diff --git a/Cargo.lock b/Cargo.lock
index 8e77938e4..fa514fb45 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -55,7 +55,7 @@ dependencies = [
  "crucible-workspace-hack",
  "futures",
  "futures-core",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.13.2",
  "serde",
  "signal-hook 0.4.3",
@@ -1346,7 +1346,7 @@ dependencies = [
  "oximeter",
  "oximeter-producer",
  "proptest",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rayon",
  "reqwest 0.13.2",
@@ -1554,7 +1554,7 @@ dependencies = [
  "opentelemetry-jaeger",
  "oximeter",
  "oximeter-producer",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rangemap",
  "rayon",
@@ -1645,7 +1645,7 @@ dependencies = [
  "crucible-workspace-hack",
  "opentelemetry 0.31.0",
  "opentelemetry-jaeger",
- "rand 0.9.2",
+ "rand 0.9.3",
  "tokio",
  "tracing-opentelemetry",
  "tracing-subscriber",
@@ -1670,7 +1670,7 @@ dependencies = [
  "futures-core",
  "hex",
  "httptest",
- "rand 0.9.2",
+ "rand 0.9.3",
  "repair-client",
  "reqwest 0.13.2",
  "serde",
@@ -1917,7 +1917,7 @@ dependencies = [
  "phf_shared 0.11.2",
  "portable-atomic",
  "rand 0.8.6",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "regex",
  "regex-automata",
@@ -2014,7 +2014,7 @@ dependencies = [
  "omicron-common",
  "oximeter",
  "oximeter-producer",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "reedline",
  "repair-client",
@@ -2575,7 +2575,7 @@ dependencies = [
  "expectorate",
  "openapi-lint",
  "openapiv3",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "schemars 0.8.22",
  "semver 1.0.28",
@@ -2790,7 +2790,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b42ec18312c068f0d6008ad66ad2fa289ab40a16d07a06406c200baa09eb1e7c"
 dependencies = [
  "passt",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "serde_json",
 ]
@@ -3084,7 +3084,7 @@ dependencies = [
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
  "progenitor 0.14.0",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.13.2",
  "schemars 0.8.22",
  "serde",
@@ -3222,7 +3222,7 @@ source = "git+https://github.com/oxidecomputer/omicron?rev=5fd53a9c9ff2b0e47bfef
 dependencies = [
  "digest",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -3486,7 +3486,7 @@ dependencies = [
  "idna 1.1.0",
  "ipnet",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "thiserror 2.0.18",
  "tinyvec",
@@ -3529,7 +3529,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand 0.9.2",
+ "rand 0.9.3",
  "resolv-conf",
  "smallvec",
  "thiserror 2.0.18",
@@ -4613,7 +4613,7 @@ dependencies = [
  "crucible",
  "crucible-common",
  "crucible-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "statistical",
  "tokio",
  "uuid",
@@ -5216,7 +5216,7 @@ dependencies = [
  "progenitor-client 0.14.0",
  "progenitor-extras",
  "protocol",
- "rand 0.9.2",
+ "rand 0.9.3",
  "regress 0.10.5",
  "reqwest 0.13.2",
  "schemars 0.8.22",
@@ -5256,7 +5256,7 @@ source = "git+https://github.com/oxidecomputer/omicron?rev=5fd53a9c9ff2b0e47bfef
 dependencies = [
  "argon2",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -6406,7 +6406,7 @@ dependencies = [
  "bit-vec",
  "bitflags 2.11.0",
  "num-traits",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rand_xorshift 0.4.0",
  "regex-syntax",
@@ -6458,7 +6458,7 @@ dependencies = [
  "derive-where",
  "futures",
  "hickory-resolver 0.24.4",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "thiserror 2.0.18",
  "tokio",
@@ -6503,7 +6503,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.1",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash 2.1.1",
  "rustls 0.23.31",
@@ -6581,9 +6581,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "7ec095654a25171c2124e9e3393a930bddbffdc939556c914957a4c3e0a87166"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -8430,7 +8430,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "82a72c767771b47409d2345987fda8628641887d5466101319899796367354a0"
 dependencies = [
  "fastrand",
- "getrandom 0.3.1",
+ "getrandom 0.4.1",
  "once_cell",
  "rustix 1.1.4",
  "windows-sys 0.52.0",
@@ -9086,7 +9086,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "secrecy",
  "serde",
  "serde_with",
@@ -9124,7 +9124,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_with",
@@ -9163,7 +9163,7 @@ version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ea3136b675547379c4bd395ca6b938e5ad3c3d20fad76e7fe85f9e0d011419c"
 dependencies = [
- "rand 0.9.2",
+ "rand 0.9.3",
 ]
 
 [[package]]