diff --git a/Cargo.lock b/Cargo.lock
index df40cd7ca359b..f6914c6951648 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5606,7 +5606,7 @@ dependencies = [
  "prost",
  "qcell",
  "rand 0.9.2",
- "rand_chacha 0.9.0",
+ "rand_chacha 0.10.0",
  "semver",
  "serde",
  "serde_json",
@@ -10378,6 +10378,16 @@ dependencies = [
  "rand_core 0.9.3",
 ]
 
+[[package]]
+name = "rand_chacha"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e6af7f3e25ded52c41df4e0b1af2d047e45896c2f3281792ed68a1c243daedb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.10.0",
+]
+
 [[package]]
 name = "rand_core"
 version = "0.5.1"
@@ -10406,6 +10416,12 @@ dependencies = [
  "getrandom 0.3.3",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c8d0fd677905edcbeedbf2edb6494d676f0e98d54d5cf9bda0b061cb8fb8aba"
+
 [[package]]
 name = "rand_distr"
 version = "0.4.3"
@@ -13818,7 +13834,7 @@ dependencies = [
  "prost-types",
  "quote",
  "rand 0.8.5",
- "rand_chacha 0.9.0",
+ "rand_chacha 0.10.0",
  "rand_core 0.6.4",
  "rdkafka-sys",
  "regex",
diff --git a/src/adapter/Cargo.toml b/src/adapter/Cargo.toml
index 992669d82f813..2ff4008f31b11 100644
--- a/src/adapter/Cargo.toml
+++ b/src/adapter/Cargo.toml
@@ -79,7 +79,7 @@ prometheus = { version = "0.14.0", default-features = false }
 prost = { version = "0.14.3", features = ["no-recursion-limit"] }
 qcell = "0.5"
 rand = "0.9.2"
-rand_chacha = "0.9.0"
+rand_chacha = "0.10.0"
 semver = "1.0.27"
 serde = "1.0.219"
 serde_json = "1.0.149"
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index ddcc9227c75ac..fe5002ca35d01 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -120,7 +120,7 @@ prost-reflect = { version = "0.16.3", default-features = false, features = ["ser
 prost-types = { version = "0.14.3" }
 quote = { version = "1.0.44" }
 rand = { version = "0.8.5", features = ["small_rng"] }
-rand_chacha = { version = "0.9.0" }
+rand_chacha = { version = "0.10.0" }
 rand_core = { version = "0.6.4", default-features = false, features = ["std"] }
 rdkafka-sys = { git = "https://github.com/MaterializeInc/rust-rdkafka.git", features = ["cmake-build", "libz-static", "ssl-vendored", "zstd"] }
 regex = { version = "1.12.2" }