diff --git a/Cargo.lock b/Cargo.lock
index d76b98f49baa0..40014f6c045e3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -189,7 +189,7 @@ dependencies = [
  "serde_json",
  "strum",
  "strum_macros",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "uuid",
 ]
 
@@ -665,7 +665,7 @@ dependencies = [
  "proc-macro-error",
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -1641,7 +1641,7 @@ checksum = "3db406d29fbcd95542e92559bed4d8ad92636d1ca8b3b72ede10b4bcc010e659"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -1755,7 +1755,7 @@ dependencies = [
  "quote",
  "serde",
  "serde_json",
- "syn 1.0.107",
+ "syn 2.0.104",
  "tempfile",
  "tracing",
  "tracing-subscriber",
@@ -1799,7 +1799,7 @@ dependencies = [
  "semver",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -1945,6 +1945,7 @@ checksum = "fa66045b9cb23c2e9c1520732030608b02ee07e5cfaa5a521ec15ded7fa24c90"
 dependencies = [
  "glob",
  "libc",
+ "libloading",
 ]
 
 [[package]]
@@ -2062,7 +2063,7 @@ checksum = "43b5affba7c91c039a483065125dd8c6d4a0985e1e9ac5ab6dffdea4fe4e637f"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -2696,7 +2697,7 @@ checksum = "fcc3dd5e9e9c0b295d6e1e4d811fb6f157d5ffd784b8d202fc62eac8035a770b"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -2707,7 +2708,7 @@ checksum = "7a2c35ab6e03642397cdda1dd58abbc05d418aef8e36297f336d5aba060fe8df"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -3103,7 +3104,7 @@ checksum = "4e40a16955681d469ab3da85aaa6b42ff656b3c67b52e1d8d3dd36afe97fd462"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -4238,7 +4239,7 @@ dependencies = [
  "strum",
  "thrift",
  "tokio",
- "typed-builder",
+ "typed-builder 0.21.2",
  "url",
  "uuid",
  "zstd",
@@ -4263,7 +4264,7 @@ dependencies = [
  "serde_json",
  "tokio",
  "tracing",
- "typed-builder",
+ "typed-builder 0.21.2",
  "uuid",
 ]
 
@@ -4564,7 +4565,7 @@ dependencies = [
  "pest_derive",
  "regex",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -4682,7 +4683,7 @@ dependencies = [
  "serde",
  "serde_json",
  "serde_yaml",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-tungstenite 0.27.0",
  "tokio-util",
@@ -4707,7 +4708,7 @@ dependencies = [
  "serde",
  "serde-value",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -4745,7 +4746,7 @@ dependencies = [
  "pin-project",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-util",
  "tracing",
@@ -4772,7 +4773,7 @@ dependencies = [
  "ring",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-stream",
  "uuid",
@@ -4898,6 +4899,16 @@ version = "0.2.174"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776"
 
+[[package]]
+name = "libloading"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67380fd3b2fbe7527a606e18729d21c6f3951633d0500574c4dc22d2d638b9f"
+dependencies = [
+ "cfg-if",
+ "winapi",
+]
+
 [[package]]
 name = "liblzma"
 version = "0.4.3"
@@ -5294,7 +5305,7 @@ dependencies = [
  "serde",
  "serde_json",
  "socket2 0.5.10",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-native-tls",
  "tokio-util",
@@ -5327,7 +5338,7 @@ dependencies = [
  "serde_json",
  "sha1",
  "sha2",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "uuid",
  "zstd",
 ]
@@ -5360,7 +5371,7 @@ dependencies = [
  "serde_json",
  "tabled",
  "termcolor",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "time",
  "tokio",
  "toml",
@@ -5451,7 +5462,7 @@ dependencies = [
  "sha2",
  "smallvec",
  "static_assertions",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tokio-postgres",
@@ -5618,7 +5629,7 @@ dependencies = [
  "hyper-tls 0.5.0",
  "mz-ore",
  "pin-project",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "uuid",
  "workspace-hack",
@@ -5758,7 +5769,7 @@ dependencies = [
  "serde_plain",
  "sha2",
  "static_assertions",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tracing",
@@ -5854,7 +5865,7 @@ dependencies = [
  "mz-frontegg-client",
  "reqwest 0.11.24",
  "serde",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "url",
  "workspace-hack",
@@ -6041,7 +6052,7 @@ dependencies = [
  "prometheus",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tracing",
@@ -6339,7 +6350,7 @@ dependencies = [
  "stacker",
  "sysctl",
  "tempfile",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tokio-metrics",
@@ -6502,7 +6513,7 @@ dependencies = [
  "serde_json",
  "sha2",
  "socket2 0.5.10",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-postgres",
  "tokio-stream",
@@ -6535,7 +6546,7 @@ dependencies = [
  "reqwest-retry",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tracing",
  "uuid",
@@ -6552,7 +6563,7 @@ dependencies = [
  "reqwest 0.11.24",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "url",
  "uuid",
@@ -6668,7 +6679,7 @@ dependencies = [
  "rdkafka",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tracing",
  "url",
@@ -6715,7 +6726,7 @@ version = "0.0.0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 2.0.104",
  "workspace-hack",
 ]
 
@@ -6780,7 +6791,7 @@ dependencies = [
  "mz-ore",
  "paste",
  "prometheus",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-util",
  "tracing",
@@ -6816,7 +6827,7 @@ dependencies = [
  "regex",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tonic-build",
  "tracing",
@@ -6968,7 +6979,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha2",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-postgres",
  "tower-http",
@@ -7029,7 +7040,7 @@ dependencies = [
  "serde_json",
  "smallvec",
  "stacker",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-native-tls",
  "tokio-openssl",
@@ -7059,7 +7070,7 @@ version = "0.1.0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 2.0.104",
  "tracing",
  "workspace-hack",
 ]
@@ -7162,7 +7173,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tempfile",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tokio-metrics",
@@ -7180,7 +7191,7 @@ version = "0.1.0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 2.0.104",
  "workspace-hack",
 ]
 
@@ -7381,7 +7392,7 @@ dependencies = [
  "prost",
  "prost-build",
  "serde",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-postgres",
  "tonic-build",
@@ -7521,7 +7532,7 @@ dependencies = [
  "smallvec",
  "static_assertions",
  "strsim",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio-postgres",
  "tracing",
@@ -7562,7 +7573,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tempfile",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tracing",
  "workspace-hack",
@@ -7754,7 +7765,7 @@ dependencies = [
  "serde",
  "serde_json",
  "static_assertions",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-postgres",
  "tracing",
@@ -7796,7 +7807,7 @@ dependencies = [
  "phf",
  "serde",
  "smallvec",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tracing",
  "uncased",
  "unicode-width 0.2.1",
@@ -7812,7 +7823,7 @@ dependencies = [
  "mz-ore",
  "mz-sql-parser",
  "pretty",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "workspace-hack",
 ]
 
@@ -7844,7 +7855,7 @@ dependencies = [
  "serde",
  "smallvec",
  "static_assertions",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tiberius",
  "timely",
  "tokio",
@@ -7928,7 +7939,7 @@ dependencies = [
  "serde_json",
  "ssh-key",
  "tempfile",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-stream",
  "tracing",
@@ -8004,7 +8015,7 @@ dependencies = [
  "serde_json",
  "sha2",
  "tempfile",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tokio-postgres",
@@ -8135,7 +8146,7 @@ dependencies = [
  "sentry",
  "serde",
  "smallvec",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "timely",
  "tokio",
  "tokio-stream",
@@ -8208,7 +8219,7 @@ dependencies = [
  "reqwest 0.11.24",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tiberius",
  "timely",
  "tokio",
@@ -8373,7 +8384,7 @@ dependencies = [
  "openssl",
  "openssl-sys",
  "postgres-openssl",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
  "tokio-postgres",
  "tracing",
@@ -8457,7 +8468,7 @@ dependencies = [
  "mz-ore",
  "mz-ore-build",
  "quote",
- "syn 1.0.107",
+ "syn 2.0.104",
  "tempfile",
  "workspace-hack",
 ]
@@ -8693,7 +8704,7 @@ dependencies = [
  "proc-macro-crate 1.3.1",
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -8829,15 +8840,15 @@ dependencies = [
  "openssh-mux-client",
  "shell-escape",
  "tempfile",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "tokio",
 ]
 
 [[package]]
 name = "openssh-mux-client"
-version = "0.17.7"
+version = "0.17.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d83f349e6427c6159fee16ec3dd8fa995cc25d4f5498855836d8666b9c6a8b75"
+checksum = "87706cbfeb7e849791cfc49befdacf5407701cf75938a86dfa9e9ee8fffa002d"
 dependencies = [
  "cfg-if",
  "non-zero-byte-slice",
@@ -8848,7 +8859,7 @@ dependencies = [
  "ssh_format",
  "tokio",
  "tokio-io-utility",
- "typed-builder",
+ "typed-builder 0.22.0",
 ]
 
 [[package]]
@@ -8858,7 +8869,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9879168afb48a235200e30d93df320b7191568cda8621df02f145c1c0f1af95a"
 dependencies = [
  "ssh_format_error",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -9210,9 +9221,9 @@ dependencies = [
 
 [[package]]
 name = "percent-encoding"
-version = "2.3.1"
+version = "2.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
 
 [[package]]
 name = "persistcli"
@@ -9652,9 +9663,9 @@ checksum = "c6fa0831dd7cc608c38a5e323422a0077678fa5744aa2be4ad91c4ece8eec8d5"
 
 [[package]]
 name = "prettyplease"
-version = "0.2.35"
+version = "0.2.36"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "061c1221631e079b26479d25bbf2275bfe5917ae8419cd7e34f13bfc2aa7539a"
+checksum = "ff24dfcda44452b9816fff4cd4227e1bb73ff5a2f1bc1105aa92fb8565ce44d2"
 dependencies = [
  "proc-macro2",
  "syn 2.0.104",
@@ -9697,7 +9708,7 @@ dependencies = [
  "proc-macro-error-attr",
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
  "version_check",
 ]
 
@@ -9736,9 +9747,9 @@ dependencies = [
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.95"
+version = "1.0.101"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778"
+checksum = "89ae43fd86e4158d6db51ad8e2b80f313af9cc74f5c0e03ccb87de09998732de"
 dependencies = [
  "unicode-ident",
 ]
@@ -9948,7 +9959,7 @@ checksum = "16b845dbfca988fa33db069c0e230574d15a3088f147a87b64c7589eb662c9ac"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -9963,9 +9974,9 @@ dependencies = [
 
 [[package]]
 name = "qcell"
-version = "0.5.4"
+version = "0.5.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f6c04aa3dea4dab485f6d87449ba94d5664c388c0f1fe2b07c4891175513345"
+checksum = "d4846759593b1fdd54c7937ddaf6706f38d810bf0eb1af5df1d83c764aadc57a"
 dependencies = [
  "exclusion-set",
  "once_cell",
@@ -10278,7 +10289,7 @@ checksum = "dd6f9d3d47bdd2ad6945c5015a226ec6155d0bcdfd8f7cd29f86b71f8de99d2b"
 dependencies = [
  "getrandom 0.2.10",
  "libredox",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -10303,9 +10314,9 @@ dependencies = [
 
 [[package]]
 name = "regex"
-version = "1.11.1"
+version = "1.11.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191"
+checksum = "23d7fd106d8c02486a8d64e778353d1cffe08ce79ac2e82f540c86d0facf6912"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -10315,9 +10326,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.4.9"
+version = "0.4.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908"
+checksum = "6b9458fa0bfeeac22b5ca447c63aaf45f28439a709ccd244698632f9aa6394d6"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -10332,9 +10343,9 @@ checksum = "53a49587ad06b26609c52e423de037e7f57f20d53535d66e08c695f347df952a"
 
 [[package]]
 name = "regex-syntax"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
+checksum = "caf4aa5b0f434c91fe5c7f1ecb6a5ece2130b02ad2a590589dda5146df959001"
 
 [[package]]
 name = "rend"
@@ -10563,7 +10574,7 @@ checksum = "503d1d27590a2b0a3a4ca4c94755aa2875657196ecbf401a42eff41d7de532c0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -10915,17 +10926,18 @@ dependencies = [
  "reqwest 0.12.23",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "time",
 ]
 
 [[package]]
 name = "semver"
-version = "1.0.26"
+version = "1.0.27"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56e6fa9c48d24d85fb3de5ad847117517440f6beceb7798af16b4a87d616b8d0"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
 dependencies = [
  "serde",
+ "serde_core",
 ]
 
 [[package]]
@@ -11036,7 +11048,7 @@ dependencies = [
  "rand 0.9.2",
  "serde",
  "serde_json",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "time",
  "url",
  "uuid",
@@ -11050,10 +11062,11 @@ checksum = "0772c5c30e1a0d91f6834f8e545c69281c099dfa9a3ac58d96a9fd629c8d4898"
 
 [[package]]
 name = "serde"
-version = "1.0.219"
+version = "1.0.226"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+checksum = "0dca6411025b24b60bfa7ec1fe1f8e710ac09782dca409ee8237ba74b51295fd"
 dependencies = [
+ "serde_core",
  "serde_derive",
 ]
 
@@ -11091,18 +11104,28 @@ dependencies = [
 
 [[package]]
 name = "serde_bytes"
-version = "0.11.17"
+version = "0.11.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8437fd221bde2d4ca316d61b90e337e9e702b3820b87d63caa9ba6c02bd06d96"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
 dependencies = [
  "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.226"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba2ba63999edb9dac981fb34b3e5c0d111a69b0924e253ed29d83f7c99e966a4"
+dependencies = [
+ "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.219"
+version = "1.0.226"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+checksum = "8db53ae22f34573731bafa1db20f04027b2d25e02d8205921b569171699cdb33"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -11122,15 +11145,16 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.143"
+version = "1.0.145"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d401abef1d108fbd9cbaebc3e46611f4b1021f714a0597a71f41ee463f5f4a5a"
+checksum = "402a6f66d8c709116cf22f558eab210f5a50187f702eb4d7e5ef38d9a7f1c79c"
 dependencies = [
  "indexmap 2.10.0",
  "itoa",
  "memchr",
  "ryu",
  "serde",
+ "serde_core",
 ]
 
 [[package]]
@@ -11628,9 +11652,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "1.0.107"
+version = "1.0.109"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f4064b5b16e03ae50984a5a8ed5d4f8803e6bc1fd170a3cda91a1be4b18e3f5"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -11865,11 +11889,11 @@ dependencies = [
 
 [[package]]
 name = "thiserror"
-version = "2.0.12"
+version = "2.0.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "567b8a2dae586314f7be2a752ec7474332959c6460e02bde30d702a66d488708"
+checksum = "3467d614147380f2e4e374161426ff399c91084acd2363eaf549172b3d5e60c0"
 dependencies = [
- "thiserror-impl 2.0.12",
+ "thiserror-impl 2.0.16",
 ]
 
 [[package]]
@@ -11885,9 +11909,9 @@ dependencies = [
 
 [[package]]
 name = "thiserror-impl"
-version = "2.0.12"
+version = "2.0.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f7cf42b4507d8ea322120659672cf1b9dbb93f8f2d4ecfd6e51350ff5b17a1d"
+checksum = "6c5e1be1c48b9172ee610da68fd9cd2770e7a4056cb3fc98710ee6906f0c7960"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -12160,9 +12184,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-metrics"
-version = "0.4.2"
+version = "0.4.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7817b32d36c9b94744d7aa3f8fc13526aa0f5112009d7045f3c659413a6e44ac"
+checksum = "a01bbf7db0b3f5eee8930a119fe99bfa1438de1095fe3d26b25e652a5933ef3f"
 dependencies = [
  "futures-util",
  "pin-project-lite",
@@ -12278,9 +12302,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-util"
-version = "0.7.15"
+version = "0.7.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "66a539a9ad6d5d281510d5bd368c973d636c02dbf8a67300bfb6b950696ad7df"
+checksum = "14307c986784f72ef81c89db7d9e28d6ac26d16213b109ea501696195e6e3ce5"
 dependencies = [
  "bytes",
  "futures-core",
@@ -12725,7 +12749,7 @@ dependencies = [
  "log",
  "rand 0.9.2",
  "sha1",
- "thiserror 2.0.12",
+ "thiserror 2.0.16",
  "utf-8",
 ]
 
@@ -12772,7 +12796,16 @@ version = "0.21.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fef81aec2ca29576f9f6ae8755108640d0a86dd3161b2e8bca6cfa554e98f77d"
 dependencies = [
- "typed-builder-macro",
+ "typed-builder-macro 0.21.2",
+]
+
+[[package]]
+name = "typed-builder"
+version = "0.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "398a3a3c918c96de527dc11e6e846cd549d4508030b8a33e1da12789c856b81a"
+dependencies = [
+ "typed-builder-macro 0.22.0",
 ]
 
 [[package]]
@@ -12786,6 +12819,17 @@ dependencies = [
  "syn 2.0.104",
 ]
 
+[[package]]
+name = "typed-builder-macro"
+version = "0.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e48cea23f68d1f78eb7bc092881b6bb88d3d6b5b7e6234f6f9c911da1ffb221"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.104",
+]
+
 [[package]]
 name = "typeid"
 version = "1.0.3"
@@ -12960,9 +13004,9 @@ checksum = "711b9620af191e0cdc7468a8d14e709c3dcdb115b36f838e601583af800a370a"
 
 [[package]]
 name = "uuid"
-version = "1.18.0"
+version = "1.18.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f33196643e165781c20a5ead5582283a7dacbb87855d867fbc2df3f81eddc1be"
+checksum = "2f87b8aa10b915a06587d0dec516c282ff295b475d94abf425d62b57710070a2"
 dependencies = [
  "getrandom 0.3.2",
  "js-sys",
@@ -13676,7 +13720,7 @@ dependencies = [
  "similar",
  "smallvec",
  "subtle",
- "syn 1.0.107",
+ "syn 1.0.109",
  "syn 2.0.104",
  "thrift",
  "time",
@@ -13797,19 +13841,20 @@ dependencies = [
 
 [[package]]
 name = "zstd-safe"
-version = "7.2.1"
+version = "7.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "54a3ab4db68cea366acc5c897c7b4d4d1b8994a9cd6e6f841f8964566a419059"
+checksum = "8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d"
 dependencies = [
  "zstd-sys",
 ]
 
 [[package]]
 name = "zstd-sys"
-version = "2.0.13+zstd.1.5.6"
+version = "2.0.16+zstd.1.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38ff0f21cfee8f97d94cef41359e0c89aa6113028ab0291aa8ca0038995a95aa"
+checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
 dependencies = [
+ "bindgen",
  "cc",
  "pkg-config",
 ]
diff --git a/misc/bazel/cargo-gazelle/Cargo.toml b/misc/bazel/cargo-gazelle/Cargo.toml
index 5e04e1e5a4b80..7b742c83557b7 100644
--- a/misc/bazel/cargo-gazelle/Cargo.toml
+++ b/misc/bazel/cargo-gazelle/Cargo.toml
@@ -20,12 +20,12 @@ clap = { version = "4.5.23", features = ["derive", "env"] }
 convert_case = "0.8"
 guppy = "0.17.19"
 md-5 = "0.10.6"
-proc-macro2 = "1.0.95"
+proc-macro2 = "1.0.101"
 protobuf-parse = "3.7.2"
 quote = "1.0.40"
-syn = { version = "1.0.107", features = ["extra-traits", "full"] }
-serde = "1.0.219"
-serde_json = "1.0.127"
+syn = { version = "2.0.104", features = ["extra-traits", "full"] }
+serde = "1.0.226"
+serde_json = "1.0.145"
 tempfile = "3.20.0"
 tracing = "0.1.37"
 tracing-subscriber = { version = "0.3.19", features = ["env-filter", "std"] }
diff --git a/src/adapter-types/Cargo.toml b/src/adapter-types/Cargo.toml
index 4a58033e01c99..9b98e9db73a82 100644
--- a/src/adapter-types/Cargo.toml
+++ b/src/adapter-types/Cargo.toml
@@ -14,7 +14,7 @@ mz-dyncfg = { path = "../dyncfg" }
 mz-ore = { path = "../ore" }
 mz-repr = { path = "../repr" }
 mz-storage-types = { path = "../storage-types" }
-serde = "1.0.219"
+serde = "1.0.226"
 timely = "0.24.0"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 tracing = "0.1.37"
diff --git a/src/adapter/Cargo.toml b/src/adapter/Cargo.toml
index 9a13a0bee7b3f..3dafc30f1ca8d 100644
--- a/src/adapter/Cargo.toml
+++ b/src/adapter/Cargo.toml
@@ -78,9 +78,9 @@ prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 qcell = "0.5"
 rand = "0.8.5"
 rand_chacha = "0.3"
-semver = "1.0.26"
-serde = "1.0.219"
-serde_json = "1.0.127"
+semver = "1.0.27"
+serde = "1.0.226"
+serde_json = "1.0.145"
 serde_plain = "1.0.2"
 sha2 = "0.10.9"
 smallvec = { version = "1.15.1", features = ["union"] }
@@ -93,9 +93,9 @@ tracing = "0.1.37"
 tracing-core = "0.1.34"
 tracing-opentelemetry = { version = "0.25.0" }
 tracing-subscriber = "0.3.19"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 url = "2.3.1"
-uuid = { version = "1.17.0" }
+uuid = { version = "1.18.1" }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/arrow-util/Cargo.toml b/src/arrow-util/Cargo.toml
index 1402f0c8810af..afc9e9f18155c 100644
--- a/src/arrow-util/Cargo.toml
+++ b/src/arrow-util/Cargo.toml
@@ -20,9 +20,9 @@ mz-repr = { path = "../repr" }
 mz-ore = { path = "../ore" }
 num-traits = "0.2"
 ordered-float = { version = "5.0.0" }
-serde = { version = "1.0.219" }
-serde_json = "1.0.127"
-uuid = "1.17.0"
+serde = { version = "1.0.226" }
+serde_json = "1.0.145"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/audit-log/Cargo.toml b/src/audit-log/Cargo.toml
index 9eee1ca52e417..7df9be7a04dcd 100644
--- a/src/audit-log/Cargo.toml
+++ b/src/audit-log/Cargo.toml
@@ -14,8 +14,8 @@ anyhow = "1.0.98"
 mz-ore = { path = "../ore", features = ["test"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 serde_plain = "1.0.2"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/auth/Cargo.toml b/src/auth/Cargo.toml
index 21a37a4dd15b2..c7e6043ab1d68 100644
--- a/src/auth/Cargo.toml
+++ b/src/auth/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 base64 = "0.22.1"
 mz-ore = { path = "../ore", features = ["test"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
-serde = "1.0.219"
+serde = "1.0.226"
 proptest-derive = "0.5.1"
 proptest = "1.7.0"
 static_assertions = "1.1"
diff --git a/src/authenticator/Cargo.toml b/src/authenticator/Cargo.toml
index 3c34cd66028cb..e1ab15b82d570 100644
--- a/src/authenticator/Cargo.toml
+++ b/src/authenticator/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 [dependencies]
 mz-adapter = { path = "../adapter", default-features = false }
 mz-frontegg-auth = { path = "../frontegg-auth", default-features = false }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [lints]
diff --git a/src/avro/Cargo.toml b/src/avro/Cargo.toml
index edf6d97b8806c..b3b54b550a17f 100644
--- a/src/avro/Cargo.toml
+++ b/src/avro/Cargo.toml
@@ -25,13 +25,13 @@ flate2 = "1.1.2"
 itertools = "0.14.0"
 mz-ore = { path = "../ore", features = ["test"] }
 rand = "0.8.5"
-regex = "1.11.1"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+regex = "1.11.2"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 sha2 = "0.10.9"
 snap = { version = "1.1.1", optional = true }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/aws-secrets-controller/Cargo.toml b/src/aws-secrets-controller/Cargo.toml
index 1885513f09f8e..9e18d7c1bebab 100644
--- a/src/aws-secrets-controller/Cargo.toml
+++ b/src/aws-secrets-controller/Cargo.toml
@@ -25,7 +25,7 @@ mz-secrets = { path = "../secrets", default-features = false }
 mz-repr = { path = "../repr", default-features = false }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 
 [features]
 default = ["workspace-hack"]
diff --git a/src/aws-util/Cargo.toml b/src/aws-util/Cargo.toml
index 01d6319d4344c..3b700506abee8 100644
--- a/src/aws-util/Cargo.toml
+++ b/src/aws-util/Cargo.toml
@@ -26,9 +26,9 @@ http = "1.2.0"
 hyper-tls = "0.5.0"
 mz-ore = { path = "../ore", features = ["async"], default-features = false }
 pin-project = "1.1.10"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", default-features = false, features = ["macros"] }
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/balancerd/Cargo.toml b/src/balancerd/Cargo.toml
index 0f94ab81be3ec..e42bb88b797f3 100644
--- a/src/balancerd/Cargo.toml
+++ b/src/balancerd/Cargo.toml
@@ -42,16 +42,16 @@ num_cpus = "1.17.0"
 openssl = { version = "0.10.73", features = ["vendored"] }
 prometheus = { version = "0.13.4", default-features = false }
 proxy-header = "0.1.2"
-semver = "1.0.26"
+semver = "1.0.27"
 tokio = { version = "1.44.1", default-features = false }
 tokio-openssl = "0.6.5"
 tokio-postgres = { version = "0.7.8" }
-tokio-util = { version = "0.7.15", features = ["codec"] }
-tokio-metrics = "0.4.2"
+tokio-util = { version = "0.7.16", features = ["codec"] }
+tokio-metrics = "0.4.5"
 tower = "0.5.2"
 tracing = "0.1.37"
 tracing-subscriber = "0.3.19"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/build-info/Cargo.toml b/src/build-info/Cargo.toml
index b9dc5d444bc10..98b6f7814dfe3 100644
--- a/src/build-info/Cargo.toml
+++ b/src/build-info/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 buildid = "1.0.3"
 compile-time-run = "0.2.12"
 hex = "0.4.3"
-semver = { version = "1.0.26", optional = true }
+semver = { version = "1.0.27", optional = true }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/catalog-debug/Cargo.toml b/src/catalog-debug/Cargo.toml
index 320a50e6d5783..241dd3cb2d2ec 100644
--- a/src/catalog-debug/Cargo.toml
+++ b/src/catalog-debug/Cargo.toml
@@ -27,8 +27,8 @@ mz-persist-types = { path = "../persist-types" }
 mz-repr = { path = "../repr" }
 mz-service = { path = "../service" }
 mz-sql = { path = "../sql" }
-serde = "1.0.219"
-serde_json = "1.0.127"
+serde = "1.0.226"
+serde_json = "1.0.145"
 tokio = "1.44.1"
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/catalog-protos/Cargo.toml b/src/catalog-protos/Cargo.toml
index 3c0bdb81ada8f..0ad92cf521896 100644
--- a/src/catalog-protos/Cargo.toml
+++ b/src/catalog-protos/Cargo.toml
@@ -20,7 +20,7 @@ paste = "1.0.11"
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = "0.13.5"
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
@@ -35,8 +35,8 @@ anyhow = "1.0.98"
 md-5 = "0.10.6"
 mz-build-tools = { path = "../build-tools", default-features = false, features = ["protobuf-src"] }
 prost-build = "0.13.5"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 
 [package.metadata.cargo-udeps.ignore]
 normal = ["workspace-hack"]
diff --git a/src/catalog/Cargo.toml b/src/catalog/Cargo.toml
index 6db7c9645228c..47dae3c7493d6 100644
--- a/src/catalog/Cargo.toml
+++ b/src/catalog/Cargo.toml
@@ -57,17 +57,17 @@ proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = "0.13.5"
 rand = "0.8.5"
-semver = { version = "1.0.26" }
-serde = "1.0.219"
-serde_json = "1.0.127"
+semver = { version = "1.0.27" }
+serde = "1.0.226"
+serde_json = "1.0.145"
 serde_plain = "1.0.2"
 static_assertions = "1.1"
 sha2 = "0.10.9"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 timely = "0.24.0"
 tokio = { version = "1.44.1" }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/ccsr/Cargo.toml b/src/ccsr/Cargo.toml
index ca9e1481caf6e..1ed1192d21628 100644
--- a/src/ccsr/Cargo.toml
+++ b/src/ccsr/Cargo.toml
@@ -21,8 +21,8 @@ reqwest = { version = "0.11.13", features = [
 mz-tls-util = { path = "../tls-util" }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1" }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 url = { version = "2.3.1", features = ["serde"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
@@ -30,7 +30,7 @@ workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = tru
 hyper = { version = "1.4.1", features = ["server"] }
 hyper-util = "0.1.16"
 mz-ore = { path = "../ore", features = ["async", "test"] }
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tokio = { version = "1.44.1", features = ["macros"] }
 tracing = "0.1.37"
 
diff --git a/src/cloud-api/Cargo.toml b/src/cloud-api/Cargo.toml
index 5cb01fb7f733e..cb691d7674f43 100644
--- a/src/cloud-api/Cargo.toml
+++ b/src/cloud-api/Cargo.toml
@@ -13,9 +13,9 @@ workspace = true
 anyhow = "1.0.98"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 reqwest = { version = "0.11.4", features = ["json"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 url = "2.2.2"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = "1.44.1"
 mz-frontegg-client = { path = "../frontegg-client" }
 mz-frontegg-auth = { path = "../frontegg-auth" }
diff --git a/src/cloud-resources/Cargo.toml b/src/cloud-resources/Cargo.toml
index 5905a84a9f25c..0504f484192c8 100644
--- a/src/cloud-resources/Cargo.toml
+++ b/src/cloud-resources/Cargo.toml
@@ -19,11 +19,11 @@ mz-ore = { path = "../ore", default-features = false, features = ["async"] }
 mz-server-core = { path = "../server-core", default-features = false }
 rand = "0.8.5"
 schemars = { version = "1.0.4", features = ["uuid1"] }
-semver = "1.0.26"
-serde = "1.0.219"
-serde_json = "1.0.127"
+semver = "1.0.27"
+serde = "1.0.226"
+serde_json = "1.0.145"
 tracing = "0.1.37"
-uuid = { version = "1.17", features = ["serde", "v4"] }
+uuid = { version = "1.18", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 async-trait = { version = "0.1.88", optional = true }
diff --git a/src/cluster-client/Cargo.toml b/src/cluster-client/Cargo.toml
index f63bceb4cec3b..e4c59f0b7a900 100644
--- a/src/cluster-client/Cargo.toml
+++ b/src/cluster-client/Cargo.toml
@@ -14,9 +14,9 @@ anyhow = "1.0.98"
 mz-ore = { path = "../ore", features = ["tracing"] }
 mz-repr = { path = "../repr" }
 prometheus = { version = "0.13.4", default-features = false }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
-uuid = "1.17.0"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/cluster/Cargo.toml b/src/cluster/Cargo.toml
index f3027d3781acf..15c136425fca7 100644
--- a/src/cluster/Cargo.toml
+++ b/src/cluster/Cargo.toml
@@ -20,11 +20,11 @@ mz-cluster-client = { path = "../cluster-client" }
 mz-ore = { path = "../ore", features = ["async", "process", "tracing"] }
 mz-service = { path = "../service" }
 rand = "0.8.5"
-regex = "1.11.1"
+regex = "1.11.2"
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "net"] }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/clusterd/Cargo.toml b/src/clusterd/Cargo.toml
index 10c76ee03f59c..b1cbb10b732db 100644
--- a/src/clusterd/Cargo.toml
+++ b/src/clusterd/Cargo.toml
@@ -40,7 +40,7 @@ mz-timely-util = { path = "../timely-util" }
 mz-txn-wal = { path = "../txn-wal" }
 nix = { version = "0.30.1", features = ["fs"] }
 num_cpus = "1.17.0"
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "test-util"] }
 tower = "0.5.2"
 tracing = "0.1.37"
diff --git a/src/compute-client/Cargo.toml b/src/compute-client/Cargo.toml
index 7a4cc55c7deff..e4cd296041096 100644
--- a/src/compute-client/Cargo.toml
+++ b/src/compute-client/Cargo.toml
@@ -33,13 +33,13 @@ mz-storage-client = { path = "../storage-client" }
 mz-storage-types = { path = "../storage-types" }
 mz-tracing = { path = "../tracing" }
 prometheus = { version = "0.13.4", default-features = false }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
-thiserror = "2.0.12"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
+thiserror = "2.0.16"
 timely = "0.24.0"
 tokio = "1.44.1"
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["serde", "v4"] }
+uuid = { version = "1.18.1", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/compute-types/Cargo.toml b/src/compute-types/Cargo.toml
index fd7005b781daf..d186d91a5eca3 100644
--- a/src/compute-types/Cargo.toml
+++ b/src/compute-types/Cargo.toml
@@ -19,7 +19,7 @@ mz-expr = { path = "../expr" }
 mz-ore = { path = "../ore", features = ["tracing", "metrics"] }
 mz-repr = { path = "../repr", features = ["tracing"] }
 mz-storage-types = { path = "../storage-types" }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 timely = "0.24.0"
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/compute/Cargo.toml b/src/compute/Cargo.toml
index 32f639fd36f5e..0fced96d05d53 100644
--- a/src/compute/Cargo.toml
+++ b/src/compute/Cargo.toml
@@ -39,12 +39,12 @@ mz-timely-util = { path = "../timely-util" }
 mz-txn-wal = { path = "../txn-wal" }
 prometheus = { version = "0.13.4", default-features = false }
 scopeguard = "1.2.0"
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 smallvec = { version = "1.15.1", features = ["serde", "union"] }
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "net"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["serde", "v4"] }
+uuid = { version = "1.18.1", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [target.'cfg(not(target_os = "macos"))'.dependencies]
diff --git a/src/controller/Cargo.toml b/src/controller/Cargo.toml
index c85e23239fb5d..9a29a729bda15 100644
--- a/src/controller/Cargo.toml
+++ b/src/controller/Cargo.toml
@@ -33,13 +33,13 @@ mz-storage-client = { path = "../storage-client" }
 mz-storage-controller = { path = "../storage-controller" }
 mz-storage-types = { path = "../storage-types" }
 mz-txn-wal = { path = "../txn-wal" }
-regex = "1.11.1"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.140"
+regex = "1.11.2"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 timely = "0.24.0"
 tokio = "1.44.1"
 tracing = "0.1.37"
-uuid = { version = "1.17.0" }
+uuid = { version = "1.18.1" }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/durable-cache/Cargo.toml b/src/durable-cache/Cargo.toml
index 1e22f6b0e2d09..dfb5d65a73435 100644
--- a/src/durable-cache/Cargo.toml
+++ b/src/durable-cache/Cargo.toml
@@ -22,11 +22,11 @@ mz-persist-client = { path = "../persist-client" }
 mz-timely-util = { path = "../timely-util" }
 prometheus = { version = "0.13.4", default-features = false }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-serde = { version = "1.0.219", features = ["derive", "rc"] }
+serde = { version = "1.0.226", features = ["derive", "rc"] }
 timely = "0.24.0"
 tokio = { version = "1.44.1", default-features = false, features = ["rt", "rt-multi-thread"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/dyncfg-file/Cargo.toml b/src/dyncfg-file/Cargo.toml
index e42070539ccac..b33395ae9b799 100644
--- a/src/dyncfg-file/Cargo.toml
+++ b/src/dyncfg-file/Cargo.toml
@@ -15,7 +15,7 @@ anyhow = "1.0.97"
 humantime = "2.2.0"
 mz-dyncfg = { path = "../dyncfg" }
 mz-ore = { path = "../ore" }
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tokio = { version = "1.44.1", features = ["fs"] }
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/dyncfg/Cargo.toml b/src/dyncfg/Cargo.toml
index 21938165b4703..fdfe69a8df052 100644
--- a/src/dyncfg/Cargo.toml
+++ b/src/dyncfg/Cargo.toml
@@ -13,8 +13,8 @@ workspace = true
 [dependencies]
 humantime = "2.2.0"
 mz-ore = { path = "../ore", default-features = false, features = ["proptest", "test"] }
-serde = { version = "1.0.219", features = ["derive", "rc"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive", "rc"] }
+serde_json = "1.0.145"
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index b29873907a7a1..caf8a1a812363 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -94,22 +94,22 @@ rdkafka-sys = { version = "4.3.0", features = [
     "zstd",
 ] }
 rand = "0.8.5"
-regex = { version = "1.11.1", optional = true }
+regex = { version = "1.11.2", optional = true }
 reqwest = { version = "0.11.13", features = ["json"] }
 rlimit = "0.10.2"
-semver = "1.0.26"
+semver = "1.0.27"
 sentry-tracing = "0.38.1"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 shell-words = "1.1.0"
 stacker = "0.1.21"
 sysctl = "0.6.0"
 tempfile = "3.20.0"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["sync"] }
 tokio-postgres = { version = "0.7.8" }
 tokio-stream = { version = "0.1.17", features = ["net"] }
-tokio-metrics = "0.4.2"
+tokio-metrics = "0.4.5"
 tower = { version = "0.5.2", features = ["buffer", "limit", "load-shed"] }
 tower-http = { version = "0.6.6", features = [
     "cors",
@@ -126,7 +126,7 @@ tracing-opentelemetry = { version = "0.25.0" }
 tracing-subscriber = "0.3.19"
 tungstenite = { version = "0.24.0" }
 url = "2.3.1"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
@@ -156,7 +156,7 @@ rdkafka = { version = "0.29.0", features = [
     "zstd",
 ] }
 reqwest = { version = "0.11.13", features = ["blocking"] }
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 serde_urlencoded = "0.7.1"
 similar-asserts = "1.7"
 timely = "0.24.0"
diff --git a/src/expr-parser/Cargo.toml b/src/expr-parser/Cargo.toml
index a2298d6b982ee..e07b0006e6f26 100644
--- a/src/expr-parser/Cargo.toml
+++ b/src/expr-parser/Cargo.toml
@@ -13,8 +13,8 @@ workspace = true
 mz-expr = { path = "../expr" }
 mz-ore = { path = "../ore" }
 mz-repr = { path = "../repr" }
-proc-macro2 = { version = "1.0.95", features = ["span-locations"] }
-syn = { version = "2.0.18", features = ["full"] }
+proc-macro2 = { version = "1.0.101", features = ["span-locations"] }
+syn = { version = "2.0.104", features = ["full"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/expr-test-util/Cargo.toml b/src/expr-test-util/Cargo.toml
index 6e4337283df3a..fdb3209d6995d 100644
--- a/src/expr-test-util/Cargo.toml
+++ b/src/expr-test-util/Cargo.toml
@@ -16,9 +16,9 @@ mz-lowertest = { path = "../lowertest" }
 mz-ore = { path = "../ore" }
 mz-repr = { path = "../repr" }
 mz-repr-test-util = { path = "../repr-test-util" }
-proc-macro2 = "1.0.95"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+proc-macro2 = "1.0.101"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/expr/Cargo.toml b/src/expr/Cargo.toml
index d1f33ee5e5671..3c8894fc1d859 100644
--- a/src/expr/Cargo.toml
+++ b/src/expr/Cargo.toml
@@ -53,18 +53,18 @@ num_enum = "0.7.4"
 ordered-float = { version = "5.0.0", features = ["serde"] }
 paste = "1.0.11"
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-regex = "1.11.1"
-regex-syntax = "0.8.5"
+regex = "1.11.2"
+regex-syntax = "0.8.6"
 seahash = "4.1.0"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 sha1 = "0.10.6"
 sha2 = "0.10.9"
 subtle = "2.6.1"
 tracing = "0.1.37"
 uncased = "0.9.7"
 unicode-normalization = "0.1.24"
-uuid = { version = "1.17.0", features = ["v5"] }
+uuid = { version = "1.18.1", features = ["v5"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/fivetran-destination/Cargo.toml b/src/fivetran-destination/Cargo.toml
index 26a1137beedd1..9e57ef76e16ab 100644
--- a/src/fivetran-destination/Cargo.toml
+++ b/src/fivetran-destination/Cargo.toml
@@ -24,16 +24,16 @@ postgres-openssl = "0.5.0"
 postgres-protocol = { version = "0.6.5" }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 prost-types = { version = "0.13.5" }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 sha2 = "0.10.9"
 socket2 = "0.5.10"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tonic = { version = "0.12.1", features = ["gzip"] }
 tokio = { version = "1.44.1", features = ["rt"] }
 tokio-postgres = { version = "0.7.8" }
 tokio-stream = { version = "0.1.17", features = ["net"] }
-tokio-util = { version = "0.7.15", features = ["io"] }
+tokio-util = { version = "0.7.16", features = ["io"] }
 tracing = "0.1.37"
 tracing-core = "0.1.34"
 tracing-subscriber = "0.3.19"
diff --git a/src/frontegg-auth/Cargo.toml b/src/frontegg-auth/Cargo.toml
index 77305a39122ab..5c01e95dcde21 100644
--- a/src/frontegg-auth/Cargo.toml
+++ b/src/frontegg-auth/Cargo.toml
@@ -23,12 +23,12 @@ prometheus = { version = "0.13.4", default-features = false }
 reqwest = { version = "0.11.13", features = ["json"] }
 reqwest-middleware = "0.2.2"
 reqwest-retry = "0.2.2"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
-thiserror = "2.0.12"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["macros"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["serde"] }
+uuid = { version = "1.18.1", features = ["serde"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/frontegg-client/Cargo.toml b/src/frontegg-client/Cargo.toml
index df6cb3c76605e..7bde2cacd1c74 100644
--- a/src/frontegg-client/Cargo.toml
+++ b/src/frontegg-client/Cargo.toml
@@ -14,11 +14,11 @@ jsonwebtoken = "9.3.1"
 mz-frontegg-auth = { path = "../frontegg-auth" }
 mz-ore = { path = "../ore", features = ["network"] }
 reqwest = { version = "0.11.13", features = ["json"] }
-serde = { version = "1.0.219", features = ["derive"] }
-thiserror = "2.0.12"
+serde = { version = "1.0.226", features = ["derive"] }
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["macros"] }
-serde_json = "1.0.127"
-uuid = { version = "1.17.0", features = ["serde"] }
+serde_json = "1.0.145"
+uuid = { version = "1.18.1", features = ["serde"] }
 url = "2.3.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/frontegg-mock/Cargo.toml b/src/frontegg-mock/Cargo.toml
index c04d595620d5e..af6a038d721fe 100644
--- a/src/frontegg-mock/Cargo.toml
+++ b/src/frontegg-mock/Cargo.toml
@@ -20,12 +20,12 @@ hyper = { version = "1.4.1", features = ["http1", "server"] }
 jsonwebtoken = "9.3.1"
 mz-frontegg-auth = { path = "../frontegg-auth" }
 mz-ore = { path = "../ore", default-features = false, features = ["cli"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 tokio = { version = "1.44.1", default-features = false }
 tracing = "0.1.37"
 tracing-subscriber = "0.3.19"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/http-util/Cargo.toml b/src/http-util/Cargo.toml
index b38ba9b4544e8..b0a152f862425 100644
--- a/src/http-util/Cargo.toml
+++ b/src/http-util/Cargo.toml
@@ -20,8 +20,8 @@ hyper = { version = "1.4.1", features = ["http1", "server"] }
 include_dir = "0.7.4"
 mz-ore = { path = "../ore", default-features = false, features = ["metrics", "tracing"] }
 prometheus = { version = "0.13.4", default-features = false }
-serde = "1.0.219"
-serde_json = { version = "1.0.127" }
+serde = "1.0.226"
+serde_json = { version = "1.0.145" }
 tokio = { version = "1.44.1", features = ["macros", "rt-multi-thread"] }
 tower = { version = "0.5.2", features = ["balance", "buffer", "filter", "limit", "retry", "timeout", "util"] }
 tower-http = { version = "0.6.6", features = ["auth", "cors", "map-response-body", "trace", "util"] }
diff --git a/src/interchange/Cargo.toml b/src/interchange/Cargo.toml
index 4a62a9f66d756..70b5c173013cf 100644
--- a/src/interchange/Cargo.toml
+++ b/src/interchange/Cargo.toml
@@ -32,11 +32,11 @@ ordered-float = { version = "5.0.0", features = ["serde"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 prost-reflect = "0.15.3"
 seahash = "4"
-serde_json = "1.0.140"
+serde_json = "1.0.145"
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["macros", "net", "rt", "rt-multi-thread", "time"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["serde"] }
+uuid = { version = "1.18.1", features = ["serde"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/kafka-util/Cargo.toml b/src/kafka-util/Cargo.toml
index 820d2cefe53c5..a80fe16860b58 100644
--- a/src/kafka-util/Cargo.toml
+++ b/src/kafka-util/Cargo.toml
@@ -30,10 +30,10 @@ num_cpus = "1.17.0"
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 rand = "0.8.5"
 rdkafka = { version = "0.29.0", features = ["cmake-build", "ssl-vendored", "libz-static", "zstd"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 tokio = { version = "1.44.1", features = ["macros", "rt", "sync"] }
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tracing = "0.1.37"
 url = "2.3.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/license-keys/Cargo.toml b/src/license-keys/Cargo.toml
index 9d8fe4cc66104..57e6a7fa6feb1 100644
--- a/src/license-keys/Cargo.toml
+++ b/src/license-keys/Cargo.toml
@@ -17,14 +17,14 @@ required-features = ["signing"]
 [dependencies]
 anyhow = "1.0.98"
 jsonwebtoken = "9.3.1"
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 
 aws-sdk-kms = { version = "1.38.0", default-features = false, features = ["rt-tokio"], optional = true }
 base64 = { version = "0.22.1", optional = true }
 pem = { version = "3.0.5", optional = true }
-serde_json = { version = "1.0.127", optional = true }
+serde_json = { version = "1.0.145", optional = true }
 sha2 = { version = "0.10.9", optional = true }
-uuid = { version = "1.17.0", features = ["v4"], optional = true }
+uuid = { version = "1.18.1", features = ["v4"], optional = true }
 
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/lowertest-derive/Cargo.toml b/src/lowertest-derive/Cargo.toml
index 4699afeb53d01..45836246613d2 100644
--- a/src/lowertest-derive/Cargo.toml
+++ b/src/lowertest-derive/Cargo.toml
@@ -13,9 +13,9 @@ workspace = true
 proc-macro = true
 
 [dependencies]
-proc-macro2 = "1.0.95"
+proc-macro2 = "1.0.101"
 quote = "1.0.40"
-syn = { version = "1.0.107", features = ["extra-traits", "printing"] }
+syn = { version = "2.0.104", features = ["extra-traits", "printing"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/lowertest/Cargo.toml b/src/lowertest/Cargo.toml
index 32bda279f31ed..92ec48ff721f7 100644
--- a/src/lowertest/Cargo.toml
+++ b/src/lowertest/Cargo.toml
@@ -12,9 +12,9 @@ workspace = true
 [dependencies]
 mz-lowertest-derive = { path = "../lowertest-derive", default-features = false }
 mz-ore = { path = "../ore", features = ["test"], default-features = false }
-proc-macro2 = "1.0.95"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+proc-macro2 = "1.0.101"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 itertools = "0.14.0"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/lsp-server/Cargo.toml b/src/lsp-server/Cargo.toml
index 555ce0cf23dde..7dda19b6ab706 100644
--- a/src/lsp-server/Cargo.toml
+++ b/src/lsp-server/Cargo.toml
@@ -11,15 +11,15 @@ workspace = true
 
 [dependencies]
 ropey = "1.6.1"
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tokio = { version = "1.44.1", features = ["sync"] }
 tower-lsp = { version = "0.20.0", features = ["proposed"]}
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 mz-build-info = { path = "../build-info" }
 mz-sql-parser = { path = "../sql-parser", default-features = false  }
 mz-sql-lexer = { path = "../sql-lexer", default-features = false }
 mz-ore = { path = "../ore", default-features = false, features = ["async", "test"] }
-regex = "1.11.1"
+regex = "1.11.2"
 mz-sql-pretty = { path = "../sql-pretty" }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/metabase/Cargo.toml b/src/metabase/Cargo.toml
index 7d6a61c67b296..93747c274329b 100644
--- a/src/metabase/Cargo.toml
+++ b/src/metabase/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 reqwest = { version = "0.11.13", features = ["json"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/metrics/Cargo.toml b/src/metrics/Cargo.toml
index fac8bdaeef77e..f2ea4693ce312 100644
--- a/src/metrics/Cargo.toml
+++ b/src/metrics/Cargo.toml
@@ -16,9 +16,9 @@ mz-dyncfg = { path = "../dyncfg" }
 mz-ore = { path = "../ore", features = ["metrics"] }
 paste = "1.0"
 prometheus = { version = "0.13.4", default-features = false }
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["sync", "time"] }
-tokio-util = { version = "0.7.15" }
+tokio-util = { version = "0.7.16" }
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/mysql-util/Cargo.toml b/src/mysql-util/Cargo.toml
index 53e6ec6083e48..cfc7876f6766b 100644
--- a/src/mysql-util/Cargo.toml
+++ b/src/mysql-util/Cargo.toml
@@ -35,13 +35,13 @@ prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 fancy-regex = "0.14.0"
-regex = "1.11.1"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127" }
-thiserror = "2.0.12"
+regex = "1.11.2"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
+thiserror = "2.0.16"
 tracing = "0.1.37"
 url = "2.3.1"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [build-dependencies]
diff --git a/src/mz-debug/Cargo.toml b/src/mz-debug/Cargo.toml
index bb2cdd7e8a1a7..669075c425048 100644
--- a/src/mz-debug/Cargo.toml
+++ b/src/mz-debug/Cargo.toml
@@ -23,13 +23,13 @@ mz-ore = { path = "../ore", features = ["cli", "test"] }
 mz-server-core = { path = "../server-core"}
 mz-tls-util = { path = "../tls-util" }
 postgres-openssl = { version = "0.5.0" }
-regex = "1.11.1"
+regex = "1.11.2"
 reqwest = { version = "0.11", features = ["stream"] }
-serde = "1.0.219"
+serde = "1.0.226"
 serde_yaml = "0.9.34"
 tokio = "1.44.1"
 tokio-postgres = { version = "0.7.8" }
-tokio-util = { version = "0.7.15", features = ["io"] }
+tokio-util = { version = "0.7.16", features = ["io"] }
 tracing = "0.1.37"
 tracing-subscriber = { version = "0.3.19", default-features = false, features = ["env-filter", "fmt"] }
 url = { version = "2.3.1", features = ["serde"] }
diff --git a/src/mz/Cargo.toml b/src/mz/Cargo.toml
index 2931841cf9c9a..e4fdac9818133 100644
--- a/src/mz/Cargo.toml
+++ b/src/mz/Cargo.toml
@@ -27,17 +27,17 @@ openssl-probe = "0.1.6"
 hyper = "1.4.1"
 reqwest = { version = "0.12", features = ["blocking", "json", "default-tls", "charset", "http2"], default-features = false }
 rpassword = "7.4.0"
-semver = "1.0.26"
-serde = { version = "1.0.219", features = ["derive"] }
+semver = "1.0.27"
+serde = { version = "1.0.226", features = ["derive"] }
 serde-aux = "4.7.0"
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tabled = "0.20.0"
 time = "0.3.17"
 tokio = { version = "1.44.1", features = ["full"] }
 toml = "0.8.22"
 toml_edit = { version = "0.22.26", features = ["serde"] }
-thiserror = "2.0.12"
-uuid = "1.17.0"
+thiserror = "2.0.16"
+uuid = "1.18.1"
 url = "2.3.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/orchestrator-kubernetes/Cargo.toml b/src/orchestrator-kubernetes/Cargo.toml
index 14faf1b909d63..9a43b896a4838 100644
--- a/src/orchestrator-kubernetes/Cargo.toml
+++ b/src/orchestrator-kubernetes/Cargo.toml
@@ -25,8 +25,8 @@ mz-repr = { path = "../repr", default-features = false }
 k8s-openapi = { version = "0.26.0", features = ["v1_31"] }
 kube = { version = "2.0.0", default-features = false, features = ["client", "runtime", "ws"] }
 reqwest = { version = "0.11.13", features = ["json"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 sha2 = "0.10.9"
 tokio = "1.44.1"
 tracing = "0.1.37"
diff --git a/src/orchestrator-process/Cargo.toml b/src/orchestrator-process/Cargo.toml
index 020f3c0daf261..95d9d76493ee3 100644
--- a/src/orchestrator-process/Cargo.toml
+++ b/src/orchestrator-process/Cargo.toml
@@ -24,8 +24,8 @@ mz-ore = { path = "../ore", default-features = false, features = ["async", "netw
 mz-repr = { path = "../repr", default-features = false }
 mz-secrets = { path = "../secrets", default-features = false }
 nix = { version = "0.30.1", features = ["signal"] }
-serde = "1.0.219"
-serde_json = "1.0.127"
+serde = "1.0.226"
+serde_json = "1.0.145"
 scopeguard = "1.2.0"
 sha1 = "0.10.6"
 sysinfo = "0.29.11"
diff --git a/src/orchestratord/Cargo.toml b/src/orchestratord/Cargo.toml
index d1e26f7f9150e..df93cf3f825d2 100644
--- a/src/orchestratord/Cargo.toml
+++ b/src/orchestratord/Cargo.toml
@@ -34,17 +34,17 @@ mz-server-core = { path = "../server-core", default-features = false }
 prometheus = { version = "0.13.4", default-features = false }
 rand = "0.8.5"
 reqwest = { version = "0.12", features = ["cookies", "json"] }
-semver = "1.0.16"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+semver = "1.0.27"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 sha2 = "0.10.9"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = "1.44.1"
 tokio-postgres = "0.7.8"
 tower-http = "0.6.6"
 tracing = "0.1.37"
 urlencoding = "2.1.3"
-uuid = { version = "1.17", features = ["serde", "v4"] }
+uuid = { version = "1.18", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/ore-proc/Cargo.toml b/src/ore-proc/Cargo.toml
index 6a1ede772e261..76186e693e306 100644
--- a/src/ore-proc/Cargo.toml
+++ b/src/ore-proc/Cargo.toml
@@ -16,7 +16,7 @@ proc-macro = true
 [dependencies]
 proc-macro2 = "1.0"
 quote = { version = "1.0" }
-syn = { version = "1.0", features = ["extra-traits", "full"] }
+syn = { version = "2.0", features = ["extra-traits", "full"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index ed830f3a763c2..5f51844299264 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -51,7 +51,7 @@ smallvec = { version = "1.15.1", optional = true }
 stacker = { version = "0.1.21", optional = true }
 sentry = { version = "0.38.1", optional = true, default-features = false, features = ["backtrace", "contexts", "debug-images", "transport"] }
 sentry-panic = { version = "0.38.1", optional = true }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 tokio = { version = "1.44.1", features = [
     "io-util",
     "net",
@@ -60,7 +60,7 @@ tokio = { version = "1.44.1", features = [
     "time",
 ], optional = true }
 tokio-openssl = { version = "0.6.5", optional = true }
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tracing-capture = { version = "0.1.0", optional = true }
 # TODO(guswynn): determine, when, if ever, we can remove `tracing-log`
 # The `tracing-log` feature here is load-bearing: While our busiest-logging dependency (`rdkafka`) is now hooked-up
@@ -74,7 +74,7 @@ tracing-subscriber = { version = "0.3.19", default-features = false, features =
     "json",
     "tracing-log",
 ], optional = true }
-uuid = { version = "1.17.0", optional = true, features = ["v4", "v7"] }
+uuid = { version = "1.18.1", optional = true, features = ["v4", "v7"] }
 url = { version = "2.3.1", features = ["serde"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
@@ -101,7 +101,7 @@ criterion = { version = "0.6.0", features = ["async_tokio"] }
 mz-ore = { path = "../ore", features = ["id_gen", "chrono"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 scopeguard = "1.2.0"
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tokio = { version = "1.44.1", features = ["macros", "rt-multi-thread"] }
 tokio-test = "0.4.4"
 tracing-subscriber = "0.3.19"
diff --git a/src/persist-cli/Cargo.toml b/src/persist-cli/Cargo.toml
index 54132a5b28eef..73a122be7929f 100644
--- a/src/persist-cli/Cargo.toml
+++ b/src/persist-cli/Cargo.toml
@@ -39,13 +39,13 @@ mz-txn-wal = { path = "../txn-wal" }
 num_cpus = "1.17.0"
 num_enum = "0.7.4"
 prometheus = { version = "0.13.4", default-features = false }
-serde = { version = "1.0.219", features = ["derive", "rc"] }
-serde_json = "1.0.140"
+serde = { version = "1.0.226", features = ["derive", "rc"] }
+serde_json = "1.0.145"
 timely = "0.24.0"
 tokio = { version = "1.44.1", default-features = false, features = ["macros", "sync", "rt", "rt-multi-thread", "time"] }
 tracing = "0.1.37"
 url = "2.3.1"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/persist-client/Cargo.toml b/src/persist-client/Cargo.toml
index 347f869ccb43d..691e20ed38a6d 100644
--- a/src/persist-client/Cargo.toml
+++ b/src/persist-client/Cargo.toml
@@ -56,17 +56,17 @@ proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 sentry-tracing = "0.38.1"
-semver = { version = "1.0.26", features = ["serde"] }
-serde = { version = "1.0.219", features = ["derive", "rc"] }
-serde_json = "1.0.140"
+semver = { version = "1.0.27", features = ["serde"] }
+serde = { version = "1.0.226", features = ["derive", "rc"] }
+serde_json = "1.0.145"
 timely = "0.24.0"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", default-features = false, features = ["macros", "sync", "rt", "rt-multi-thread", "time"] }
-tokio-metrics = "0.4.2"
+tokio-metrics = "0.4.5"
 tokio-stream = "0.1.17"
 tonic = "0.12.1"
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/persist-proc/Cargo.toml b/src/persist-proc/Cargo.toml
index a8424147d5a81..3fde6219e8a5c 100644
--- a/src/persist-proc/Cargo.toml
+++ b/src/persist-proc/Cargo.toml
@@ -14,7 +14,7 @@ proc-macro = true
 [dependencies]
 proc-macro2 = "1.0"
 quote = { version = "1.0" }
-syn = { version = "1.0", features = ["extra-traits", "full"] }
+syn = { version = "2.0", features = ["extra-traits", "full"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/persist-types/Cargo.toml b/src/persist-types/Cargo.toml
index 991427671d807..317215275fcfd 100644
--- a/src/persist-types/Cargo.toml
+++ b/src/persist-types/Cargo.toml
@@ -24,11 +24,11 @@ parquet = { version = "55.2.0", default-features = false, features = ["arrow"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.140" }
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
 timely = "0.24.0"
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/persist/Cargo.toml b/src/persist/Cargo.toml
index ce9bc80808dd2..8f677f0b49d16 100644
--- a/src/persist/Cargo.toml
+++ b/src/persist/Cargo.toml
@@ -59,14 +59,14 @@ proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 rand = { version = "0.8.5", features = ["small_rng"] }
 reqwest = { version = "0.12", features = ["blocking", "json", "default-tls", "charset", "http2"], default-features = false }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 timely = "0.24.0"
 tokio = { version = "1.44.1", default-features = false, features = ["fs", "macros", "sync", "rt", "rt-multi-thread"] }
 tokio-postgres = { version = "0.7.8" }
 tracing = "0.1.37"
 url = "2.3.1"
 urlencoding = "2.1.3"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 
@@ -79,7 +79,7 @@ features = ["asm"]
 
 [dev-dependencies]
 mz-ore = { path = "../ore", default-features = false, features = ["test"] }
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tempfile = "3.20.0"
 
 [build-dependencies]
diff --git a/src/pgcopy/Cargo.toml b/src/pgcopy/Cargo.toml
index 871b7ce5a4cba..f0cff8566d9e0 100644
--- a/src/pgcopy/Cargo.toml
+++ b/src/pgcopy/Cargo.toml
@@ -17,7 +17,7 @@ mz-ore = { path = "../ore", features = [] }
 mz-pgrepr = { path = "../pgrepr" }
 mz-repr = { path = "../repr" }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/pgrepr/Cargo.toml b/src/pgrepr/Cargo.toml
index 22b316385b627..f7a35c3ad9a81 100644
--- a/src/pgrepr/Cargo.toml
+++ b/src/pgrepr/Cargo.toml
@@ -23,7 +23,7 @@ postgres-types = { version = "0.2.5", features = [
     "with-chrono-0_4",
     "with-uuid-1",
 ] }
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/pgtest/Cargo.toml b/src/pgtest/Cargo.toml
index 57ea208963c30..e455bae7347cd 100644
--- a/src/pgtest/Cargo.toml
+++ b/src/pgtest/Cargo.toml
@@ -17,8 +17,8 @@ datadriven = "0.8.0"
 fallible-iterator = "0.2.0"
 mz-ore = { path = "../ore", features = ["cli"] }
 postgres-protocol = { version = "0.6.5" }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/pgtz/Cargo.toml b/src/pgtz/Cargo.toml
index 9dbfcad62bc43..68ddf3c686c55 100644
--- a/src/pgtz/Cargo.toml
+++ b/src/pgtz/Cargo.toml
@@ -20,7 +20,7 @@ phf = { version = "0.11.1", default-features = false }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 uncased = "0.9.7"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/pgwire/Cargo.toml b/src/pgwire/Cargo.toml
index a19fbbed56805..2f507e001ed58 100644
--- a/src/pgwire/Cargo.toml
+++ b/src/pgwire/Cargo.toml
@@ -36,11 +36,11 @@ postgres = { version = "0.19.5" }
 tokio = "1.44.1"
 tokio-stream = "0.1.17"
 tokio-openssl = "0.6.5"
-tokio-util = { version = "0.7.15", features = ["codec"] }
-tokio-metrics = "0.4.2"
+tokio-util = { version = "0.7.16", features = ["codec"] }
+tokio-metrics = "0.4.5"
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 
 [package.metadata.cargo-udeps.ignore]
 normal = ["workspace-hack"]
diff --git a/src/postgres-util/Cargo.toml b/src/postgres-util/Cargo.toml
index 8fdad0b3fa7ff..f671c3cbde9b3 100644
--- a/src/postgres-util/Cargo.toml
+++ b/src/postgres-util/Cargo.toml
@@ -31,8 +31,8 @@ proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = [
     "no-recursion-limit",
 ], optional = true }
-serde = { version = "1.0.219", features = ["derive"], optional = true }
-thiserror = "2.0.12"
+serde = { version = "1.0.226", features = ["derive"], optional = true }
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync"] }
 tokio-postgres = { version = "0.7.8" }
 tracing = "0.1.37"
diff --git a/src/prof-http/Cargo.toml b/src/prof-http/Cargo.toml
index 6cb01d238bc91..267a89f562c0d 100644
--- a/src/prof-http/Cargo.toml
+++ b/src/prof-http/Cargo.toml
@@ -26,7 +26,7 @@ mz-ore = { path = "../ore", default-features = false }
 mz-prof = { path = "../prof", default-features = false }
 jemalloc_pprof = { version = "0.7", optional = true }
 pprof_util = "0.7"
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 tokio = { version = "1.44.1", features = ["time"] }
 tracing = { version = "0.1.37", optional = true }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/proto/Cargo.toml b/src/proto/Cargo.toml
index be0eb2b783f47..1460654c262f8 100644
--- a/src/proto/Cargo.toml
+++ b/src/proto/Cargo.toml
@@ -21,12 +21,12 @@ num = "0.4.3"
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-regex = "1.11.1"
-serde = { version = "1.0.219", features = ["derive", "rc"] }
-serde_json = { version = "1.0.127", features = ["arbitrary_precision"] }
+regex = "1.11.2"
+serde = { version = "1.0.226", features = ["derive", "rc"] }
+serde_json = { version = "1.0.145", features = ["arbitrary_precision"] }
 tokio-postgres = { version = "0.7.8", optional = true }
 url = { version = "2.3.1", features = ["serde"] }
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/repr-test-util/Cargo.toml b/src/repr-test-util/Cargo.toml
index c12d8f7bf4cb0..ac40c0530beec 100644
--- a/src/repr-test-util/Cargo.toml
+++ b/src/repr-test-util/Cargo.toml
@@ -15,7 +15,7 @@ itertools = "0.14.0"
 mz-lowertest = { path = "../lowertest" }
 mz-ore = { path = "../ore" }
 mz-repr = { path = "../repr" }
-proc-macro2 = "1.0.95"
+proc-macro2 = "1.0.101"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/repr/Cargo.toml b/src/repr/Cargo.toml
index c6b52b2cafb70..68391634c44b6 100644
--- a/src/repr/Cargo.toml
+++ b/src/repr/Cargo.toml
@@ -61,10 +61,10 @@ num_enum = "0.7.4"
 ordered-float = { version = "5.0.0", features = ["serde"] }
 postgres-protocol = { version = "0.6.5" }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-regex = "1.11.1"
+regex = "1.11.2"
 ryu = "1.0.20"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127", features = ["arbitrary_precision", "preserve_order"] }
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145", features = ["arbitrary_precision", "preserve_order"] }
 smallvec = { version = "1.15.1", features = ["serde", "union"] }
 static_assertions = "1.1"
 strsim = "0.11.1"
@@ -72,10 +72,10 @@ timely = "0.24.0"
 tokio-postgres = { version = "0.7.8" }
 tracing-core = "0.1.34"
 url = { version = "2.3.1", features = ["serde"] }
-uuid = { version = "1.17.0", features = ["serde"] }
+uuid = { version = "1.18.1", features = ["serde"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tracing = { version = "0.1.37" }
 
 # for the tracing feature
diff --git a/src/rocksdb-types/Cargo.toml b/src/rocksdb-types/Cargo.toml
index e721e861158be..c7267889581b6 100644
--- a/src/rocksdb-types/Cargo.toml
+++ b/src/rocksdb-types/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = "1.0.98"
 mz-ore = { path = "../ore", features = ["async", "metrics", "test"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 uncased = "0.9.7"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/rocksdb/Cargo.toml b/src/rocksdb/Cargo.toml
index 126cf9382f9e7..19cfa068f89b3 100644
--- a/src/rocksdb/Cargo.toml
+++ b/src/rocksdb/Cargo.toml
@@ -19,9 +19,9 @@ mz-rocksdb-types = { path = "../rocksdb-types" }
 num_cpus = "1.17.0"
 prometheus = { version = "0.13.4", default-features = false }
 tokio = { version = "1.44.1", features = ["macros", "sync", "rt"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127" }
-thiserror = "2.0.12"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
+thiserror = "2.0.16"
 tracing = "0.1.37"
 # These features use compression code that are licensed with:
 # https://github.com/google/snappy/blob/main/COPYING
diff --git a/src/segment/Cargo.toml b/src/segment/Cargo.toml
index 2ae922b356a22..b350c4ba6f2b9 100644
--- a/src/segment/Cargo.toml
+++ b/src/segment/Cargo.toml
@@ -13,11 +13,11 @@ workspace = true
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 mz-ore = { path = "../ore", features = ["async"], default-features = false }
 segment = { version = "0.2.6", features = ["native-tls-vendored"], default-features = false }
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 time = "0.3.17"
 tokio = { version = "1.44.1", features = ["sync"] }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [features]
diff --git a/src/server-core/Cargo.toml b/src/server-core/Cargo.toml
index bab7e86d3f118..63739e4bfbc12 100644
--- a/src/server-core/Cargo.toml
+++ b/src/server-core/Cargo.toml
@@ -16,7 +16,7 @@ clap = { version = "4.5.23", features = ["derive", "env"] }
 openssl = { version = "0.10.73", features = ["vendored"] }
 schemars = { version = "1.0.4" }
 scopeguard = "1.2.0"
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 socket2 = "0.5.10"
 tokio-stream = "0.1.17"
 proxy-header = "0.1.2"
@@ -25,9 +25,9 @@ futures = "0.3.31"
 mz-dyncfg = { path = "../dyncfg", default-features = false }
 mz-ore = { path = "../ore", default-features = false, features = ["async", "network", "test"] }
 tokio = "1.44.1"
-tokio-metrics = "0.4.2"
+tokio-metrics = "0.4.5"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 
 [package.metadata.cargo-udeps.ignore]
 normal = ["workspace-hack"]
diff --git a/src/service/Cargo.toml b/src/service/Cargo.toml
index f7bb137dad486..3664b075264ff 100644
--- a/src/service/Cargo.toml
+++ b/src/service/Cargo.toml
@@ -27,8 +27,8 @@ mz-ore = { path = "../ore", default-features = false }
 os_info = "3.11.0"
 pin-project = "1.1.10"
 prometheus = { version = "0.13.4", default-features = false }
-semver = { version = "1.0.26", features = ["serde"] }
-serde = { version = "1.0.219", features = ["derive"] }
+semver = { version = "1.0.27", features = ["serde"] }
+serde = { version = "1.0.226", features = ["derive"] }
 sysinfo = "0.29.11"
 tokio = "1.44.1"
 tokio-stream = "0.1.17"
diff --git a/src/sql-lexer/Cargo.toml b/src/sql-lexer/Cargo.toml
index 72c82e1815159..3fb32f2c54adf 100644
--- a/src/sql-lexer/Cargo.toml
+++ b/src/sql-lexer/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 mz-ore = { path = "../ore", default-features = false, features = ["stack"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 phf = { version = "0.11.1", features = ["uncased"] }
 uncased = "0.9.7"
 
diff --git a/src/sql-parser/Cargo.toml b/src/sql-parser/Cargo.toml
index e09fba5c7740f..bbac3d9abc9db 100644
--- a/src/sql-parser/Cargo.toml
+++ b/src/sql-parser/Cargo.toml
@@ -18,9 +18,9 @@ itertools = "0.14.0"
 mz-ore = { path = "../ore", default-features = false, features = ["stack", "assert-no-tracing"] }
 mz-sql-lexer = { path = "../sql-lexer", default-features = false }
 phf = { version = "0.11.1", features = ["uncased"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 smallvec = { version = "1.15.1", features = ["union"] }
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tracing = "0.1.37"
 uncased = "0.9.7"
 unicode-width = { version = "0.2.1", optional = true }
diff --git a/src/sql-pretty/Cargo.toml b/src/sql-pretty/Cargo.toml
index 3e3565a024961..fb4dca478469f 100644
--- a/src/sql-pretty/Cargo.toml
+++ b/src/sql-pretty/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 itertools = "0.14.0"
 mz-sql-parser = { path = "../sql-parser", default-features = false }
 pretty = "0.12.4"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [target.'cfg(not(target_arch = "wasm32"))'.dev-dependencies]
diff --git a/src/sql-server-util/Cargo.toml b/src/sql-server-util/Cargo.toml
index 2837c654413af..1035643dd4981 100644
--- a/src/sql-server-util/Cargo.toml
+++ b/src/sql-server-util/Cargo.toml
@@ -32,17 +32,17 @@ ordered-float = { version = "5.0.0", features = ["serde"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-serde = { version = "1.0.218", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 smallvec = { version = "1.15.1", features = ["union"] }
 static_assertions = "1.1"
-thiserror = "2.0.11"
+thiserror = "2.0.16"
 tiberius = { version = "0.12", features = ["chrono", "sql-browser-tokio", "tds73", "native-tls"], default-features = false }
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["net"] }
 tokio-stream = "0.1.17"
-tokio-util = { version = "0.7.15", features = ["compat"] }
+tokio-util = { version = "0.7.16", features = ["compat"] }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/sql/Cargo.toml b/src/sql/Cargo.toml
index 4c1bdab94c3f5..ddf5cbb3a9f6a 100644
--- a/src/sql/Cargo.toml
+++ b/src/sql/Cargo.toml
@@ -78,18 +78,18 @@ rdkafka = { version = "0.29.0", features = [
     "libz-static",
     "zstd",
 ] }
-regex = "1.11.1"
+regex = "1.11.2"
 reqwest = "0.11.13"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.127"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = "1.0.145"
 static_assertions = "1.1"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["fs"] }
 tokio-postgres = { version = "0.7.8", features = ["serde"] }
 tracing = "0.1.37"
 tracing-subscriber = "0.3.19"
 uncased = "0.9.7"
-uuid = { version = "1.17.0", features = ["serde", "v4"] }
+uuid = { version = "1.18.1", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/sqllogictest/Cargo.toml b/src/sqllogictest/Cargo.toml
index 4aa3299095514..cd51d4b430c1b 100644
--- a/src/sqllogictest/Cargo.toml
+++ b/src/sqllogictest/Cargo.toml
@@ -44,10 +44,10 @@ mz-sql-parser = { path = "../sql-parser" }
 mz-storage-types = { path = "../storage-types" }
 mz-tracing = { path = "../tracing" }
 postgres-protocol = { version = "0.6.5" }
-regex = "1.11.1"
+regex = "1.11.2"
 reqwest = { version = "0.11.13", features = ["json"] }
 shell-words = "1.1.0"
-serde_json = "1.0.127"
+serde_json = "1.0.145"
 tempfile = "3.20.0"
 time = "0.3.17"
 tracing = "0.1.37"
@@ -59,7 +59,7 @@ tokio-postgres = { version = "0.7.8", features = [
 ] }
 tokio-stream = { version = "0.1.17", features = ["net"] }
 tower-http = { version = "0.6.6", features = ["cors"] }
-uuid = "1.17.0"
+uuid = "1.18.1"
 walkdir = "2.5.0"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/ssh-util/Cargo.toml b/src/ssh-util/Cargo.toml
index 340670381f128..fdeb567a65500 100644
--- a/src/ssh-util/Cargo.toml
+++ b/src/ssh-util/Cargo.toml
@@ -13,17 +13,17 @@ workspace = true
 anyhow = { version = "1.0.98" }
 mz-ore = { path = "../ore", features = ["test"] }
 openssh = { version = "0.11.5", default-features = false, features = ["native-mux"] }
-openssh-mux-client = "0.17.7"
+openssh-mux-client = "0.17.8"
 openssl = { version = "0.10.73", features = ["vendored"] }
 rand = "0.8.5"
 futures = "0.3.31"
 itertools = "0.14.0"
 scopeguard = "1.2.0"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127" }
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
 ssh-key = { version = "0.6.7" }
 tempfile = "3.20.0"
-thiserror = { version = "2.0.12" }
+thiserror = { version = "2.0.16" }
 tokio = "1.44.1"
 tokio-stream = "0.1.17"
 tracing = "0.1.37"
diff --git a/src/storage-client/Cargo.toml b/src/storage-client/Cargo.toml
index 67d0c8bfa9ed3..9b85c7cb136c3 100644
--- a/src/storage-client/Cargo.toml
+++ b/src/storage-client/Cargo.toml
@@ -36,8 +36,8 @@ rdkafka = { version = "0.29.0", features = [
     "libz-static",
     "zstd",
 ] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127" }
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
 smallvec = { version = "1.15.1", features = ["serde", "union"] }
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = [
@@ -48,7 +48,7 @@ tokio = { version = "1.44.1", features = [
     "time",
 ] }
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/storage-controller/Cargo.toml b/src/storage-controller/Cargo.toml
index 2ca975c34fd29..3b0708c99439f 100644
--- a/src/storage-controller/Cargo.toml
+++ b/src/storage-controller/Cargo.toml
@@ -36,14 +36,14 @@ mz-tls-util = { path = "../tls-util" }
 mz-txn-wal = { path = "../txn-wal" }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.140" }
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "test-util", "time"] }
 tokio-postgres = { version = "0.7.8", features = ["serde"] }
 tokio-stream = "0.1.17"
 tracing = "0.1.37"
-uuid = "1.17.0"
+uuid = "1.18.1"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/storage-operators/Cargo.toml b/src/storage-operators/Cargo.toml
index 66c5e03726771..3bf4126f358f6 100644
--- a/src/storage-operators/Cargo.toml
+++ b/src/storage-operators/Cargo.toml
@@ -46,16 +46,16 @@ proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 prost = "0.13.5"
 reqwest = { version = "0.11.13", features = ["stream"] }
 sentry = { version = "0.38.1", default-features = false, features = [] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 smallvec = { version = "1.15.1", features = ["union"] }
 timely = "0.24.0"
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "test-util", "time"] }
 tokio-stream = "0.1.17"
-tokio-util = { version = "0.7.15", features = ["io"] }
+tokio-util = { version = "0.7.16", features = ["io"] }
 tracing = "0.1.37"
 url = "2.3.1"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/storage-types/Cargo.toml b/src/storage-types/Cargo.toml
index baf745deec19e..2c0e13cf63fd2 100644
--- a/src/storage-types/Cargo.toml
+++ b/src/storage-types/Cargo.toml
@@ -62,18 +62,18 @@ proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
 rdkafka = { version = "0.29.0", features = ["cmake-build", "ssl-vendored", "libz-static", "zstd"] }
-regex = "1.11.1"
+regex = "1.11.2"
 reqwest = "0.11.24"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127", features = ["preserve_order"] }
-thiserror = "2.0.12"
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145", features = ["preserve_order"] }
+thiserror = "2.0.16"
 tiberius = { version = "0.12", features = ["sql-browser-tokio", "tds73", "native-tls"], default-features = false }
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "test-util", "time"] }
 tokio-postgres = { version = "0.7.8", features = ["serde"] }
 tracing = "0.1.37"
 url = { version = "2.3.1", features = ["serde"] }
-uuid = { version = "1.17.0", features = ["serde", "v4"] }
+uuid = { version = "1.18.1", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 base64 = "0.22.1"
 iceberg = "0.6.0"
diff --git a/src/storage/Cargo.toml b/src/storage/Cargo.toml
index f3cf9d6445767..04e4b6ec3a1b3 100644
--- a/src/storage/Cargo.toml
+++ b/src/storage/Cargo.toml
@@ -71,21 +71,21 @@ rdkafka = { version = "0.29.0", features = [
     "libz-static",
     "zstd",
 ] }
-regex = { version = "1.11.1" }
+regex = { version = "1.11.2" }
 rocksdb = { version = "0.24.0", default-features = false, features = ["snappy", "zstd", "lz4"] }
 seahash = "4"
-serde = { version = "1.0.219", features = ["derive"] }
-serde_json = { version = "1.0.127" }
-serde_bytes = { version = "0.11.17" }
+serde = { version = "1.0.226", features = ["derive"] }
+serde_json = { version = "1.0.145" }
+serde_bytes = { version = "0.11.19" }
 sha2 = "0.10.9"
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["fs", "rt", "sync", "test-util"] }
 tokio-postgres = { version = "0.7.8", features = ["serde"] }
 tokio-stream = "0.1.17"
-tokio-util = { version = "0.7.15", features = ["io"] }
+tokio-util = { version = "0.7.16", features = ["io"] }
 tracing = "0.1.37"
-thiserror = { version = "2.0.12" }
-uuid = { version = "1.17.0", features = ["serde", "v4"] }
+thiserror = { version = "2.0.16" }
+uuid = { version = "1.18.1", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/testdrive/Cargo.toml b/src/testdrive/Cargo.toml
index 12f19e1e477b7..2702ac87e2f3d 100644
--- a/src/testdrive/Cargo.toml
+++ b/src/testdrive/Cargo.toml
@@ -61,11 +61,11 @@ prost-reflect = { version = "0.15.3", features = ["serde"] }
 prost-types = { version = "0.13.5" }
 rand = "0.8.5"
 rdkafka = { version = "0.29.0", features = ["cmake-build", "ssl-vendored", "libz-static", "zstd"] }
-regex = "1.11.1"
+regex = "1.11.2"
 reqwest = { version = "0.11.13", features = ["native-tls-vendored"] }
-semver = "1.0.26"
-serde = "1.0.219"
-serde_json = { version = "1.0.127", features = ["raw_value"] }
+semver = "1.0.27"
+serde = "1.0.226"
+serde_json = { version = "1.0.145", features = ["raw_value"] }
 similar = "2.7.0"
 tempfile = "3.20.0"
 termcolor = "1.4.1"
@@ -76,10 +76,10 @@ tracing-subscriber = { version = "0.3.19", features = ["env-filter"] }
 tokio = { version = "1.44.1", features = ["process"] }
 tokio-postgres = { version = "0.7.8", features = ["with-chrono-0_4", "with-serde_json-1"] }
 tokio-stream = "0.1.17"
-tokio-util = { version = "0.7.15", features = ["compat"] }
+tokio-util = { version = "0.7.16", features = ["compat"] }
 tonic = "0.12.1"
 url = "2.3.1"
-uuid = "1.17.0"
+uuid = "1.18.1"
 walkdir = "2.5.0"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/timely-util/Cargo.toml b/src/timely-util/Cargo.toml
index 1c2a952946f9e..5eb4f6a06f851 100644
--- a/src/timely-util/Cargo.toml
+++ b/src/timely-util/Cargo.toml
@@ -26,11 +26,11 @@ lgalloc = "0.6"
 mz-ore = { path = "../ore", default-features = false, features = ["async", "process", "tracing", "test", "num-traits", "region", "differential-dataflow", "overflowing"] }
 num-traits = "0.2"
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 timely = "0.24.0"
 tokio = { version = "1.44.1", features = ["macros", "rt-multi-thread", "time"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["serde", "v4"] }
+uuid = { version = "1.18.1", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 # This crate is used for capturing memory usage in a unit test. It is feature
diff --git a/src/timestamp-oracle/Cargo.toml b/src/timestamp-oracle/Cargo.toml
index 43c50e4703e25..498eeae91edc9 100644
--- a/src/timestamp-oracle/Cargo.toml
+++ b/src/timestamp-oracle/Cargo.toml
@@ -22,10 +22,10 @@ mz-postgres-client = { path = "../postgres-client" }
 mz-repr = { path = "../repr", features = ["tracing"] }
 postgres-protocol = { version = "0.6.5" }
 rand = "0.8.5"
-serde = "1.0.219"
+serde = "1.0.226"
 tokio = { version = "1.44.1", features = ["rt", "time"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/tls-util/Cargo.toml b/src/tls-util/Cargo.toml
index 73969a4de4cf2..7dbe3bc4da414 100644
--- a/src/tls-util/Cargo.toml
+++ b/src/tls-util/Cargo.toml
@@ -14,7 +14,7 @@ anyhow = "1.0.98"
 openssl = { version = "0.10.73", features = ["vendored"] }
 openssl-sys = { version = "0.9.108", features = ["vendored"] }
 postgres-openssl = { version = "0.5.0" }
-thiserror = "2.0.12"
+thiserror = "2.0.16"
 tokio = { version = "1.44.1", default-features = false, features = ["fs", "macros", "sync", "rt", "rt-multi-thread"] }
 tokio-postgres = { version = "0.7.8" }
 tracing = "0.1.37"
diff --git a/src/tracing/Cargo.toml b/src/tracing/Cargo.toml
index 0cf19e1c3638f..28b7350eed9be 100644
--- a/src/tracing/Cargo.toml
+++ b/src/tracing/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 mz-ore = { path = "../ore", default-features = false, features = ["test", "tracing"] }
-serde = { version = "1.0.219", features = ["derive"] }
+serde = { version = "1.0.226", features = ["derive"] }
 tracing = "0.1.37"
 tracing-subscriber = { version = "0.3.19", default-features = false, features = ["env-filter", "fmt"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/transform/Cargo.toml b/src/transform/Cargo.toml
index ae755558cc9e5..041bda952a7d7 100644
--- a/src/transform/Cargo.toml
+++ b/src/transform/Cargo.toml
@@ -22,7 +22,7 @@ ordered-float = { version = "5.0.0", features = ["serde"] }
 paste = "1.0.11"
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1" }
-serde = "1.0.219"
+serde = "1.0.226"
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
@@ -33,8 +33,8 @@ mz-expr-parser = { path = "../expr-parser" }
 mz-expr-test-util = { path = "../expr-test-util" }
 mz-lowertest = { path = "../lowertest" }
 mz-ore = { path = "../ore", features = ["test"] }
-proc-macro2 = "1.0.95"
-serde_json = "1.0.127"
+proc-macro2 = "1.0.101"
+serde_json = "1.0.145"
 
 [package.metadata.cargo-udeps.ignore]
 normal = ["workspace-hack"]
diff --git a/src/txn-wal/Cargo.toml b/src/txn-wal/Cargo.toml
index bc09065ad15a7..22e0be4a656a7 100644
--- a/src/txn-wal/Cargo.toml
+++ b/src/txn-wal/Cargo.toml
@@ -22,11 +22,11 @@ mz-persist-client = { path = "../persist-client" }
 mz-timely-util = { path = "../timely-util" }
 prometheus = { version = "0.13.4", default-features = false }
 prost = { version = "0.13.5", features = ["no-recursion-limit"] }
-serde = { version = "1.0.219", features = ["derive", "rc"] }
+serde = { version = "1.0.226", features = ["derive", "rc"] }
 timely = "0.24.0"
 tokio = { version = "1.44.1", default-features = false, features = ["rt", "rt-multi-thread"] }
 tracing = "0.1.37"
-uuid = { version = "1.17.0", features = ["v4"] }
+uuid = { version = "1.18.1", features = ["v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/walkabout/Cargo.toml b/src/walkabout/Cargo.toml
index 83a03fab9ccad..84c2ad816e35e 100644
--- a/src/walkabout/Cargo.toml
+++ b/src/walkabout/Cargo.toml
@@ -14,7 +14,7 @@ anyhow = "1.0.98"
 itertools = "0.14.0"
 mz-ore-build = { path = "../ore-build", default-features = false }
 quote = "1.0.40"
-syn = { version = "1.0.107", features = ["extra-traits", "full", "parsing"] }
+syn = { version = "2.0.104", features = ["extra-traits", "full", "parsing"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index e94b4e1bef773..6d645ab3f60e5 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -98,14 +98,14 @@ num-integer = { version = "0.1.46", features = ["i128"] }
 num-traits = { version = "0.2.19", features = ["i128", "libm"] }
 parking_lot = { version = "0.12.4", features = ["serde"] }
 parquet = { version = "55.2.0", features = ["async"] }
-percent-encoding = { version = "2.3.1" }
+percent-encoding = { version = "2.3.2" }
 phf = { version = "0.11.3", features = ["uncased"] }
 phf_shared = { version = "0.11.3", features = ["uncased"] }
 portable-atomic = { version = "1.11.1", features = ["require-cas"] }
 postgres = { git = "https://github.com/MaterializeInc/rust-postgres", default-features = false, features = ["with-chrono-0_4"] }
 postgres-types = { git = "https://github.com/MaterializeInc/rust-postgres", default-features = false, features = ["with-chrono-0_4", "with-serde_json-1", "with-uuid-1"] }
 predicates = { version = "3.1.3" }
-proc-macro2 = { version = "1.0.95", features = ["span-locations"] }
+proc-macro2 = { version = "1.0.101", features = ["span-locations"] }
 proptest = { version = "1.7.0" }
 prost = { version = "0.13.5", features = ["no-recursion-limit", "prost-derive"] }
 prost-reflect = { version = "0.15.3", default-features = false, features = ["serde"] }
@@ -117,16 +117,16 @@ rand_chacha-274715c4dabd11b0 = { package = "rand_chacha", version = "0.9.0", def
 rand_chacha-468e82937335b1c9 = { package = "rand_chacha", version = "0.3.0" }
 rand_core = { version = "0.6.4", default-features = false, features = ["std"] }
 rdkafka-sys = { git = "https://github.com/MaterializeInc/rust-rdkafka.git", features = ["cmake-build", "libz-static", "ssl-vendored", "zstd"] }
-regex = { version = "1.11.1" }
-regex-automata = { version = "0.4.9", default-features = false, features = ["dfa", "hybrid", "meta", "nfa", "perf", "unicode"] }
-regex-syntax = { version = "0.8.5" }
+regex = { version = "1.11.2" }
+regex-automata = { version = "0.4.10", default-features = false, features = ["dfa", "hybrid", "meta", "nfa", "perf", "unicode"] }
+regex-syntax = { version = "0.8.6" }
 reqwest-5ef9efb8ec2df382 = { package = "reqwest", version = "0.12.23", features = ["blocking", "cookies", "json", "native-tls-vendored", "stream"] }
 reqwest-a6292c17cd707f01 = { package = "reqwest", version = "0.11.24", features = ["blocking", "json", "multipart", "native-tls-vendored", "stream"] }
 schemars = { version = "1.0.4", features = ["uuid1"] }
 scopeguard = { version = "1.2.0" }
-semver = { version = "1.0.26", features = ["serde"] }
-serde = { version = "1.0.219", features = ["alloc", "derive", "rc"] }
-serde_json = { version = "1.0.143", features = ["alloc", "arbitrary_precision", "float_roundtrip", "preserve_order", "raw_value", "unbounded_depth"] }
+semver = { version = "1.0.27", features = ["serde"] }
+serde = { version = "1.0.226", features = ["alloc", "derive", "rc"] }
+serde_json = { version = "1.0.145", features = ["alloc", "arbitrary_precision", "float_roundtrip", "preserve_order", "raw_value", "unbounded_depth"] }
 sha2 = { version = "0.10.9", features = ["asm", "oid"] }
 similar = { version = "2.7.0", features = ["inline", "unicode"] }
 smallvec = { version = "1.15.1", default-features = false, features = ["const_new", "serde", "union"] }
@@ -139,7 +139,7 @@ timely = { version = "0.24.0" }
 tokio = { version = "1.47.1", features = ["full", "test-util", "tracing"] }
 tokio-postgres = { git = "https://github.com/MaterializeInc/rust-postgres", features = ["serde", "with-chrono-0_4", "with-serde_json-1", "with-uuid-1"] }
 tokio-stream = { version = "0.1.17", features = ["net", "sync"] }
-tokio-util = { version = "0.7.15", features = ["codec", "compat", "io", "time"] }
+tokio-util = { version = "0.7.16", features = ["codec", "compat", "io", "time"] }
 toml_datetime = { version = "0.6.11", default-features = false, features = ["serde"] }
 toml_edit = { version = "0.22.26", features = ["serde"] }
 tonic = { version = "0.12.3", features = ["gzip"] }
@@ -153,10 +153,10 @@ uncased = { version = "0.9.10" }
 unicode-bidi = { version = "0.3.18" }
 unicode-normalization = { version = "0.1.24" }
 url = { version = "2.5.4", features = ["serde"] }
-uuid = { version = "1.18.0", features = ["serde", "v4", "v5", "v7"] }
+uuid = { version = "1.18.1", features = ["serde", "v4", "v5", "v7"] }
 zeroize = { version = "1.8.1", features = ["serde"] }
 zstd = { version = "0.13.3" }
-zstd-safe = { version = "7.2.1", default-features = false, features = ["arrays", "legacy", "std", "zdict_builder"] }
+zstd-safe = { version = "7.2.4", default-features = false, features = ["arrays", "legacy", "std", "zdict_builder"] }
 zstd-sys = { version = "2.0.13", features = ["std"] }
 
 [build-dependencies]
@@ -242,14 +242,14 @@ num-integer = { version = "0.1.46", features = ["i128"] }
 num-traits = { version = "0.2.19", features = ["i128", "libm"] }
 parking_lot = { version = "0.12.4", features = ["serde"] }
 parquet = { version = "55.2.0", features = ["async"] }
-percent-encoding = { version = "2.3.1" }
+percent-encoding = { version = "2.3.2" }
 phf = { version = "0.11.3", features = ["uncased"] }
 phf_shared = { version = "0.11.3", features = ["uncased"] }
 portable-atomic = { version = "1.11.1", features = ["require-cas"] }
 postgres = { git = "https://github.com/MaterializeInc/rust-postgres", default-features = false, features = ["with-chrono-0_4"] }
 postgres-types = { git = "https://github.com/MaterializeInc/rust-postgres", default-features = false, features = ["with-chrono-0_4", "with-serde_json-1", "with-uuid-1"] }
 predicates = { version = "3.1.3" }
-proc-macro2 = { version = "1.0.95", features = ["span-locations"] }
+proc-macro2 = { version = "1.0.101", features = ["span-locations"] }
 proptest = { version = "1.7.0" }
 proptest-derive = { version = "0.5.1", default-features = false, features = ["boxed_union"] }
 prost = { version = "0.13.5", features = ["no-recursion-limit", "prost-derive"] }
@@ -262,16 +262,16 @@ rand_chacha-274715c4dabd11b0 = { package = "rand_chacha", version = "0.9.0", def
 rand_chacha-468e82937335b1c9 = { package = "rand_chacha", version = "0.3.0" }
 rand_core = { version = "0.6.4", default-features = false, features = ["std"] }
 rdkafka-sys = { git = "https://github.com/MaterializeInc/rust-rdkafka.git", features = ["cmake-build", "libz-static", "ssl-vendored", "zstd"] }
-regex = { version = "1.11.1" }
-regex-automata = { version = "0.4.9", default-features = false, features = ["dfa", "hybrid", "meta", "nfa", "perf", "unicode"] }
-regex-syntax = { version = "0.8.5" }
+regex = { version = "1.11.2" }
+regex-automata = { version = "0.4.10", default-features = false, features = ["dfa", "hybrid", "meta", "nfa", "perf", "unicode"] }
+regex-syntax = { version = "0.8.6" }
 reqwest-5ef9efb8ec2df382 = { package = "reqwest", version = "0.12.23", features = ["blocking", "cookies", "json", "native-tls-vendored", "stream"] }
 reqwest-a6292c17cd707f01 = { package = "reqwest", version = "0.11.24", features = ["blocking", "json", "multipart", "native-tls-vendored", "stream"] }
 schemars = { version = "1.0.4", features = ["uuid1"] }
 scopeguard = { version = "1.2.0" }
-semver = { version = "1.0.26", features = ["serde"] }
-serde = { version = "1.0.219", features = ["alloc", "derive", "rc"] }
-serde_json = { version = "1.0.143", features = ["alloc", "arbitrary_precision", "float_roundtrip", "preserve_order", "raw_value", "unbounded_depth"] }
+semver = { version = "1.0.27", features = ["serde"] }
+serde = { version = "1.0.226", features = ["alloc", "derive", "rc"] }
+serde_json = { version = "1.0.145", features = ["alloc", "arbitrary_precision", "float_roundtrip", "preserve_order", "raw_value", "unbounded_depth"] }
 sha2 = { version = "0.10.9", features = ["asm", "oid"] }
 similar = { version = "2.7.0", features = ["inline", "unicode"] }
 smallvec = { version = "1.15.1", default-features = false, features = ["const_new", "serde", "union"] }
@@ -285,7 +285,7 @@ timely = { version = "0.24.0" }
 tokio = { version = "1.47.1", features = ["full", "test-util", "tracing"] }
 tokio-postgres = { git = "https://github.com/MaterializeInc/rust-postgres", features = ["serde", "with-chrono-0_4", "with-serde_json-1", "with-uuid-1"] }
 tokio-stream = { version = "0.1.17", features = ["net", "sync"] }
-tokio-util = { version = "0.7.15", features = ["codec", "compat", "io", "time"] }
+tokio-util = { version = "0.7.16", features = ["codec", "compat", "io", "time"] }
 toml_datetime = { version = "0.6.11", default-features = false, features = ["serde"] }
 toml_edit = { version = "0.22.26", features = ["serde"] }
 tonic = { version = "0.12.3", features = ["gzip"] }
@@ -299,10 +299,10 @@ uncased = { version = "0.9.10" }
 unicode-bidi = { version = "0.3.18" }
 unicode-normalization = { version = "0.1.24" }
 url = { version = "2.5.4", features = ["serde"] }
-uuid = { version = "1.18.0", features = ["serde", "v4", "v5", "v7"] }
+uuid = { version = "1.18.1", features = ["serde", "v4", "v5", "v7"] }
 zeroize = { version = "1.8.1", features = ["serde"] }
 zstd = { version = "0.13.3" }
-zstd-safe = { version = "7.2.1", default-features = false, features = ["arrays", "legacy", "std", "zdict_builder"] }
+zstd-safe = { version = "7.2.4", default-features = false, features = ["arrays", "legacy", "std", "zdict_builder"] }
 zstd-sys = { version = "2.0.13", features = ["std"] }
 
 [target.x86_64-unknown-linux-gnu.dependencies]