diff --git a/Cargo.lock b/Cargo.lock
index e36af316..f2699621 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2477,7 +2477,7 @@ dependencies = [
  "num-integer",
  "num-iter",
  "num-traits",
- "rand 0.8.5",
+ "rand 0.8.6",
  "smallvec",
  "zeroize",
 ]
@@ -2562,7 +2562,7 @@ dependencies = [
  "chrono",
  "getrandom 0.2.17",
  "http 0.2.12",
- "rand 0.8.5",
+ "rand 0.8.6",
  "reqwest 0.11.27",
  "serde",
  "serde_json",
@@ -3076,9 +3076,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "libc",
  "rand_chacha 0.3.1",
@@ -3426,7 +3426,7 @@ dependencies = [
  "borsh",
  "bytes",
  "num-traits",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rkyv",
  "serde",
  "serde_json",
@@ -3987,7 +3987,7 @@ dependencies = [
  "nvml-wrapper",
  "once_cell",
  "portable-pty",
- "rand 0.8.5",
+ "rand 0.9.4",
  "regex",
  "reqwest 0.12.28",
  "rustls 0.23.37",
@@ -4048,7 +4048,7 @@ dependencies = [
  "mime_guess",
  "oauth2",
  "once_cell",
- "rand 0.8.5",
+ "rand 0.9.4",
  "regex",
  "reqwest 0.12.28",
  "rust-embed",
@@ -4352,7 +4352,7 @@ dependencies = [
  "memchr",
  "once_cell",
  "percent-encoding",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rsa",
  "rust_decimal",
  "serde",
@@ -4396,7 +4396,7 @@ dependencies = [
  "memchr",
  "num-bigint",
  "once_cell",
- "rand 0.8.5",
+ "rand 0.8.6",
  "rust_decimal",
  "serde",
  "serde_json",
@@ -5104,7 +5104,7 @@ dependencies = [
  "futures-util",
  "once_cell",
  "radix_trie",
- "rand 0.8.5",
+ "rand 0.8.6",
  "thiserror 1.0.69",
  "tokio",
  "tracing",
@@ -5127,7 +5127,7 @@ dependencies = [
  "idna 0.4.0",
  "ipnet",
  "once_cell",
- "rand 0.8.5",
+ "rand 0.8.6",
  "smallvec",
  "thiserror 1.0.69",
  "tinyvec",
diff --git a/crates/agent/Cargo.toml b/crates/agent/Cargo.toml
index 0c0a43b8..d3492638 100644
--- a/crates/agent/Cargo.toml
+++ b/crates/agent/Cargo.toml
@@ -23,7 +23,7 @@ figment = { version = "0.10", features = ["toml", "env"] }
 reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "json"] }
 futures-util = "0.3"
 url = "2"
-rand = "0.8"
+rand = "0.9"
 portable-pty = "0.8"
 base64 = "0.22"
 sha2 = "0.10"
diff --git a/crates/server/Cargo.toml b/crates/server/Cargo.toml
index 996f8919..e1ef1554 100644
--- a/crates/server/Cargo.toml
+++ b/crates/server/Cargo.toml
@@ -23,7 +23,7 @@ sea-orm = { version = "1", features = ["sqlx-sqlite", "runtime-tokio-rustls", "m
 sea-orm-migration = { version = "1", features = ["sqlx-sqlite", "runtime-tokio-rustls"] }
 sqlx = { version = "0.8", default-features = false, features = ["sqlite", "runtime-tokio-rustls"] }
 argon2 = "0.5"
-rand = "0.8"
+rand = "0.9"
 base64 = "0.22"
 dashmap = "6"
 dns-lookup = "2"