diff --git a/Cargo.lock b/Cargo.lock
index b29a2f460..1c55bda5a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -55,7 +55,7 @@ dependencies = [
  "crucible-workspace-hack",
  "futures",
  "futures-core",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.13.2",
  "serde",
  "signal-hook 0.4.3",
@@ -1311,7 +1311,7 @@ dependencies = [
  "oximeter",
  "oximeter-producer",
  "proptest",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rayon",
  "reqwest 0.13.2",
@@ -1519,7 +1519,7 @@ dependencies = [
  "opentelemetry-jaeger",
  "oximeter",
  "oximeter-producer",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rangemap",
  "rayon",
@@ -1610,7 +1610,7 @@ dependencies = [
  "crucible-workspace-hack",
  "opentelemetry 0.31.0",
  "opentelemetry-jaeger",
- "rand 0.9.2",
+ "rand 0.9.3",
  "tokio",
  "tracing-opentelemetry",
  "tracing-subscriber",
@@ -1635,7 +1635,7 @@ dependencies = [
  "futures-core",
  "hex",
  "httptest",
- "rand 0.9.2",
+ "rand 0.9.3",
  "repair-client",
  "reqwest 0.13.2",
  "serde",
@@ -1879,7 +1879,7 @@ dependencies = [
  "phf_shared 0.11.2",
  "portable-atomic",
  "rand 0.8.6",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "regex-automata",
  "regex-syntax",
@@ -1976,7 +1976,7 @@ dependencies = [
  "omicron-common",
  "oximeter",
  "oximeter-producer",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "reedline",
  "repair-client",
@@ -2557,7 +2557,7 @@ dependencies = [
  "expectorate",
  "openapi-lint",
  "openapiv3",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "schemars 0.8.22",
  "semver 1.0.28",
@@ -2772,7 +2772,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b42ec18312c068f0d6008ad66ad2fa289ab40a16d07a06406c200baa09eb1e7c"
 dependencies = [
  "passt",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "serde_json",
 ]
@@ -3066,7 +3066,7 @@ dependencies = [
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
  "progenitor 0.14.0",
- "rand 0.9.2",
+ "rand 0.9.3",
  "reqwest 0.13.2",
  "schemars 0.8.22",
  "serde",
@@ -3204,7 +3204,7 @@ source = "git+https://github.com/oxidecomputer/omicron?rev=5fd53a9c9ff2b0e47bfef
 dependencies = [
  "digest 0.10.7",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -3468,7 +3468,7 @@ dependencies = [
  "idna 1.1.0",
  "ipnet",
  "once_cell",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "thiserror 2.0.18",
  "tinyvec",
@@ -3511,7 +3511,7 @@ dependencies = [
  "moka",
  "once_cell",
  "parking_lot",
- "rand 0.9.2",
+ "rand 0.9.3",
  "resolv-conf",
  "smallvec",
  "thiserror 2.0.18",
@@ -4578,7 +4578,7 @@ dependencies = [
  "crucible",
  "crucible-common",
  "crucible-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "statistical",
  "tokio",
  "uuid",
@@ -5181,7 +5181,7 @@ dependencies = [
  "progenitor-client 0.14.0",
  "progenitor-extras",
  "protocol",
- "rand 0.9.2",
+ "rand 0.9.3",
  "regress 0.10.5",
  "reqwest 0.13.2",
  "schemars 0.8.22",
@@ -5221,7 +5221,7 @@ source = "git+https://github.com/oxidecomputer/omicron?rev=5fd53a9c9ff2b0e47bfef
 dependencies = [
  "argon2",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "secrecy",
  "serde",
@@ -6380,7 +6380,7 @@ dependencies = [
  "bit-vec",
  "bitflags 2.11.0",
  "num-traits",
- "rand 0.9.2",
+ "rand 0.9.3",
  "rand_chacha 0.9.0",
  "rand_xorshift 0.4.0",
  "regex-syntax",
@@ -6432,7 +6432,7 @@ dependencies = [
  "derive-where",
  "futures",
  "hickory-resolver 0.24.4",
- "rand 0.9.2",
+ "rand 0.9.3",
  "serde",
  "thiserror 2.0.18",
  "tokio",
@@ -6477,7 +6477,7 @@ dependencies = [
  "bytes",
  "getrandom 0.3.1",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.9.3",
  "ring",
  "rustc-hash",
  "rustls",
@@ -6555,9 +6555,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.9.2"
+version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+checksum = "7ec095654a25171c2124e9e3393a930bddbffdc939556c914957a4c3e0a87166"
 dependencies = [
  "rand_chacha 0.9.0",
  "rand_core 0.9.3",
@@ -8966,7 +8966,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "secrecy",
  "serde",
  "serde_with",
@@ -9004,7 +9004,7 @@ dependencies = [
  "iddqd",
  "omicron-uuid-kinds",
  "omicron-workspace-hack",
- "rand 0.9.2",
+ "rand 0.9.3",
  "schemars 0.8.22",
  "serde",
  "serde_with",
@@ -9043,7 +9043,7 @@ version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ea3136b675547379c4bd395ca6b938e5ad3c3d20fad76e7fe85f9e0d011419c"
 dependencies = [
- "rand 0.9.2",
+ "rand 0.9.3",
 ]
 
 [[package]]