diff --git a/Cargo.lock b/Cargo.lock
index d2d181c..17ab90f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -641,7 +641,7 @@ dependencies = [
  "hmac",
  "parking_lot",
  "pin-project",
- "rand",
+ "rand 0.8.5",
  "reqwest 0.12.3",
  "serde",
  "serde_json",
@@ -1079,7 +1079,7 @@ dependencies = [
  "lava-api",
  "lazy_static",
  "masker",
- "rand",
+ "rand 0.9.0",
  "serde",
  "serde_json",
  "serde_yaml",
@@ -1528,8 +1528,19 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
 dependencies = [
  "libc",
- "rand_chacha",
- "rand_core",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3779b94aeb87e8bd4e834cee3650289ee9e0d5677f976ecdb6d219e5f4f6cd94"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.0",
+ "zerocopy",
 ]
 
 [[package]]
@@ -1539,7 +1550,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
 dependencies = [
  "ppv-lite86",
- "rand_core",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.0",
 ]
 
 [[package]]
@@ -1551,6 +1572,16 @@ dependencies = [
  "getrandom 0.2.14",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b08f3c9802962f7e1b25113931d94f43ed9725bebc59db9d0c3e9a23b67e15ff"
+dependencies = [
+ "getrandom 0.3.1",
+ "zerocopy",
+]
+
 [[package]]
 name = "redox_syscall"
 version = "0.4.1"
@@ -2766,6 +2797,26 @@ dependencies = [
  "bitflags 2.5.0",
 ]
 
+[[package]]
+name = "zerocopy"
+version = "0.8.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa91407dacce3a68c56de03abe2760159582b846c6a4acd2f456618087f12713"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06718a168365cad3d5ff0bb133aad346959a2074bd4a85c121255a11304a8626"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.58",
+]
+
 [[package]]
 name = "zeroize"
 version = "1.7.0"
@@ -2805,7 +2856,7 @@ dependencies = [
  "indexmap 2.2.6",
  "lzma-rs",
  "pbkdf2",
- "rand",
+ "rand 0.8.5",
  "sha1",
  "thiserror",
  "time",
diff --git a/Cargo.toml b/Cargo.toml
index 24fe9b0..f1a530b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -26,7 +26,7 @@ junit-parser = "1"
 serde = { version = "^1.0.194", features = ["derive"] }
 serde_json = "1.0.68"
 serde_yaml = "0.9.30"
-rand = "0.8.4"
+rand = "0.9.0"
 tempfile = "3.16.0"
 tokio-util = { version = "0.7", features = [ "io" ] }
 tracing-subscriber = { version = "0.3.9", features = ["env-filter", "json"] }