diff --git a/vscode/cli/Cargo.lock b/vscode/cli/Cargo.lock
index 8474bda6464971..35798c7665b8d4 100644
--- a/vscode/cli/Cargo.lock
+++ b/vscode/cli/Cargo.lock
@@ -453,7 +453,7 @@ dependencies = [
  "log",
  "open",
  "pin-project",
- "rand 0.8.6",
+ "rand 0.9.4",
  "regex",
  "reqwest",
  "rmp-serde",
@@ -2074,9 +2074,9 @@ dependencies = [
 
 [[package]]
 name = "openssl"
-version = "0.10.79"
+version = "0.10.80"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf0b434746ee2832f4f0baf10137e1cabb18cbe6912c69e2e33263c45250f542"
+checksum = "a45fa2aa886c42762255da344f0a0d313e254066c46aad76f300c3d3da62d967"
 dependencies = [
  "bitflags 2.10.0",
  "cfg-if",
@@ -2105,9 +2105,9 @@ checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e"
 
 [[package]]
 name = "openssl-sys"
-version = "0.9.115"
+version = "0.9.116"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "158fe5b292746440aa6e7a7e690e55aeb72d41505e2804c23c6973ad0e9c9781"
+checksum = "f28a22dc7140cda5f096e5e7724a6962ca81a7f8bfd2979f9b18c11af56318c4"
 dependencies = [
  "cc",
  "libc",
@@ -3032,9 +3032,9 @@ dependencies = [
 
 [[package]]
 name = "tar"
-version = "0.4.45"
+version = "0.4.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22692a6476a21fa75fdfc11d452fda482af402c008cdbaf3476414e122040973"
+checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840"
 dependencies = [
  "filetime",
  "libc",
diff --git a/vscode/cli/Cargo.toml b/vscode/cli/Cargo.toml
index a8f1ba4c34e9de..e1e5a31e3226ff 100644
--- a/vscode/cli/Cargo.toml
+++ b/vscode/cli/Cargo.toml
@@ -27,7 +27,7 @@ serde_json = "1.0.96"
 rmp-serde = "1.1.1"
 uuid = { version = "1.4", features = ["serde", "v4"] }
 dirs = "5.0.1"
-rand = "0.8.6"
+rand = "0.9.4"
 serde_bytes = "0.11.9"
 jiff = { version = "0.2", default-features = false, features = ["std", "serde"] }
 http = "1"