diff --git a/CHANGELOG.md b/CHANGELOG.md
index 662ad90..0db2592 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+* upgrade dependencies: `getrandom`, `rand`
+
 ## [0.22.1] - 2026-01-15
 
 * make `Crate::copy_source_to` public.
diff --git a/Cargo.toml b/Cargo.toml
index 4f2cc83..df64254 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -37,7 +37,7 @@ toml = "0.9.10"
 fs2 = "0.4.3"
 remove_dir_all = "1.0.0"
 base64 = "0.22.0"
-getrandom = { version = "0.3.4", features = ["std"] }
+getrandom = { version = "0.4.1", features = ["std"] }
 thiserror = "2.0.17"
 git2 = "0.20.2"
 
@@ -49,5 +49,5 @@ windows-sys = {version = "0.52.0", features = ["Win32_Foundation", "Win32_System
 
 [dev-dependencies]
 env_logger = "0.11.3"
-rand = "0.9.2"
+rand = "0.10.0"
 tiny_http = "0.12.0"
diff --git a/tests/buildtest/runner.rs b/tests/buildtest/runner.rs
index b81d093..074f699 100644
--- a/tests/buildtest/runner.rs
+++ b/tests/buildtest/runner.rs
@@ -1,4 +1,4 @@
-use rand::{Rng, distr::Alphanumeric};
+use rand::{RngExt as _, distr::Alphanumeric};
 use rustwide::{Build, BuildBuilder, Crate, Toolchain, Workspace, cmd::SandboxBuilder};
 use std::path::Path;