diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 0b8fb98..76a15d3 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -330,7 +330,7 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "beanfun"
-version = "5.9.3"
+version = "5.9.4"
 dependencies = [
  "aes",
  "anyhow",
@@ -350,7 +350,7 @@ dependencies = [
  "percent-encoding",
  "pretty_assertions",
  "quick-xml 0.37.5",
- "rand 0.8.5",
+ "rand 0.9.4",
  "regex",
  "reqwest 0.12.28",
  "reqwest_cookie_store",
@@ -3066,7 +3066,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5d5285893bb5eb82e6aaf5d59ee909a06a16737a8970984dd7746ba9283498d6"
 dependencies = [
  "phf_shared 0.10.0",
- "rand 0.8.5",
+ "rand 0.8.6",
 ]
 
 [[package]]
@@ -3076,7 +3076,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
 dependencies = [
  "phf_shared 0.11.3",
- "rand 0.8.5",
+ "rand 0.8.6",
 ]
 
 [[package]]
@@ -3473,9 +3473,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "libc",
  "rand_chacha 0.3.1",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 3ccba94..b91085a 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -130,7 +130,7 @@ nrbf = "0.2"
 zeroize = { version = "1", features = ["derive"] }
 
 # Random number generation (storage entropy salt — OsRng only; CSPRNG)
-rand = "0.8"
+rand = "0.9"
 
 [target.'cfg(windows)'.dependencies]
 # Win32 API bindings — features will be expanded per phase (DPAPI in P5, WMI/PostMessage in P8/P9).