diff --git a/Cargo.toml b/Cargo.toml
index 5b5d19b202..b22647a9ed 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -280,7 +280,7 @@ pin-project = "1"
 proc-macro2 = "1.0"
 prost = "0.13"
 quote = "1.0"
-rand = "0.8.5"
+rand = "0.8.6"
 rand_chacha = "0.3.1"
 range-set-blaze = "0.1.16"
 rayon = "1.10.0"
diff --git a/patch-testing/secp256k1/program-v0.29.1/Cargo.lock b/patch-testing/secp256k1/program-v0.29.1/Cargo.lock
index aebb6ea096..a1dc4902c2 100644
--- a/patch-testing/secp256k1/program-v0.29.1/Cargo.lock
+++ b/patch-testing/secp256k1/program-v0.29.1/Cargo.lock
@@ -766,9 +766,9 @@ checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
 
 [[package]]
 name = "rand"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+checksum = "5ca0ecfa931c29007047d1bc58e623ab12e5590e8c7cc53200d5202b69266d8a"
 dependencies = [
  "libc",
  "rand_chacha",