diff --git a/Cargo.lock b/Cargo.lock
index a7c7324..a5c4675 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1500,7 +1500,7 @@ name = "tinydocs-module"
 version = "0.1.14"
 dependencies = [
  "base64 0.22.1",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "serde",
  "serde_json",
  "sha2",
diff --git a/crates/tinydocs-module/Cargo.toml b/crates/tinydocs-module/Cargo.toml
index 5b2879d..6d6cb4d 100644
--- a/crates/tinydocs-module/Cargo.toml
+++ b/crates/tinydocs-module/Cargo.toml
@@ -33,7 +33,7 @@ thiserror = "2"
 # An output id is the only authorisation to read that output — a method receives
 # no caller identity — so ids are 128 bits of OS randomness rather than a
 # guessable counter.
-getrandom = "0.3"
+getrandom = "0.4"
 # `BlobRef` and the wire deck shape are the bus contract, so they derive the
 # same serde surface the library specs do.
 serde = { version = "1", features = ["derive"] }