diff --git a/Cargo.lock b/Cargo.lock
index 25776a382f6..6431900311b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2093,9 +2093,9 @@ dependencies = [
 
 [[package]]
 name = "crossbeam-epoch"
-version = "0.9.18"
+version = "0.9.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
+checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f"
 dependencies = [
  "crossbeam-utils",
 ]
diff --git a/deny.toml b/deny.toml
index e11acc43b67..4ff8a4ba0ab 100644
--- a/deny.toml
+++ b/deny.toml
@@ -14,9 +14,6 @@ ignore = [
     "RUSTSEC-2026-0098",
     "RUSTSEC-2026-0099",
     "RUSTSEC-2026-0104",
-    # rand unsoundness with custom logger calling rand::rng() during reseed — we don't use this pattern;
-    # revisit/remove by 2026-06-30, or when transitive deps (tower, nanoid, phf_generator) release rand ≥0.9.3 compat
-    "RUSTSEC-2026-0097",
 ]
 
 [licenses]