diff --git a/Cargo.lock b/Cargo.lock
index b2927d83..0fa685ed 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -878,7 +878,7 @@ dependencies = [
  "futures",
  "jsonwebtoken",
  "mockito",
- "rand 0.8.6",
+ "rand 0.9.4",
  "reqwest",
  "rsa",
  "serde",
diff --git a/builtins/plugins/identity-jwt/Cargo.toml b/builtins/plugins/identity-jwt/Cargo.toml
index 7fd1a54b..85ef5bf1 100644
--- a/builtins/plugins/identity-jwt/Cargo.toml
+++ b/builtins/plugins/identity-jwt/Cargo.toml
@@ -90,7 +90,7 @@ rsa = { version = "0.9", features = ["pem"] }
 # satisfies that. Pinned to 0.8: rsa 0.9 (latest stable) depends on
 # rand_core 0.6, which rand 0.9 (rand_core 0.9) no longer implements,
 # so the two are incompatible until rsa 0.10 ships. Test-only dep.
-rand = "0.8"
+rand = "0.9"
 
 [lints]
 workspace = true