diff --git a/CHANGELOG.md b/CHANGELOG.md
index a37af84..97d6fc5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,8 @@
 
 # [Unreleased]
 
+* Update `rand` to 0.4 and `gcc` 0.3 to `cc` 1.0. (`rand` 0.5 exists but has a lot of breaking changes and no longer compiles with 1.14.0.)
+
 # 0.10.0 - 2018-07-25
 
 * A [complete API overhaul](https://github.com/rust-bitcoin/rust-secp256k1/pull/27) to move many runtime errors into compiletime errors
diff --git a/Cargo.toml b/Cargo.toml
index c7f6760..f559b71 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -26,14 +26,14 @@ default = []
 fuzztarget = []
 
 [dev-dependencies]
-rand = "0.3"
+rand = "0.4"
 serde_test = "1.0"
 
 [dependencies]
 libc = "0.2"
 
 [dependencies.rand]
-version = "0.3"
+version = "0.4"
 optional = true
 
 [dependencies.serde]