diff --git a/Cargo.toml b/Cargo.toml
index 448607257ca1..4aa12992d785 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -135,7 +135,7 @@ pbjson = { version = "0.7.0" }
 # Should match arrow-flight's version of prost.
 prost = "0.13.1"
 prost-derive = "0.13.1"
-rand = "0.8"
+rand = "0.9"
 regex = "1.8"
 rstest = "0.23.0"
 serde_json = "1"
diff --git a/datafusion/functions-nested/Cargo.toml b/datafusion/functions-nested/Cargo.toml
index bdfb07031b8c..8798cba3b885 100644
--- a/datafusion/functions-nested/Cargo.toml
+++ b/datafusion/functions-nested/Cargo.toml
@@ -54,7 +54,7 @@ datafusion-physical-expr-common = { workspace = true }
 itertools = { workspace = true, features = ["use_std"] }
 log = { workspace = true }
 paste = "1.0.14"
-rand = "0.8.5"
+rand = "0.9.0"
 
 [dev-dependencies]
 criterion = { version = "0.5", features = ["async_tokio"] }