diff --git a/Cargo.lock b/Cargo.lock
index 79d9873b8..39cddf1ab 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -55,7 +55,7 @@ dependencies = [
  "crucible-workspace-hack",
  "futures",
  "futures-core",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.13.2",
  "serde",
  "signal-hook 0.4.3",
@@ -1351,7 +1351,7 @@ dependencies = [
  "oximeter",
  "oximeter-producer",
  "proptest",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rayon",
  "reqwest 0.13.2",
@@ -1559,7 +1559,7 @@ dependencies = [
  "opentelemetry-jaeger",
  "oximeter",
  "oximeter-producer",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rangemap",
  "rayon",
@@ -1650,7 +1650,7 @@ dependencies = [
  "crucible-workspace-hack",
  "opentelemetry 0.31.0",
  "opentelemetry-jaeger",
- "rand 0.9.2",
+ "rand 0.9.3",
  "tokio",
  "tracing-opentelemetry",
  "tracing-subscriber",
@@ -1675,7 +1675,7 @@ dependencies = [
  "futures-core",
  "hex",
  "httptest",
- "rand 0.9.2",
+ "rand 0.9.3",
  "repair-client",
  "reqwest 0.13.2",
  "serde",
@@ -1920,7 +1920,7 @@ dependencies = [
  "phf_shared 0.11.2",
  "portable-atomic",
  "rand 0.8.6",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "regex-automata",
  "regex-syntax",
@@ -2017,7 +2017,7 @@ dependencies = [
  "omicron-common",
  "oximeter",
  "oximeter-producer",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "reedline",
  "repair-client",
@@ -2647,7 +2647,7 @@ dependencies = [
  "expectorate",
  "openapi-lint",
  "openapiv3",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "schemars 0.8.22",
  "semver 1.0.28",
@@ -2862,7 +2862,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b42ec18312c068f0d6008ad66ad2fa289ab40a16d07a06406c200baa09eb1e7c"
 dependencies = [
  "passt",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "serde_json",
 ]
@@ -3156,7 +3156,7 @@ dependencies = [
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
  "progenitor 0.14.0",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.13.2",
  "schemars 0.8.22",
  "serde",
@@ -3294,7 +3294,7 @@ source = "git+https://github.com/oxidecomputer/omicron?rev=5fd53a9c9ff2b0e47bfef
 dependencies = [
  "digest 0.10.7",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -3560,7 +3560,7 @@ dependencies = [
  "idna 1.1.0",
  "ipnet",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "thiserror 2.0.18",
  "tinyvec",
@@ -3603,7 +3603,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand 0.9.2",
+ "rand 0.9.3",
  "resolv-conf",
  "smallvec",
  "thiserror 2.0.18",
@@ -4701,7 +4701,7 @@ dependencies = [
  "crucible",
  "crucible-common",
  "crucible-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "statistical",
  "tokio",
  "uuid",
@@ -5304,7 +5304,7 @@ dependencies = [
  "progenitor-client 0.14.0",
  "progenitor-extras",
  "protocol",
- "rand 0.9.2",
+ "rand 0.9.3",
  "regress 0.10.5",
  "reqwest 0.13.2",
  "schemars 0.8.22",
@@ -5344,7 +5344,7 @@ source = "git+https://github.com/oxidecomputer/omicron?rev=5fd53a9c9ff2b0e47bfef
 dependencies = [
  "argon2",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -6503,7 +6503,7 @@ dependencies = [
  "bit-vec",
  "bitflags 2.11.0",
  "num-traits",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rand_xorshift 0.4.0",
  "regex-syntax",
@@ -6555,7 +6555,7 @@ dependencies = [
  "derive-where",
  "futures",
  "hickory-resolver 0.24.4",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "thiserror 2.0.18",
  "tokio",
@@ -6600,7 +6600,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.1",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash",
  "rustls",
@@ -6678,9 +6678,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "7ec095654a25171c2124e9e3393a930bddbffdc939556c914957a4c3e0a87166"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -9121,7 +9121,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "secrecy",
  "serde",
  "serde_with",
@@ -9159,7 +9159,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_with",
@@ -9198,7 +9198,7 @@ version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ea3136b675547379c4bd395ca6b938e5ad3c3d20fad76e7fe85f9e0d011419c"
 dependencies = [
- "rand 0.9.2",
+ "rand 0.9.3",
 ]
 
 [[package]]