diff --git a/Cargo.lock b/Cargo.lock
index 62efc4ef..d7620f4a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -844,7 +844,7 @@ dependencies = [
  "pg_escape",
  "postgres-protocol",
  "postgres-types",
- "rand 0.9.2",
+ "rand 0.10.2",
  "recipher 0.1.3",
  "regex",
  "rust_decimal",
@@ -881,7 +881,7 @@ dependencies = [
  "fake 4.2.0",
  "hex",
  "postgres-types",
- "rand 0.9.2",
+ "rand 0.10.2",
  "reqwest",
  "rustls",
  "serde",
@@ -1667,7 +1667,7 @@ dependencies = [
  "chrono",
  "deunicode",
  "dummy 0.11.0",
- "rand 0.9.2",
+ "rand 0.9.5",
 ]
 
 [[package]]
@@ -3210,7 +3210,7 @@ dependencies = [
  "hmac",
  "md-5",
  "memchr",
- "rand 0.9.2",
+ "rand 0.9.5",
  "sha2",
  "stringprep",
 ]
@@ -3348,7 +3348,7 @@ dependencies = [
  "bitflags",
  "lazy_static",
  "num-traits",
- "rand 0.9.2",
+ "rand 0.9.5",
  "rand_chacha 0.9.0",
  "rand_xorshift",
  "regex-syntax",
@@ -3429,7 +3429,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.2",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.5",
  "ring",
  "rustc-hash",
  "rustls",
@@ -3495,9 +3495,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -4308,7 +4308,7 @@ checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 name = "showcase"
 version = "3.0.1"
 dependencies = [
- "rand 0.9.2",
+ "rand 0.10.2",
  "rustls",
  "serde",
  "serde_json",
@@ -4829,7 +4829,7 @@ dependencies = [
  "pin-project-lite",
  "postgres-protocol",
  "postgres-types",
- "rand 0.9.2",
+ "rand 0.9.5",
  "socket2 0.5.8",
  "tokio",
  "tokio-util",
diff --git a/packages/cipherstash-proxy-integration/Cargo.toml b/packages/cipherstash-proxy-integration/Cargo.toml
index 82fe7bf6..eb86b900 100644
--- a/packages/cipherstash-proxy-integration/Cargo.toml
+++ b/packages/cipherstash-proxy-integration/Cargo.toml
@@ -12,7 +12,7 @@ chrono = { version = "0.4.39", features = ["clock"] }
 fake = { version = "4", features = ["chrono", "derive"] }
 hex = "0.4.3"
 postgres-types = { version = "0.2.9", features = ["derive"] }
-rand = "0.9"
+rand = "0.10"
 rustls = { version = "0.23.20", default-features = false, features = ["std"] }
 serde = "1.0"
 serde_json = "1.0"
diff --git a/packages/cipherstash-proxy/Cargo.toml b/packages/cipherstash-proxy/Cargo.toml
index 73dce1b9..babbfd6d 100644
--- a/packages/cipherstash-proxy/Cargo.toml
+++ b/packages/cipherstash-proxy/Cargo.toml
@@ -33,7 +33,7 @@ oid-registry = "0.8"
 pg_escape = "0.1.1"
 postgres-protocol = "0.6.7"
 postgres-types = { version = "0.2.8", features = ["with-serde_json-1"] }
-rand = "0.9"
+rand = "0.10"
 regex = "1.11.1"
 rust_decimal = { version = "1.36.0", default-features = false, features = [
     "db-postgres",
diff --git a/packages/showcase/Cargo.toml b/packages/showcase/Cargo.toml
index 5881d1ad..bf79257c 100644
--- a/packages/showcase/Cargo.toml
+++ b/packages/showcase/Cargo.toml
@@ -18,4 +18,4 @@ tokio-postgres-rustls = "0.13.0"
 rustls = { version = "0.23.20", default-features = false, features = ["std", "aws_lc_rs"] }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true }
-rand = "0.9"
+rand = "0.10"