diff --git a/Cargo.lock b/Cargo.lock
index 196f7b1..9e6d4ce 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -179,7 +179,7 @@ dependencies = [
  "libc",
  "oximeter",
  "propolis",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "semver 1.0.27",
  "serde",
@@ -937,7 +937,7 @@ dependencies = [
  "anyhow",
  "chrono",
  "oxnet",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_json",
@@ -959,7 +959,7 @@ dependencies = [
  "chrono",
  "oximeter",
  "oxnet",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_json",
@@ -1613,7 +1613,7 @@ dependencies = [
  "oximeter",
  "oximeter-producer",
  "oxnet",
- "rand 0.9.2",
+ "rand 0.9.3",
  "regex",
  "regress",
  "reqwest 0.12.23",
@@ -1673,7 +1673,7 @@ dependencies = [
  "pcap",
  "pretty_assertions",
  "progenitor 0.13.0",
- "rand 0.9.2",
+ "rand 0.9.3",
  "regress",
  "reqwest 0.13.2",
  "schemars 0.8.22",
@@ -2279,7 +2279,7 @@ dependencies = [
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
  "progenitor 0.10.0",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.12.23",
  "schemars 0.8.22",
  "serde",
@@ -2389,7 +2389,7 @@ source = "git+https://github.com/oxidecomputer/omicron?branch=main#8e30605f52172
 dependencies = [
  "digest",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -2647,7 +2647,7 @@ dependencies = [
  "idna",
  "ipnet",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "thiserror 2.0.18",
  "tinyvec",
@@ -2690,7 +2690,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand 0.9.2",
+ "rand 0.9.3",
  "resolv-conf",
  "smallvec",
  "thiserror 2.0.18",
@@ -3525,7 +3525,7 @@ dependencies = [
  "nvpair 0.5.0",
  "nvpair-sys",
  "oxnet",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rusty-doors",
  "socket2 0.6.0",
  "thiserror 2.0.18",
@@ -3547,7 +3547,7 @@ dependencies = [
  "nvpair 0.5.0",
  "nvpair-sys",
  "oxnet",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rusty-doors",
  "socket2 0.6.0",
  "thiserror 2.0.18",
@@ -4289,7 +4289,7 @@ dependencies = [
  "parse-display",
  "progenitor-client 0.10.0",
  "protocol",
- "rand 0.9.2",
+ "rand 0.9.3",
  "regress",
  "reqwest 0.12.23",
  "schemars 0.8.22",
@@ -4314,7 +4314,7 @@ source = "git+https://github.com/oxidecomputer/omicron?branch=main#8e30605f52172
 dependencies = [
  "argon2",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -4793,7 +4793,7 @@ dependencies = [
  "bytes",
  "common 0.1.0",
  "hex-literal",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_json",
@@ -5441,7 +5441,7 @@ dependencies = [
  "p9ds",
  "pin-project-lite",
  "propolis_types 0.0.0 (git+https://github.com/oxidecomputer/propolis)",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rfb",
  "rgb_frame",
  "serde",
@@ -5500,7 +5500,7 @@ dependencies = [
  "bitflags 2.9.4",
  "lazy_static",
  "num-traits",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rand_xorshift",
  "regex-syntax",
@@ -5564,7 +5564,7 @@ dependencies = [
  "derive-where",
  "futures",
  "hickory-resolver 0.24.4",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "thiserror 2.0.18",
  "tokio",
@@ -5608,7 +5608,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.3",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash",
  "rustls 0.23.32",
@@ -5668,9 +5668,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "7ec095654a25171c2124e9e3393a930bddbffdc939556c914957a4c3e0a87166"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -7280,7 +7280,7 @@ dependencies = [
  "oxnet",
  "packet",
  "pcap",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "signal-hook",
@@ -7911,7 +7911,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "secrecy",
  "serde",
  "serde_with",
@@ -7948,7 +7948,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_human_bytes",