diff --git a/Cargo.lock b/Cargo.lock
index f888bf4..3d974c9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -155,7 +155,7 @@ dependencies = [
  "ndarray-rand",
  "policy-oracle",
  "proptest",
- "rand 0.9.5",
+ "rand 0.10.2",
  "serde",
  "serde_json",
  "thiserror 2.0.19",
@@ -224,6 +224,17 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "chrono"
 version = "0.4.45"
@@ -519,7 +530,7 @@ dependencies = [
  "ndarray",
  "ndarray-rand",
  "proptest",
- "rand 0.9.5",
+ "rand 0.10.2",
  "rand_distr 0.6.0",
  "rayon",
  "serde",
@@ -705,6 +716,7 @@ dependencies = [
  "cfg-if",
  "libc",
  "r-efi 6.0.0",
+ "rand_core 0.10.1",
  "wasip2",
  "wasip3",
 ]
@@ -1252,7 +1264,7 @@ dependencies = [
  "ndarray",
  "ndarray-rand",
  "proptest",
- "rand 0.9.5",
+ "rand 0.10.2",
  "rand_distr 0.6.0",
  "rayon",
  "serde",
@@ -1669,6 +1681,7 @@ version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
 dependencies = [
+ "chacha20",
  "getrandom 0.4.2",
  "rand_core 0.10.1",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index ddc4c7c..c568cb5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -29,7 +29,7 @@ ndarray-rand = "0.16"
 # ndarray-rand's). Revert until ndarray-rand ships a rand-0.10-compatible release.
 # NB: dependabot re-bumped this to 0.10 in #175 (build re-broke); reverted again
 # here. Consider a dependabot ignore for rand until ndarray-rand catches up.
-rand = "0.9"
+rand = "0.10"
 rand_distr = "0.6"
 rayon = "1.12"