentelemetry 0.29.1",
  "percent-encoding",
- "rand 0.9.2",
+ "rand 0.9.4",
  "serde_json",
  "thiserror 2.0.17",
  "tracing",
@@ -3779,7 +3779,7 @@ dependencies = [
  "hmac",
  "md-5",
  "memchr",
- "rand 0.9.2",
+ "rand 0.9.4",
  "sha2",
  "stringprep",
 ]
@@ -3969,9 +3969,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -5020,7 +5020,7 @@ dependencies = [
  "pin-project-lite",
  "postgres-protocol",
  "postgres-types",
- "rand 0.9.2",
+ "rand 0.9.4",
  "socket2 0.6.1",
  "tokio",
  "tokio-util",