diff --git a/Cargo.lock b/Cargo.lock
index 726b8a98b..1c1bb8b5f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1150,7 +1150,7 @@ dependencies = [
  "ironrdp",
  "notify-debouncer-mini",
  "parking_lot",
- "rand 0.8.5",
+ "rand 0.9.1",
  "reqwest",
  "rustls-pemfile 2.2.0",
  "serde",
@@ -4179,9 +4179,9 @@ dependencies = [
 
 [[package]]
 name = "picky"
-version = "7.0.0-rc.15"
+version = "7.0.0-rc.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83be360ca0cc8659abfbda932098e606fe52fa129508b92f0ce2998c00679170"
+checksum = "33807ce79d4b14a8918e968a8606e5142ddc6aec933acef79de0bd769cae5fb1"
 dependencies = [
  "aes",
  "aes-gcm",
diff --git a/devolutions-agent/Cargo.toml b/devolutions-agent/Cargo.toml
index 42e807e47..992627ebf 100644
--- a/devolutions-agent/Cargo.toml
+++ b/devolutions-agent/Cargo.toml
@@ -22,7 +22,7 @@ devolutions-gateway-task = { path = "../crates/devolutions-gateway-task" }
 devolutions-log = { path = "../crates/devolutions-log" }
 futures = "0.3"
 parking_lot = "0.12"
-rand = "0.8" # FIXME(@CBenoit): maybe we don’t need this crate
+rand = "0.9" # FIXME(@CBenoit): maybe we don’t need this crate
 rustls-pemfile = "2.2" # FIXME(@CBenoit): maybe we don’t need this crate
 serde_json = "1"
 serde = { version = "1", features = ["derive"] }
diff --git a/devolutions-gateway/Cargo.toml b/devolutions-gateway/Cargo.toml
index 3a9c9e357..853846143 100644
--- a/devolutions-gateway/Cargo.toml
+++ b/devolutions-gateway/Cargo.toml
@@ -65,7 +65,7 @@ dunce = "1.0"
 bitflags = "2.9"
 
 # Security, crypto…
-picky = { version = "7.0.0-rc.15", default-features = false, features = ["jose", "x509", "pkcs12", "time_conversion"] }
+picky = { version = "7.0.0-rc.17", default-features = false, features = ["jose", "x509", "pkcs12", "time_conversion"] }
 zeroize = { version = "1.8", features = ["derive"] }
 multibase = "0.9"
 argon2 = { version = "0.5", features = ["std"] }