diff --git a/Cargo.lock b/Cargo.lock
index 5e9c425..5c289d5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2729,7 +2729,7 @@ dependencies = [
  "base64",
  "keyring",
  "pgp",
- "rand 0.8.6",
+ "rand 0.9.4",
  "reqwest",
  "serde",
  "sha1",
diff --git a/crates/inbx-pgp/Cargo.toml b/crates/inbx-pgp/Cargo.toml
index abdf230..4e93b94 100644
--- a/crates/inbx-pgp/Cargo.toml
+++ b/crates/inbx-pgp/Cargo.toml
@@ -19,7 +19,7 @@ async-trait.workspace = true
 pgp.workspace = true
 which.workspace = true
 tempfile.workspace = true
-rand = "0.8"
+rand = "0.9"
 smallvec = "1"
 base64.workspace = true
 sha1.workspace = true