diff --git a/Cargo.toml b/Cargo.toml
index cfb40df9a..ddef695d4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -39,29 +39,29 @@ multiple_crate_versions = "allow"
 future_not_send = "allow"
 
 [workspace.dependencies]
-allocator-api2 = { version = "0.2", default-features = false }
+allocator-api2 = { version = "0.4", default-features = false }
 anstream = "1.0.0"
 anyhow = "1.0.103"
 assert2 = "0.4.0"
 assertables = "10.0.0"
 async-trait = "0.1.89"
-base64 = "0.22.1"
+base64 = "0.23.0"
 bytes = "1.11.1"
 url = "2.5.8"
 wincode = "0.6.0"
-bindgen = "0.72.1"
+bindgen = "0.73.0"
 bitflags = "2.10.0"
 brush-parser = "0.4.0"
 bstr = { version = "1.12.0", default-features = false }
 bump-scope = { version = "2", default-features = false }
 bumpalo = "3.17.0"
 bytemuck = "1.23.0"
-cargo-platform = "=0.3.2"
+cargo-platform = "=0.3.3"
 cc = "1.2.39"
 ciborium = "0.2.2"
 clap = "4.5.53"
 color-eyre = "0.6.5"
-compact_str = "0.9.0"
+compact_str = "0.10.0"
 constcat = "0.6.1"
 copy_dir = "0.1.3"
 cow-utils = "0.1.3"
@@ -93,7 +93,7 @@ futures-util = "0.3.31"
 globset = "0.4.18"
 getrandom = "0.4.2"
 itoa = "1.0.17"
-jsonc-parser = "0.32.0"
+jsonc-parser = "0.34.0"
 libc = "0.2.185"
 linux-raw-sys = { version = "0.12", default-features = false }
 libtest-mimic = "0.8.2"
@@ -116,7 +116,7 @@ notify = "8.0.0"
 path-clean = "1.0.1"
 pathdiff = "0.2.3"
 petgraph = "0.8.2"
-phf = "0.13.0"
+phf = "0.14.0"
 portable-pty = "0.9.0"
 pretty_assertions = "1.4.1"
 proc-macro2 = "1"
@@ -129,7 +129,7 @@ rayon = "1.10.0"
 ref-cast = "1.0.24"
 regex = "1.11.3"
 reqwest = { version = "0.13.5", default-features = false }
-rusqlite = "0.39.0"
+rusqlite = "0.40.0"
 rustc-hash = "2.1.1"
 rustls = { version = "0.23.44", default-features = false }
 # SeccompAction::UserNotif (SECCOMP_RET_USER_NOTIF) was added after the latest published release (v0.5.0)
@@ -191,11 +191,11 @@ which = "8.0.0"
 widestring = "1.2.0"
 winapi = "0.3.9"
 windows-sys = "0.61"
-winsafe = { version = "0.0.27" }
+winsafe = { version = "0.0.29" }
 xxhash-rust = "0.8.15"
 ntest = "0.9.5"
 terminal_size = "0.4"
-zstd = "0.13"
+zstd = "0.14"
 
 [workspace.metadata.cargo-shear]
 ignored = [