diff --git a/Cargo.lock b/Cargo.lock
index 92f69b33..ebfb69b7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -625,7 +625,7 @@ dependencies = [
  "base64",
  "buffr-modal",
  "buffr-permissions",
- "getrandom 0.2.17",
+ "getrandom 0.4.2",
  "raw-window-handle",
  "serde",
  "serde_json",
diff --git a/crates/buffr-engine/Cargo.toml b/crates/buffr-engine/Cargo.toml
index b772609f..f954a087 100644
--- a/crates/buffr-engine/Cargo.toml
+++ b/crates/buffr-engine/Cargo.toml
@@ -12,7 +12,7 @@ publish.workspace = true
 
 [dependencies]
 base64 = "0.22"
-getrandom = "0.2"
+getrandom = "0.4"
 # raw-window-handle 0.6 lets backends accept a host wl_surface for native
 # subsurface compositing (Phase 3 of the WPE WebKit umbrella, #109). Type-
 # only crate; no transitive runtime weight.