diff --git a/Cargo.lock b/Cargo.lock
index 6459bbba..671f12a8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -864,7 +864,7 @@ dependencies = [
  "postgres-protocol",
  "postgres-types",
  "proptest",
- "rand 0.9.2",
+ "rand 0.10.2",
  "recipher 0.1.3",
  "regex",
  "rust_decimal",
@@ -912,7 +912,7 @@ dependencies = [
  "fake 4.2.0",
  "hex",
  "postgres-types",
- "rand 0.9.2",
+ "rand 0.10.2",
  "reqwest",
  "rustls",
  "serde",
@@ -1721,7 +1721,7 @@ dependencies = [
  "chrono",
  "deunicode",
  "dummy 0.11.0",
- "rand 0.9.2",
+ "rand 0.9.5",
 ]
 
 [[package]]
@@ -3437,7 +3437,7 @@ dependencies = [
  "bitflags",
  "lazy_static",
  "num-traits",
- "rand 0.9.2",
+ "rand 0.9.5",
  "rand_chacha 0.9.0",
  "rand_xorshift",
  "regex-syntax",
@@ -3526,7 +3526,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.2",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.5",
  "ring",
  "rustc-hash",
  "rustls",
@@ -3601,9 +3601,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -4452,7 +4452,7 @@ version = "3.0.1"
 dependencies = [
  "cipherstash-client",
  "cipherstash-config",
- "rand 0.9.2",
+ "rand 0.10.2",
  "rustls",
  "serde",
  "serde_json",
@@ -4797,7 +4797,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0136791f7c95b1f6dd99f9cc786b91bb81c3800b639b3478e561ddb7be95e5f1"
 dependencies = [
  "fastrand",
- "getrandom 0.3.2",
+ "getrandom 0.4.2",
  "once_cell",
  "rustix 1.1.3",
  "windows-sys 0.52.0",
@@ -4986,7 +4986,7 @@ dependencies = [
  "pin-project-lite",
  "postgres-protocol",
  "postgres-types",
- "rand 0.9.2",
+ "rand 0.9.5",
  "socket2 0.5.8",
  "tokio",
  "tokio-util",
diff --git a/packages/cipherstash-proxy-integration/Cargo.toml b/packages/cipherstash-proxy-integration/Cargo.toml
index 82fe7bf6..eb86b900 100644
--- a/packages/cipherstash-proxy-integration/Cargo.toml
+++ b/packages/cipherstash-proxy-integration/Cargo.toml
@@ -12,7 +12,7 @@ chrono = { version = "0.4.39", features = ["clock"] }
 fake = { version = "4", features = ["chrono", "derive"] }
 hex = "0.4.3"
 postgres-types = { version = "0.2.9", features = ["derive"] }
-rand = "0.9"
+rand = "0.10"
 rustls = { version = "0.23.20", default-features = false, features = ["std"] }
 serde = "1.0"
 serde_json = "1.0"
diff --git a/packages/cipherstash-proxy/Cargo.toml b/packages/cipherstash-proxy/Cargo.toml
index 99cbcfe4..35466901 100644
--- a/packages/cipherstash-proxy/Cargo.toml
+++ b/packages/cipherstash-proxy/Cargo.toml
@@ -31,7 +31,7 @@ moka = { version = "0.12", features = ["future"] }
 pg-proto = "0.12.0"
 postgres-protocol = "0.6.7"
 postgres-types = { version = "0.2.8", features = ["with-serde_json-1"] }
-rand = "0.9"
+rand = "0.10"
 regex = "1.11.1"
 rust_decimal = { version = "1.36.0", default-features = false, features = [
     "db-postgres",
diff --git a/packages/showcase/Cargo.toml b/packages/showcase/Cargo.toml
index d8a7f124..c5b62efe 100644
--- a/packages/showcase/Cargo.toml
+++ b/packages/showcase/Cargo.toml
@@ -20,4 +20,4 @@ tokio-postgres-rustls = "0.13.0"
 rustls = { version = "0.23.20", default-features = false, features = ["std", "aws_lc_rs"] }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true }
-rand = "0.9"
+rand = "0.10"