diff --git a/Cargo.lock b/Cargo.lock
index d76b98f49baa0..a63fe1cfb964a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -165,9 +165,9 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.98"
+version = "1.0.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e16d2d3311acee920a9eb8d33b8cbc1787ce4a264e85f964c2404b969bdcd487"
+checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
 
 [[package]]
 name = "apache-avro"
@@ -464,7 +464,7 @@ version = "0.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "20cd0e2e25ea8e5f7e9df04578dc6cf5c83577fd09b1a46aaf5c85e1c33f2a7e"
 dependencies = [
- "event-listener 5.4.0",
+ "event-listener 5.4.1",
  "event-listener-strategy",
  "futures-core",
  "pin-project-lite",
@@ -535,7 +535,7 @@ version = "3.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ff6e472cdea888a4bd64f342f09b3f50e1886d32afe8df3d663c01140b811b18"
 dependencies = [
- "event-listener 5.4.0",
+ "event-listener 5.4.1",
  "event-listener-strategy",
  "pin-project-lite",
 ]
@@ -565,7 +565,7 @@ dependencies = [
  "async-task",
  "blocking",
  "cfg-if",
- "event-listener 5.4.0",
+ "event-listener 5.4.1",
  "futures-lite 2.6.0",
  "rustix 0.38.44",
  "tracing",
@@ -619,9 +619,9 @@ checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de"
 
 [[package]]
 name = "async-trait"
-version = "0.1.88"
+version = "0.1.89"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e539d3fca749fcee5236ab05e93a52867dd549cc157c8cb7f99595f3cedffdb5"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -707,9 +707,9 @@ dependencies = [
 
 [[package]]
 name = "aws-credential-types"
-version = "1.2.5"
+version = "1.2.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1541072f81945fa1251f8795ef6c92c4282d74d59f88498ae7d4bf00f0ebdad9"
+checksum = "d025db5d9f52cbc413b167136afb3d8aeea708c0d8884783cf6253be5e22f6f2"
 dependencies = [
  "aws-smithy-async",
  "aws-smithy-runtime-api",
@@ -719,15 +719,15 @@ dependencies = [
 
 [[package]]
 name = "aws-runtime"
-version = "1.5.9"
+version = "1.5.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2090e664216c78e766b6bac10fe74d2f451c02441d43484cd76ac9a295075f7"
+checksum = "c034a1bc1d70e16e7f4e4caf7e9f7693e4c9c24cd91cf17c2a0b21abaebc7c8b"
 dependencies = [
  "aws-credential-types",
  "aws-sigv4",
  "aws-smithy-async",
  "aws-smithy-eventstream",
- "aws-smithy-http 0.62.1",
+ "aws-smithy-http 0.62.3",
  "aws-smithy-runtime",
  "aws-smithy-runtime-api",
  "aws-smithy-types",
@@ -891,13 +891,13 @@ dependencies = [
 
 [[package]]
 name = "aws-sigv4"
-version = "1.3.3"
+version = "1.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddfb9021f581b71870a17eac25b52335b82211cdc092e02b6876b2bcefa61666"
+checksum = "084c34162187d39e3740cb635acd73c4e3a551a36146ad6fe8883c929c9f876c"
 dependencies = [
  "aws-credential-types",
  "aws-smithy-eventstream",
- "aws-smithy-http 0.62.1",
+ "aws-smithy-http 0.62.3",
  "aws-smithy-runtime-api",
  "aws-smithy-types",
  "bytes",
@@ -946,9 +946,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-eventstream"
-version = "0.60.9"
+version = "0.60.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "338a3642c399c0a5d157648426110e199ca7fd1c689cc395676b81aa563700c4"
+checksum = "182b03393e8c677347fb5705a04a9392695d47d20ef0a2f8cfe28c8e6b9b9778"
 dependencies = [
  "aws-smithy-types",
  "bytes",
@@ -978,9 +978,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-http"
-version = "0.62.1"
+version = "0.62.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "99335bec6cdc50a346fda1437f9fefe33abf8c99060739a546a16457f2862ca9"
+checksum = "7c4dacf2d38996cf729f55e7a762b30918229917eca115de45dfa8dfb97796c9"
 dependencies = [
  "aws-smithy-runtime-api",
  "aws-smithy-types",
@@ -998,15 +998,15 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-http-client"
-version = "1.0.6"
+version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f108f1ca850f3feef3009bdcc977be201bca9a91058864d9de0684e64514bee0"
+checksum = "147e8eea63a40315d704b97bf9bc9b8c1402ae94f89d5ad6f7550d963309da1b"
 dependencies = [
  "aws-smithy-async",
  "aws-smithy-runtime-api",
  "aws-smithy-types",
  "h2 0.3.26",
- "h2 0.4.11",
+ "h2 0.4.12",
  "http 0.2.9",
  "http-body 0.4.5",
  "hyper 0.14.27",
@@ -1045,12 +1045,12 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-runtime"
-version = "1.8.4"
+version = "1.9.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3aaec682eb189e43c8a19c3dab2fe54590ad5f2cc2d26ab27608a20f2acf81c"
+checksum = "4fa63ad37685ceb7762fa4d73d06f1d5493feb88e3f27259b9ed277f4c01b185"
 dependencies = [
  "aws-smithy-async",
- "aws-smithy-http 0.62.1",
+ "aws-smithy-http 0.62.3",
  "aws-smithy-http-client",
  "aws-smithy-observability",
  "aws-smithy-runtime-api",
@@ -1661,18 +1661,18 @@ dependencies = [
 
 [[package]]
 name = "bytemuck"
-version = "1.23.1"
+version = "1.23.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c76a5792e44e4abe34d3abf15636779261d45a7450612059293d1d2cfc63422"
+checksum = "3995eaeebcdf32f91f980d360f78732ddc061097ab4e39991ae7a6ace9194677"
 dependencies = [
  "bytemuck_derive",
 ]
 
 [[package]]
 name = "bytemuck_derive"
-version = "1.9.3"
+version = "1.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ecc273b49b3205b83d648f0690daa588925572cc5063745bfe547fe7ec8e1a1"
+checksum = "4f154e572231cb6ba2bd1176980827e3d5dc04cc183a75dea38109fbdd672d29"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1732,11 +1732,11 @@ dependencies = [
 
 [[package]]
 name = "camino"
-version = "1.1.10"
+version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0da45bc31171d8d6960122e222a67740df867c1dd53b4d51caa297084c185cab"
+checksum = "e1de8bc0aa9e9385ceb3bf0c152e3a9b9544f6c4a912c8ae504e80c1f0368603"
 dependencies = [
- "serde",
+ "serde_core",
 ]
 
 [[package]]
@@ -1764,34 +1764,34 @@ dependencies = [
 
 [[package]]
 name = "cargo-platform"
-version = "0.2.0"
+version = "0.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "84982c6c0ae343635a3a4ee6dedef965513735c8b183caa7289fa6e27399ebd4"
+checksum = "122ec45a44b270afd1402f351b782c676b173e3c3fb28d86ff7ebfb4d86a4ee4"
 dependencies = [
  "serde",
 ]
 
 [[package]]
 name = "cargo-util-schemas"
-version = "0.2.0"
+version = "0.8.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e63d2780ac94487eb9f1fea7b0d56300abc9eb488800854ca217f102f5caccca"
+checksum = "7dc1a6f7b5651af85774ae5a34b4e8be397d9cf4bc063b7e6dbd99a841837830"
 dependencies = [
  "semver",
  "serde",
  "serde-untagged",
  "serde-value",
- "thiserror 1.0.69",
- "toml",
+ "thiserror 2.0.12",
+ "toml 0.8.22",
  "unicode-xid",
  "url",
 ]
 
 [[package]]
 name = "cargo_metadata"
-version = "0.20.0"
+version = "0.22.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f7835cfc6135093070e95eb2b53e5d9b5c403dc3a6be6040ee026270aa82502"
+checksum = "0c3f56c207c76c07652489840ff98687dcf213de178ac0974660d6fefeaf5ec6"
 dependencies = [
  "camino",
  "cargo-platform",
@@ -1804,12 +1804,12 @@ dependencies = [
 
 [[package]]
 name = "cargo_toml"
-version = "0.22.1"
+version = "0.22.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02260d489095346e5cafd04dea8e8cb54d1d74fcd759022a9b72986ebe9a1257"
+checksum = "374b7c592d9c00c1f4972ea58390ac6b18cbb6ab79011f3bdc90a0b82ca06b77"
 dependencies = [
  "serde",
- "toml",
+ "toml 0.9.6",
 ]
 
 [[package]]
@@ -1820,10 +1820,11 @@ checksum = "37b2a672a2cb129a2e41c10b1224bb368f9f37a2b16b612598138befd7b37eb5"
 
 [[package]]
 name = "cc"
-version = "1.2.30"
+version = "1.2.38"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "deec109607ca693028562ed836a5f1c4b8bd77755c4e132fc5ce11b0b6211ae7"
+checksum = "80f41ae168f955c12fb8960b057d70d0ca153fb83182b57d86380443527be7e9"
 dependencies = [
+ "find-msvc-tools",
  "jobserver",
  "libc",
  "shlex",
@@ -1840,9 +1841,9 @@ dependencies = [
 
 [[package]]
 name = "cfg-expr"
-version = "0.20.1"
+version = "0.20.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d0390889d58f934f01cd49736275b4c2da15bcfc328c78ff2349907e6cabf22"
+checksum = "1a2c5f3bf25ec225351aa1c8e230d04d880d3bd89dea133537dafad4ae291e5c"
 dependencies = [
  "smallvec",
  "target-lexicon",
@@ -1850,9 +1851,9 @@ dependencies = [
 
 [[package]]
 name = "cfg-if"
-version = "1.0.1"
+version = "1.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9555578bc9e57714c812a1f84e4fc5b4d21fcb063490c624de019f7464c91268"
+checksum = "2fd1289c04a9ea8cb22300a459a72a385d7c73d3259e2ed7dcb2af674838cfa9"
 
 [[package]]
 name = "cfg_aliases"
@@ -2015,9 +2016,9 @@ checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990"
 
 [[package]]
 name = "columnar"
-version = "0.10.1"
+version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0342a00e5e34da4ef8c48b7ef9cc6fbe16ac2967456382738e21fe662ece796"
+checksum = "03315bde8779a20f3dd80d2ef267e22c4be4bd869846ec00b2dd75d0c7c67c4c"
 dependencies = [
  "bytemuck",
  "columnar_derive",
@@ -3215,9 +3216,9 @@ checksum = "0206175f82b8d6bf6652ff7d71a1e27fd2e4efde587fd368662814d6ec1d9ce0"
 
 [[package]]
 name = "event-listener"
-version = "5.4.0"
+version = "5.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3492acde4c3fc54c845eaab3eed8bd00c7a7d881f78bfc801e43a93dec1331ae"
+checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
 dependencies = [
  "concurrent-queue",
  "parking",
@@ -3230,7 +3231,7 @@ version = "0.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
 dependencies = [
- "event-listener 5.4.0",
+ "event-listener 5.4.1",
  "pin-project-lite",
 ]
 
@@ -3334,6 +3335,12 @@ dependencies = [
  "winapi",
 ]
 
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ced73b1dacfc750a6db6c0a0c3a3853c8b41997e2e2c563dc90804ae6867959"
+
 [[package]]
 name = "findshlibs"
 version = "0.10.2"
@@ -3412,9 +3419,9 @@ checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b"
 
 [[package]]
 name = "form_urlencoded"
-version = "1.2.1"
+version = "1.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
 dependencies = [
  "percent-encoding",
 ]
@@ -3640,9 +3647,9 @@ checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
 
 [[package]]
 name = "glob"
-version = "0.3.2"
+version = "0.3.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2"
+checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
 
 [[package]]
 name = "globset"
@@ -3671,9 +3678,9 @@ dependencies = [
 
 [[package]]
 name = "governor"
-version = "0.10.0"
+version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3cbe789d04bf14543f03c4b60cd494148aa79438c8440ae7d81a7778147745c3"
+checksum = "444405bbb1a762387aa22dd569429533b54a1d8759d35d3b64cb39b0293eaa19"
 dependencies = [
  "cfg-if",
  "dashmap 6.1.0",
@@ -3705,24 +3712,23 @@ dependencies = [
 
 [[package]]
 name = "guppy"
-version = "0.17.19"
+version = "0.17.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "81dfbb4e91461d20334e04ea276ec826d62f4509ccd641db47d4ae15277dbb03"
+checksum = "382d0681e5ca365cdee6c0c1bdcc92bca024322134e3793880c68d888540410b"
 dependencies = [
  "ahash 0.8.12",
  "camino",
- "cargo-util-schemas",
  "cargo_metadata",
  "cfg-if",
  "debug-ignore",
  "fixedbitset",
  "guppy-workspace-hack",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "itertools 0.14.0",
  "nested",
  "once_cell",
  "pathdiff",
- "petgraph",
+ "petgraph 0.8.2",
  "semver",
  "serde",
  "serde_json",
@@ -3749,7 +3755,7 @@ dependencies = [
  "futures-sink",
  "futures-util",
  "http 0.2.9",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "slab",
  "tokio",
  "tokio-util",
@@ -3758,9 +3764,9 @@ dependencies = [
 
 [[package]]
 name = "h2"
-version = "0.4.11"
+version = "0.4.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "17da50a276f1e01e0ba6c029e47b7100754904ee8a278f886546e98575380785"
+checksum = "f3c0b69cfcb4e1b9f1bf2f53f95f766e4661169728ec61cd3fe5a0166f2d1386"
 dependencies = [
  "atomic-waker",
  "bytes",
@@ -3768,7 +3774,7 @@ dependencies = [
  "futures-core",
  "futures-sink",
  "http 1.2.0",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "slab",
  "tokio",
  "tokio-util",
@@ -4047,7 +4053,7 @@ dependencies = [
  "bytes",
  "futures-channel",
  "futures-util",
- "h2 0.4.11",
+ "h2 0.4.12",
  "http 1.2.0",
  "http-body 1.0.1",
  "httparse",
@@ -4151,9 +4157,9 @@ dependencies = [
 
 [[package]]
 name = "hyper-util"
-version = "0.1.16"
+version = "0.1.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d9b05277c7e8da2c93a568989bb6207bef0112e8d17df7a6eda4a3cf143bc5e"
+checksum = "3c6995591a8f1380fcb4ba966a252a4b29188d51d2b89e3a252f5305be65aea8"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -4356,13 +4362,14 @@ dependencies = [
 
 [[package]]
 name = "indexmap"
-version = "2.10.0"
+version = "2.11.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fe4cd85333e22411419a0bcae1297d25e58c9443848b11dc6a86fefe8c78a661"
+checksum = "4b0f83760fb341a774ed326568e19f5a863af4a952def8c39f9ab92fd95b88e5"
 dependencies = [
  "equivalent",
  "hashbrown 0.15.3",
  "serde",
+ "serde_core",
 ]
 
 [[package]]
@@ -4395,9 +4402,9 @@ dependencies = [
 
 [[package]]
 name = "insta"
-version = "1.43.1"
+version = "1.43.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "154934ea70c58054b556dd430b99a98c2a7ff5309ac9891597e339b5c28f4371"
+checksum = "46fdb647ebde000f43b5b53f773c30cf9b0cb4300453208713fa38b2c70935a0"
 dependencies = [
  "console",
  "once_cell",
@@ -4515,7 +4522,7 @@ dependencies = [
  "libc",
  "mappings",
  "once_cell",
- "pprof_util",
+ "pprof_util 0.7.0",
  "tempfile",
  "tikv-jemalloc-ctl",
  "tokio",
@@ -4606,12 +4613,13 @@ dependencies = [
 
 [[package]]
 name = "k8s-controller"
-version = "0.6.0"
+version = "0.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92d05b159140a0b1ce4f790d97cbd4bdd91cf229d45ce01260bb08ceeb25c872"
+checksum = "797c7fe6c6426d508eaf7f84fd80859b46d9b5a9fa49d3c31c7455669c599a1f"
 dependencies = [
  "async-trait",
  "futures",
+ "k8s-openapi",
  "kube",
  "kube-runtime",
  "rand 0.9.2",
@@ -4643,9 +4651,9 @@ dependencies = [
 
 [[package]]
 name = "kube"
-version = "2.0.0"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06da663f20352f5ab08cf70610289a1a180de114985a7d1c6010d4c67a92a35d"
+checksum = "48e7bb0b6a46502cc20e4575b6ff401af45cfea150b34ba272a3410b78aa014e"
 dependencies = [
  "k8s-openapi",
  "kube-client",
@@ -4656,9 +4664,9 @@ dependencies = [
 
 [[package]]
 name = "kube-client"
-version = "2.0.0"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1c0cfc0acb17d167fd1e689aab910c9e072e69baddc515ee02482680148ca3a5"
+checksum = "4987d57a184d2b5294fdad3d7fc7f278899469d21a4da39a8f6ca16426567a36"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -4693,9 +4701,9 @@ dependencies = [
 
 [[package]]
 name = "kube-core"
-version = "2.0.0"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac010c9e87b2840f2124b46d9ec8d7d55933d44bd43ab029ae82ce129ef6bb47"
+checksum = "914bbb770e7bb721a06e3538c0edd2babed46447d128f7c21caa68747060ee73"
 dependencies = [
  "chrono",
  "derive_more",
@@ -4712,9 +4720,9 @@ dependencies = [
 
 [[package]]
 name = "kube-derive"
-version = "2.0.0"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1db0f1aeeef1b5fcaa5f30c98dcd0422a3771dd0510648ceac43f2a3f9ce2b4f"
+checksum = "03dee8252be137772a6ab3508b81cd797dee62ee771112a2453bc85cbbe150d2"
 dependencies = [
  "darling 0.21.2",
  "proc-macro2",
@@ -4726,9 +4734,9 @@ dependencies = [
 
 [[package]]
 name = "kube-runtime"
-version = "2.0.0"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bff97c7cfcbf05e196e55e0945b5e052bd472d635d215b4493715cd60e183ac6"
+checksum = "6aea4de4b562c5cc89ab10300bb63474ae1fa57ff5a19275f2e26401a323e3fd"
 dependencies = [
  "ahash 0.8.12",
  "async-broadcast",
@@ -4894,9 +4902,9 @@ checksum = "2c4a545a15244c7d945065b5d392b2d2d7f21526fba56ce51467b06ed445e8f7"
 
 [[package]]
 name = "libc"
-version = "0.2.174"
+version = "0.2.175"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776"
+checksum = "6a82ae493e598baaea5209805c49bbf2ea7de956d50d7da0da1164f9c6d28543"
 
 [[package]]
 name = "liblzma"
@@ -5025,9 +5033,9 @@ dependencies = [
 
 [[package]]
 name = "log"
-version = "0.4.27"
+version = "0.4.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94"
+checksum = "34080505efa8e45a4b816c349525ebe327ceaa8559756f0356cba97ef3bf7432"
 
 [[package]]
 name = "loom"
@@ -5113,14 +5121,14 @@ checksum = "3e2e65a1a2e43cfcb47a895c4c8b10d1f4a61097f9f254f183aee60cad9c651d"
 
 [[package]]
 name = "mappings"
-version = "0.7.0"
+version = "0.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e434981a332777c2b3062652d16a55f8e74fa78e6b1882633f0d77399c84fc2a"
+checksum = "db4d277bb50d4508057e7bddd7fcd19ef4a4cc38051b6a5a36868d75ae2cbeb9"
 dependencies = [
  "anyhow",
  "libc",
  "once_cell",
- "pprof_util",
+ "pprof_util 0.8.0",
  "tracing",
 ]
 
@@ -5225,7 +5233,7 @@ dependencies = [
  "crossbeam-channel",
  "crossbeam-epoch",
  "crossbeam-utils",
- "event-listener 5.4.0",
+ "event-listener 5.4.1",
  "futures-util",
  "loom 0.7.2",
  "parking_lot",
@@ -5305,9 +5313,9 @@ dependencies = [
 
 [[package]]
 name = "mysql_common"
-version = "0.35.4"
+version = "0.35.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e0ec195e788c95f36b7cf88127d538465fc2f7773e6e47af01834738eab0aee"
+checksum = "fbb9f371618ce723f095c61fbcdc36e8936956d2b62832f9c7648689b338e052"
 dependencies = [
  "base64 0.22.1",
  "bitflags 2.9.0",
@@ -5363,7 +5371,7 @@ dependencies = [
  "thiserror 2.0.12",
  "time",
  "tokio",
- "toml",
+ "toml 0.8.22",
  "toml_edit 0.22.26",
  "url",
  "uuid",
@@ -6798,7 +6806,7 @@ dependencies = [
  "aws-types",
  "chrono",
  "fancy-regex",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "itertools 0.14.0",
  "maplit",
  "mysql_async",
@@ -7138,7 +7146,7 @@ dependencies = [
  "futures",
  "futures-task",
  "futures-util",
- "h2 0.4.11",
+ "h2 0.4.12",
  "hex",
  "itertools 0.14.0",
  "mz-build-info",
@@ -7401,7 +7409,7 @@ dependencies = [
  "mz-build-tools",
  "mz-ore",
  "pprof",
- "pprof_util",
+ "pprof_util 0.7.0",
  "prost",
  "prost-build",
  "tikv-jemalloc-ctl",
@@ -7431,7 +7439,7 @@ dependencies = [
  "mz-npm",
  "mz-ore",
  "mz-prof",
- "pprof_util",
+ "pprof_util 0.7.0",
  "serde",
  "tokio",
  "tracing",
@@ -7957,7 +7965,7 @@ dependencies = [
  "fail",
  "futures",
  "humantime",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "itertools 0.14.0",
  "maplit",
  "mysql_async",
@@ -9302,7 +9310,18 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3672b37090dbd86368a4145bc067582552b29c27377cad4e0a306c97f9bd7772"
 dependencies = [
  "fixedbitset",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
+]
+
+[[package]]
+name = "petgraph"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54acf3a685220b533e437e264e4d932cfbdc4cc7ec0cd232ed73c08d03b8a7ca"
+dependencies = [
+ "fixedbitset",
+ "hashbrown 0.15.3",
+ "indexmap 2.11.4",
 ]
 
 [[package]]
@@ -9584,6 +9603,19 @@ dependencies = [
  "prost",
 ]
 
+[[package]]
+name = "pprof_util"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9aba4251d95ac86f14c33e688d57a9344bfcff29e9b0c5a063fc66b5facc8a1"
+dependencies = [
+ "anyhow",
+ "flate2",
+ "num",
+ "paste",
+ "prost",
+]
+
 [[package]]
 name = "ppv-lite86"
 version = "0.2.21"
@@ -9809,7 +9841,7 @@ dependencies = [
  "log",
  "multimap",
  "once_cell",
- "petgraph",
+ "petgraph 0.7.1",
  "prettyplease",
  "prost",
  "prost-types",
@@ -9883,7 +9915,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b4aeaa1f2460f1d348eeaeed86aea999ce98c1bded6f089ff8514c9d9dbdc973"
 dependencies = [
  "anyhow",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "log",
  "protobuf",
  "protobuf-support",
@@ -10431,7 +10463,7 @@ dependencies = [
  "futures-channel",
  "futures-core",
  "futures-util",
- "h2 0.4.11",
+ "h2 0.4.12",
  "http 1.2.0",
  "http-body 1.0.1",
  "http-body-util",
@@ -11050,10 +11082,11 @@ checksum = "0772c5c30e1a0d91f6834f8e545c69281c099dfa9a3ac58d96a9fd629c8d4898"
 
 [[package]]
 name = "serde"
-version = "1.0.219"
+version = "1.0.226"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+checksum = "0dca6411025b24b60bfa7ec1fe1f8e710ac09782dca409ee8237ba74b51295fd"
 dependencies = [
+ "serde_core",
  "serde_derive",
 ]
 
@@ -11098,11 +11131,20 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "serde_core"
+version = "1.0.226"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba2ba63999edb9dac981fb34b3e5c0d111a69b0924e253ed29d83f7c99e966a4"
+dependencies = [
+ "serde_derive",
+]
+
 [[package]]
 name = "serde_derive"
-version = "1.0.219"
+version = "1.0.226"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+checksum = "8db53ae22f34573731bafa1db20f04027b2d25e02d8205921b569171699cdb33"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -11126,7 +11168,7 @@ version = "1.0.143"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d401abef1d108fbd9cbaebc3e46611f4b1021f714a0597a71f41ee463f5f4a5a"
 dependencies = [
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "itoa",
  "memchr",
  "ryu",
@@ -11182,6 +11224,15 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "serde_spanned"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5417783452c2be558477e104686f7de5dae53dba813c28435e0e70f82d9b04ee"
+dependencies = [
+ "serde_core",
+]
+
 [[package]]
 name = "serde_urlencoded"
 version = "0.7.1"
@@ -11204,7 +11255,7 @@ dependencies = [
  "chrono",
  "hex",
  "indexmap 1.9.3",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "serde",
  "serde_derive",
  "serde_json",
@@ -11230,7 +11281,7 @@ version = "0.9.34+deprecated"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
 dependencies = [
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "itoa",
  "ryu",
  "serde",
@@ -11789,9 +11840,9 @@ checksum = "e502f78cdbb8ba4718f566c418c52bc729126ffd16baee5baa718cf25dd5a69a"
 
 [[package]]
 name = "target-spec"
-version = "3.5.0"
+version = "3.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53928b291de23967df6740f2e584bb68101890f63d730292c0a5205092c8e0fa"
+checksum = "a71c1bf7d91dcc2635d3f3f59a5b03b982868af0545fa28b2a5a070cbdd09ffe"
 dependencies = [
  "cfg-expr",
  "guppy-workspace-hack",
@@ -12298,11 +12349,26 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "05ae329d1f08c4d17a59bed7ff5b5a769d062e64a62d34a3261b219e62cd5aae"
 dependencies = [
  "serde",
- "serde_spanned",
- "toml_datetime",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.11",
  "toml_edit 0.22.26",
 ]
 
+[[package]]
+name = "toml"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae2a4cf385da23d1d53bc15cdfa5c2109e93d8d362393c801e87da2f72f0e201"
+dependencies = [
+ "indexmap 2.11.4",
+ "serde_core",
+ "serde_spanned 1.0.2",
+ "toml_datetime 0.7.2",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.13",
+]
+
 [[package]]
 name = "toml_datetime"
 version = "0.6.11"
@@ -12312,14 +12378,23 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "toml_datetime"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32f1085dec27c2b6632b04c80b3bb1b4300d6495d1e129693bdda7d91e72eec1"
+dependencies = [
+ "serde_core",
+]
+
 [[package]]
 name = "toml_edit"
 version = "0.19.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8123f27e969974a3dfba720fdb560be359f57b44302d280ba72e76a74480e8a"
 dependencies = [
- "indexmap 2.10.0",
- "toml_datetime",
+ "indexmap 2.11.4",
+ "toml_datetime 0.6.11",
  "winnow 0.5.4",
 ]
 
@@ -12329,12 +12404,21 @@ version = "0.22.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "310068873db2c5b3e7659d2cc35d21855dbafa50d1ce336397c666e3cb08137e"
 dependencies = [
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "serde",
- "serde_spanned",
- "toml_datetime",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.11",
  "toml_write",
- "winnow 0.7.10",
+ "winnow 0.7.13",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cf893c33be71572e0e9aa6dd15e6677937abd686b066eac3f8cd3531688a627"
+dependencies = [
+ "winnow 0.7.13",
 ]
 
 [[package]]
@@ -12343,6 +12427,12 @@ version = "0.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
 
+[[package]]
+name = "toml_writer"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d163a63c116ce562a22cda521fcc4d79152e7aba014456fb5eb442f6d6a10109"
+
 [[package]]
 name = "tonic"
 version = "0.12.3"
@@ -12355,7 +12445,7 @@ dependencies = [
  "base64 0.22.1",
  "bytes",
  "flate2",
- "h2 0.4.11",
+ "h2 0.4.12",
  "http 1.2.0",
  "http-body 1.0.1",
  "http-body-util",
@@ -12416,7 +12506,7 @@ checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9"
 dependencies = [
  "futures-core",
  "futures-util",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "pin-project-lite",
  "slab",
  "sync_wrapper 1.0.2",
@@ -12736,7 +12826,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1f0d6c134ef37268c94d50fb74252af1c34c5c88389e2c1af85654da944ceb52"
 dependencies = [
  "bytes",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "rand 0.8.5",
  "rand_distr",
  "scoped-tls",
@@ -13512,9 +13602,9 @@ dependencies = [
 
 [[package]]
 name = "winnow"
-version = "0.7.10"
+version = "0.7.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c06928c8748d81b05c9be96aad92e1b6ff01833332f281e8cfca3be4b35fc9ec"
+checksum = "21a0236b59786fed61e2a80582dd500fe61f18b5dca67a4a067d0bc9039339cf"
 dependencies = [
  "memchr",
 ]
@@ -13590,7 +13680,7 @@ dependencies = [
  "deranged",
  "digest",
  "either",
- "event-listener 5.4.0",
+ "event-listener 5.4.1",
  "event-listener-strategy",
  "fastrand 2.3.0",
  "flate2",
@@ -13686,7 +13776,7 @@ dependencies = [
  "tokio-postgres",
  "tokio-stream",
  "tokio-util",
- "toml_datetime",
+ "toml_datetime 0.6.11",
  "toml_edit 0.22.26",
  "tonic",
  "tower 0.5.2",
@@ -13776,7 +13866,7 @@ dependencies = [
  "arbitrary",
  "crc32fast",
  "flate2",
- "indexmap 2.10.0",
+ "indexmap 2.11.4",
  "memchr",
 ]
 
diff --git a/misc/bazel/cargo-gazelle/Cargo.toml b/misc/bazel/cargo-gazelle/Cargo.toml
index 5e04e1e5a4b80..864cf79aae552 100644
--- a/misc/bazel/cargo-gazelle/Cargo.toml
+++ b/misc/bazel/cargo-gazelle/Cargo.toml
@@ -13,12 +13,12 @@ workspace = true
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 camino = "1"
-cargo_toml = "0.22.1"
+cargo_toml = "0.22.3"
 clap = { version = "4.5.23", features = ["derive", "env"] }
 convert_case = "0.8"
-guppy = "0.17.19"
+guppy = "0.17.21"
 md-5 = "0.10.6"
 proc-macro2 = "1.0.95"
 protobuf-parse = "3.7.2"
diff --git a/src/adapter/Cargo.toml b/src/adapter/Cargo.toml
index 9a13a0bee7b3f..5c2043c0302d8 100644
--- a/src/adapter/Cargo.toml
+++ b/src/adapter/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 async-stream = "0.3.6"
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 base64 = "0.22.1"
 bytes = "1.10.1"
 bytesize = "1.3.0"
@@ -24,7 +24,7 @@ differential-dataflow = "0.17.0"
 enum-kinds = "0.5.1"
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.31"
-governor = "0.10.0"
+governor = "0.10.1"
 hex = "0.4.3"
 http = "1.2.0"
 hyper-tls = "0.5.0"
diff --git a/src/arrow-util/Cargo.toml b/src/arrow-util/Cargo.toml
index 1402f0c8810af..c8245eed324b0 100644
--- a/src/arrow-util/Cargo.toml
+++ b/src/arrow-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 dec = { version = "0.4.9", features = ["num-traits"] }
diff --git a/src/audit-log/Cargo.toml b/src/audit-log/Cargo.toml
index 9eee1ca52e417..2b8160a9958e0 100644
--- a/src/audit-log/Cargo.toml
+++ b/src/audit-log/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-ore = { path = "../ore", features = ["test"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 proptest-derive = { version = "0.5.1", features = ["boxed_union"] }
diff --git a/src/avro/Cargo.toml b/src/avro/Cargo.toml
index edf6d97b8806c..2ddaac95057ce 100644
--- a/src/avro/Cargo.toml
+++ b/src/avro/Cargo.toml
@@ -15,7 +15,7 @@ autobenches = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 byteorder = { version = "1.4.3", optional = true }
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 crc32fast = { version = "1.3.2", optional = true }
diff --git a/src/aws-secrets-controller/Cargo.toml b/src/aws-secrets-controller/Cargo.toml
index 1885513f09f8e..228877cb7d4b9 100644
--- a/src/aws-secrets-controller/Cargo.toml
+++ b/src/aws-secrets-controller/Cargo.toml
@@ -13,10 +13,10 @@ workspace = true
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 aws-config = { version = "1.2.0", default-features = false }
-aws-credential-types = { version = "1.2.4", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.6", features = ["hardcoded-credentials"] }
 aws-sdk-secretsmanager = { version = "1.45.0", default-features = false, features = ["rt-tokio"] }
 aws-types = "1.3.7"
 futures = { version = "0.3.31" }
diff --git a/src/aws-util/Cargo.toml b/src/aws-util/Cargo.toml
index 01d6319d4344c..d6749ae99bf60 100644
--- a/src/aws-util/Cargo.toml
+++ b/src/aws-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 aws-config = { version = "1.2.0", default-features = false }
 aws-sdk-s3 = { version = "1.48.0", default-features = false, features = [
     "rt-tokio",
diff --git a/src/balancerd/Cargo.toml b/src/balancerd/Cargo.toml
index 0f94ab81be3ec..53a53d975abaf 100644
--- a/src/balancerd/Cargo.toml
+++ b/src/balancerd/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 axum = "0.7.5"
 bytes = "1.10.1"
 bytesize = "1.3.0"
@@ -22,7 +22,7 @@ futures = "0.3.31"
 humantime = "2.2.0"
 hyper = { version = "1.4.1", features = ["http1", "server"] }
 hyper-openssl = "0.10.2"
-hyper-util = "0.1.16"
+hyper-util = "0.1.17"
 jsonwebtoken = "9.3.1"
 launchdarkly-server-sdk = { version = "2.5.1", default-features = false }
 mz-alloc = { path = "../alloc" }
diff --git a/src/build-tools/Cargo.toml b/src/build-tools/Cargo.toml
index 32294aea69b69..69871fe7a9f1e 100644
--- a/src/build-tools/Cargo.toml
+++ b/src/build-tools/Cargo.toml
@@ -7,7 +7,7 @@ rust-version.workspace = true
 publish = false
 
 [dependencies]
-cfg-if = "1.0.1"
+cfg-if = "1.0.3"
 protobuf-src = { version = "2.1.1", optional = true }
 which = "8"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/catalog-debug/Cargo.toml b/src/catalog-debug/Cargo.toml
index 320a50e6d5783..beeaf9665e6e2 100644
--- a/src/catalog-debug/Cargo.toml
+++ b/src/catalog-debug/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 clap = { version = "4.5.23", features = ["derive", "env"] }
 futures = "0.3.31"
 mz-adapter = { path = "../adapter" }
diff --git a/src/catalog-protos/Cargo.toml b/src/catalog-protos/Cargo.toml
index 3c0bdb81ada8f..7983c63f602d9 100644
--- a/src/catalog-protos/Cargo.toml
+++ b/src/catalog-protos/Cargo.toml
@@ -31,7 +31,7 @@ proptest = { version = "1.7.0", default-features = false, features = ["std"] }
 similar-asserts = "1.7"
 
 [build-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 md-5 = "0.10.6"
 mz-build-tools = { path = "../build-tools", default-features = false, features = ["protobuf-src"] }
 prost-build = "0.13.5"
diff --git a/src/catalog/Cargo.toml b/src/catalog/Cargo.toml
index 6db7c9645228c..c5049acc587c7 100644
--- a/src/catalog/Cargo.toml
+++ b/src/catalog/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 base64 = "0.22.1"
 bincode = { version = "1.3.3" }
 bytes = { version = "1.10.1", features = ["serde"] }
diff --git a/src/ccsr/Cargo.toml b/src/ccsr/Cargo.toml
index ca9e1481caf6e..2e367341a9944 100644
--- a/src/ccsr/Cargo.toml
+++ b/src/ccsr/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 native-tls = "0.2.14"
 openssl = { version = "0.10.73", features = ["vendored"] }
 reqwest = { version = "0.11.13", features = [
@@ -28,7 +28,7 @@ workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = tru
 
 [dev-dependencies]
 hyper = { version = "1.4.1", features = ["server"] }
-hyper-util = "0.1.16"
+hyper-util = "0.1.17"
 mz-ore = { path = "../ore", features = ["async", "test"] }
 serde_json = "1.0.127"
 tokio = { version = "1.44.1", features = ["macros"] }
diff --git a/src/cloud-api/Cargo.toml b/src/cloud-api/Cargo.toml
index 5cb01fb7f733e..ec6fa3373afa8 100644
--- a/src/cloud-api/Cargo.toml
+++ b/src/cloud-api/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 reqwest = { version = "0.11.4", features = ["json"] }
 serde = { version = "1.0.219", features = ["derive"] }
diff --git a/src/cloud-resources/Cargo.toml b/src/cloud-resources/Cargo.toml
index 5905a84a9f25c..4312cd39fe09f 100644
--- a/src/cloud-resources/Cargo.toml
+++ b/src/cloud-resources/Cargo.toml
@@ -10,11 +10,11 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 chrono = { version = "0.4.39", default-features = false }
 futures = "0.3.31"
 k8s-openapi = { version = "0.26.0", features = ["schemars", "v1_31"] }
-kube = { version = "2.0.0", default-features = false, features = ["client", "derive", "openssl-tls", "ws", "runtime"] }
+kube = { version = "2.0.1", default-features = false, features = ["client", "derive", "openssl-tls", "ws", "runtime"] }
 mz-ore = { path = "../ore", default-features = false, features = ["async"] }
 mz-server-core = { path = "../server-core", default-features = false }
 rand = "0.8.5"
@@ -26,7 +26,7 @@ tracing = "0.1.37"
 uuid = { version = "1.17", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
-async-trait = { version = "0.1.88", optional = true }
+async-trait = { version = "0.1.89", optional = true }
 mz-repr = { path = "../repr", default-features = false, optional = true }
 
 [dev-dependencies]
diff --git a/src/cluster-client/Cargo.toml b/src/cluster-client/Cargo.toml
index f63bceb4cec3b..014e0c0b15e54 100644
--- a/src/cluster-client/Cargo.toml
+++ b/src/cluster-client/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-ore = { path = "../ore", features = ["tracing"] }
 mz-repr = { path = "../repr" }
 prometheus = { version = "0.13.4", default-features = false }
diff --git a/src/cluster/Cargo.toml b/src/cluster/Cargo.toml
index f3027d3781acf..e4db107557f72 100644
--- a/src/cluster/Cargo.toml
+++ b/src/cluster/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 crossbeam-channel = "0.5.15"
 differential-dataflow = "0.17.0"
 futures = "0.3.31"
diff --git a/src/clusterd/Cargo.toml b/src/clusterd/Cargo.toml
index 10c76ee03f59c..270b55a098833 100644
--- a/src/clusterd/Cargo.toml
+++ b/src/clusterd/Cargo.toml
@@ -10,13 +10,13 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 axum = "0.7.5"
 clap = { version = "4.5.23", features = ["derive", "env"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.31"
 hyper = "1.4.1"
-hyper-util = "0.1.16"
+hyper-util = "0.1.17"
 mz-alloc = { path = "../alloc" }
 mz-alloc-default = { path = "../alloc-default", optional = true }
 mz-build-info = { path = "../build-info" }
diff --git a/src/compute-client/Cargo.toml b/src/compute-client/Cargo.toml
index 7a4cc55c7deff..111e3e59e9503 100644
--- a/src/compute-client/Cargo.toml
+++ b/src/compute-client/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 bytesize = "1.3.0"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 derivative = "2.2.0"
diff --git a/src/compute-types/Cargo.toml b/src/compute-types/Cargo.toml
index fd7005b781daf..e53f380ee6be8 100644
--- a/src/compute-types/Cargo.toml
+++ b/src/compute-types/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-columnar = "0.10.1"
+columnar = "0.10.2"
 columnation = "0.1.0"
 differential-dataflow = "0.17.0"
 itertools = "0.14.0"
diff --git a/src/compute/Cargo.toml b/src/compute/Cargo.toml
index 32f639fd36f5e..cd356103664fa 100644
--- a/src/compute/Cargo.toml
+++ b/src/compute/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 async-stream = "0.3.6"
 bytesize = "1.3.0"
-columnar = "0.10.1"
+columnar = "0.10.2"
 crossbeam-channel = "0.5.15"
 dec = { version = "0.4.8", features = ["serde"] }
 differential-dataflow = "0.17.0"
diff --git a/src/controller/Cargo.toml b/src/controller/Cargo.toml
index c85e23239fb5d..e886d3eaf746d 100644
--- a/src/controller/Cargo.toml
+++ b/src/controller/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 bytesize = "1.3.0"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 futures = "0.3.31"
diff --git a/src/durable-cache/Cargo.toml b/src/durable-cache/Cargo.toml
index 1e22f6b0e2d09..f6aeb5bf07d30 100644
--- a/src/durable-cache/Cargo.toml
+++ b/src/durable-cache/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 bytes = { version = "1.10.1" }
 differential-dataflow = "0.17.0"
 futures = "0.3.31"
diff --git a/src/dyncfg-file/Cargo.toml b/src/dyncfg-file/Cargo.toml
index e42070539ccac..5bc9590b559b1 100644
--- a/src/dyncfg-file/Cargo.toml
+++ b/src/dyncfg-file/Cargo.toml
@@ -11,7 +11,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.97"
+anyhow = "1.0.100"
 humantime = "2.2.0"
 mz-dyncfg = { path = "../dyncfg" }
 mz-ore = { path = "../ore" }
diff --git a/src/dyncfg-launchdarkly/Cargo.toml b/src/dyncfg-launchdarkly/Cargo.toml
index 949ed11645e45..3235f7bdcf75a 100644
--- a/src/dyncfg-launchdarkly/Cargo.toml
+++ b/src/dyncfg-launchdarkly/Cargo.toml
@@ -11,7 +11,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 humantime = "2.2.0"
 hyper-tls = "0.5.0"
 launchdarkly-server-sdk = { version = "2.5.1", default-features = false }
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index b29873907a7a1..ff3a9ae5644ee 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -12,9 +12,9 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 askama = { version = "0.12.1", default-features = false, features = ["config", "serde-json"] }
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 axum = { version = "0.7.5", features = ["ws"] }
 axum-extra = { version = "0.9.3", features = ["typed-header"] }
 base64 = "0.22.1"
@@ -31,12 +31,12 @@ humantime = "2.2.0"
 hyper = { version = "1.4.1", features = ["http1", "server"] }
 hyper-openssl = "0.10.2"
 hyper-tls = "0.6.0"
-hyper-util = "0.1.16"
+hyper-util = "0.1.17"
 include_dir = "0.7.4"
 ipnet = "2.11.0"
 itertools = "0.14.0"
 jsonwebtoken = "9.3.1"
-libc = "0.2.174"
+libc = "0.2.175"
 maplit = "1.0.2"
 mime = "0.3.16"
 mz-alloc = { path = "../alloc" }
@@ -163,8 +163,8 @@ timely = "0.24.0"
 tokio-postgres = { version = "0.7.8", features = ["with-chrono-0_4"] }
 
 [build-dependencies]
-anyhow = "1.0.98"
-cc = "1.2.30"
+anyhow = "1.0.100"
+cc = "1.2.38"
 mz-npm = { path = "../npm" }
 
 [features]
diff --git a/src/expr/Cargo.toml b/src/expr/Cargo.toml
index d1f33ee5e5671..ff6a5eb634517 100644
--- a/src/expr/Cargo.toml
+++ b/src/expr/Cargo.toml
@@ -19,7 +19,7 @@ harness = false
 
 [dependencies]
 aho-corasick = "1.1.3"
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 bytes = "1.10.1"
 bytesize = "1.3.0"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
diff --git a/src/frontegg-auth/Cargo.toml b/src/frontegg-auth/Cargo.toml
index 77305a39122ab..a189ee47d3797 100644
--- a/src/frontegg-auth/Cargo.toml
+++ b/src/frontegg-auth/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 base64 = "0.22.1"
 clap = { version = "4.5.23", features = ["wrap_help", "env", "derive"] }
 derivative = "2.2.0"
diff --git a/src/frontegg-mock/Cargo.toml b/src/frontegg-mock/Cargo.toml
index c04d595620d5e..b263639ecfa2b 100644
--- a/src/frontegg-mock/Cargo.toml
+++ b/src/frontegg-mock/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 axum = "0.7.5"
 axum-extra = { version = "0.9.3", features = ["typed-header"] }
 base64 = "0.22.1"
diff --git a/src/http-util/Cargo.toml b/src/http-util/Cargo.toml
index b38ba9b4544e8..b871e16cd44d7 100644
--- a/src/http-util/Cargo.toml
+++ b/src/http-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 askama = { version = "0.12.1", default-features = false, features = ["config", "serde-json"] }
 axum = "0.7.5"
 axum-extra = { version = "0.9.3", features = ["typed-header"] }
diff --git a/src/interchange/Cargo.toml b/src/interchange/Cargo.toml
index 4a62a9f66d756..266bda1d59802 100644
--- a/src/interchange/Cargo.toml
+++ b/src/interchange/Cargo.toml
@@ -15,7 +15,7 @@ path = "benches/benches.rs"
 harness = false
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 byteorder = "1.4.3"
 bytes = "1.10.1"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
diff --git a/src/kafka-util/Cargo.toml b/src/kafka-util/Cargo.toml
index 820d2cefe53c5..49355f2f6b3d0 100644
--- a/src/kafka-util/Cargo.toml
+++ b/src/kafka-util/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 aws-config = { version = "1.2.0", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.4" }
-aws-sigv4 = { version = "1.3.3" }
+aws-credential-types = { version = "1.2.6" }
+aws-sigv4 = { version = "1.3.4" }
 aws-types = "1.3.7"
 base64 = "0.22.1"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
diff --git a/src/license-keys/Cargo.toml b/src/license-keys/Cargo.toml
index 9d8fe4cc66104..d3385dc5af734 100644
--- a/src/license-keys/Cargo.toml
+++ b/src/license-keys/Cargo.toml
@@ -15,7 +15,7 @@ name = "sign"
 required-features = ["signing"]
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 jsonwebtoken = "9.3.1"
 serde = { version = "1.0.219", features = ["derive"] }
 
diff --git a/src/lowertest/Cargo.toml b/src/lowertest/Cargo.toml
index 32bda279f31ed..0e290b152d4a7 100644
--- a/src/lowertest/Cargo.toml
+++ b/src/lowertest/Cargo.toml
@@ -19,7 +19,7 @@ itertools = "0.14.0"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 datadriven = "0.8.0"
 
 [package.metadata.cargo-udeps.ignore]
diff --git a/src/metrics/Cargo.toml b/src/metrics/Cargo.toml
index fac8bdaeef77e..635b1520e7318 100644
--- a/src/metrics/Cargo.toml
+++ b/src/metrics/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 lgalloc = "0.6"
-libc = "0.2.174"
+libc = "0.2.175"
 mz-dyncfg = { path = "../dyncfg" }
 mz-ore = { path = "../ore", features = ["metrics"] }
 paste = "1.0"
diff --git a/src/mysql-util/Cargo.toml b/src/mysql-util/Cargo.toml
index 53e6ec6083e48..d4f197959acb8 100644
--- a/src/mysql-util/Cargo.toml
+++ b/src/mysql-util/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 aws-config = { version = "1.2.0", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.4" }
-aws-sigv4 = { version = "1.3.3" }
+aws-credential-types = { version = "1.2.6" }
+aws-sigv4 = { version = "1.3.4" }
 aws-types = "1.3.7"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 indexmap = { version = "2.10.0", default-features = false, features = ["std"] }
@@ -24,7 +24,7 @@ mz-ore = { path = "../ore", features = ["async"] }
 mz-proto = { path = "../proto" }
 mz-repr = { path = "../repr" }
 mz-ssh-util = { path = "../ssh-util" }
-mysql_common = { version = "0.35.4", default-features = false, features = [
+mysql_common = { version = "0.35.5", default-features = false, features = [
     "chrono",
 ] }
 mysql_async = { version = "0.36.1", default-features = false, features = [
diff --git a/src/mz-debug/Cargo.toml b/src/mz-debug/Cargo.toml
index bb2cdd7e8a1a7..faa9feb748b1f 100644
--- a/src/mz-debug/Cargo.toml
+++ b/src/mz-debug/Cargo.toml
@@ -10,13 +10,13 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 chrono = { version = "0.4.39", default-features = false }
 clap = { version = "4.5.23", features = ["derive", "env"] }
 csv-async = { version = "1.3.1", default-features = false, features = ["tokio"] }
 futures = "0.3.31"
 k8s-openapi = { version = "0.26.0", features = ["v1_31"] }
-kube = { version = "2.0.0", default-features = false, features = ["client", "runtime"] }
+kube = { version = "2.0.1", default-features = false, features = ["client", "runtime"] }
 mz-build-info = { path = "../build-info" }
 mz-cloud-resources = { path = "../cloud-resources"}
 mz-ore = { path = "../ore", features = ["cli", "test"] }
diff --git a/src/npm/Cargo.toml b/src/npm/Cargo.toml
index fd013330f7eb3..acecf03a76b1f 100644
--- a/src/npm/Cargo.toml
+++ b/src/npm/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 flate2 = "1.1.2"
 hex = "0.4.3"
 hex-literal = "1.0.0"
diff --git a/src/orchestrator-kubernetes/Cargo.toml b/src/orchestrator-kubernetes/Cargo.toml
index 14faf1b909d63..292b8eeb7d8f4 100644
--- a/src/orchestrator-kubernetes/Cargo.toml
+++ b/src/orchestrator-kubernetes/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 chrono = { version = "0.4.39", default-features = false }
 clap = { version = "4.5.23", features = ["derive"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
@@ -23,7 +23,7 @@ mz-ore = { path = "../ore", default-features = false, features = ["async"]  }
 mz-secrets = { path = "../secrets", default-features = false }
 mz-repr = { path = "../repr", default-features = false }
 k8s-openapi = { version = "0.26.0", features = ["v1_31"] }
-kube = { version = "2.0.0", default-features = false, features = ["client", "runtime", "ws"] }
+kube = { version = "2.0.1", default-features = false, features = ["client", "runtime", "ws"] }
 reqwest = { version = "0.11.13", features = ["json"] }
 serde = { version = "1.0.219", features = ["derive"] }
 serde_json = "1.0.127"
diff --git a/src/orchestrator-process/Cargo.toml b/src/orchestrator-process/Cargo.toml
index 020f3c0daf261..e37ac8969e93d 100644
--- a/src/orchestrator-process/Cargo.toml
+++ b/src/orchestrator-process/Cargo.toml
@@ -10,14 +10,14 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 async-stream = "0.3.6"
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 chrono = { version = "0.4.39", default-features = false, features = ["clock"] }
 futures = "0.3.31"
 hex = "0.4.3"
 itertools = "0.14.0"
-libc = "0.2.174"
+libc = "0.2.175"
 maplit = "1.0.2"
 mz-orchestrator = { path = "../orchestrator", default-features = false }
 mz-ore = { path = "../ore", default-features = false, features = ["async", "network"] }
diff --git a/src/orchestrator-tracing/Cargo.toml b/src/orchestrator-tracing/Cargo.toml
index a89108538a498..129ad8fc38874 100644
--- a/src/orchestrator-tracing/Cargo.toml
+++ b/src/orchestrator-tracing/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 clap = { version = "4.5.23", features = ["env", "derive"] }
 derivative = "2.2.0"
 futures-core = "0.3.31"
diff --git a/src/orchestrator/Cargo.toml b/src/orchestrator/Cargo.toml
index 517708ec6b62d..e9aacf732d065 100644
--- a/src/orchestrator/Cargo.toml
+++ b/src/orchestrator/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 bytesize = "1.3.0"
 chrono = { version = "0.4.39", default-features = false, features = ["serde"] }
 derivative = "2.2.0"
diff --git a/src/orchestratord/Cargo.toml b/src/orchestratord/Cargo.toml
index d1e26f7f9150e..4b4218d53d3b6 100644
--- a/src/orchestratord/Cargo.toml
+++ b/src/orchestratord/Cargo.toml
@@ -10,16 +10,16 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 axum = "0.7.5"
 chrono = { version = "0.4.39", default-features = false }
 clap = { version = "4.5.23", features = ["derive"] }
 futures = "0.3.31"
 http = "1.2.0"
-k8s-controller = "0.6.0"
+k8s-controller = "0.6.1"
 k8s-openapi = { version = "0.26.0", features = ["v1_31"] }
-kube = { version = "2.0.0", default-features = false, features = ["client", "runtime", "ws"] }
+kube = { version = "2.0.1", default-features = false, features = ["client", "runtime", "ws"] }
 maplit = "1.0.2"
 mz-alloc = { path = "../alloc", default-features = false }
 mz-alloc-default = { path = "../alloc-default", optional = true, default-features = false }
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index ed830f3a763c2..08285d8af934d 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -11,20 +11,20 @@ authors = ["Materialize, Inc."]
 workspace = true
 
 [dependencies]
-anyhow = { version = "1.0.98", optional = true }
+anyhow = { version = "1.0.100", optional = true }
 # NB: ore is meant to be an extension of the Rust stdlib. To keep it
 # lightweight, dependencies on external crates should be avoided if possible. If
 # an external crate is required, it must be optional and feature-gated.
 #
 # The only exception to the above is the `either` crate, which itself has zero
 # dependencies and is widely considered to be basically part of the stdlib.
-async-trait = { version = "0.1.88", optional = true }
-bytemuck = { version = "1.23.1", optional = true }
+async-trait = { version = "0.1.89", optional = true }
+bytemuck = { version = "1.23.2", optional = true }
 bytes = { version = "1.10.1", optional = true }
 chrono = { version = "0.4.39", default-features = false, features = ["std"], optional = true }
 clap = { version = "4.5.23", features = ["env", "string"], optional = true }
 columnation = { version = "0.1.0", optional = true }
-columnar = { version = "0.10.1", optional = true }
+columnar = { version = "0.10.2", optional = true }
 compact_bytes = { version = "0.2.1", optional = true }
 ctor = { version = "0.4.2", optional = true }
 differential-dataflow = { version = "0.17.0", optional = true }
@@ -34,7 +34,7 @@ futures = { version = "0.3.31", optional = true }
 hibitset = { version = "0.6.4", optional = true }
 itertools = "0.14.0"
 lgalloc = { version = "0.6", optional = true }
-libc = { version = "0.2.174", optional = true }
+libc = { version = "0.2.175", optional = true }
 mz-ore-proc = { path = "../ore-proc", default-features = false }
 num = "0.4.3"
 num-traits = { version = "0.2", optional = true }
@@ -86,7 +86,7 @@ tonic = { version = "0.12.1", features = ["transport"], optional = true }
 tokio-native-tls = { version = "0.3.1", optional = true }
 native-tls = { version = "0.2.14", features = ["alpn"], optional = true }
 hyper-tls = { version = "0.6.0", optional = true }
-hyper-util = { version = "0.1.16", optional = true }
+hyper-util = { version = "0.1.17", optional = true }
 opentelemetry = { version = "0.24.0", features = ["trace"], optional = true }
 opentelemetry-otlp = { version = "0.17.0", optional = true }
 opentelemetry_sdk = { version = "0.24.1", features = ["rt-tokio"], optional = true }
@@ -96,7 +96,7 @@ turmoil = { version = "0.6.6", optional = true }
 yansi = { version = "1.0.1", optional = true }
 
 [dev-dependencies]
-anyhow = { version = "1.0.98" }
+anyhow = { version = "1.0.100" }
 criterion = { version = "0.6.0", features = ["async_tokio"] }
 mz-ore = { path = "../ore", features = ["id_gen", "chrono"] }
 proptest = { version = "1.7.0", default-features = false, features = ["std"] }
diff --git a/src/persist-cli/Cargo.toml b/src/persist-cli/Cargo.toml
index 54132a5b28eef..40635b5aabf33 100644
--- a/src/persist-cli/Cargo.toml
+++ b/src/persist-cli/Cargo.toml
@@ -17,9 +17,9 @@ name = "persistcli"
 bench = false
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 axum = "0.7.5"
 bytes = { version = "1.10.1", features = ["serde"] }
 clap = { version = "4.5.23", features = ["derive", "env"] }
diff --git a/src/persist-client/Cargo.toml b/src/persist-client/Cargo.toml
index 347f869ccb43d..39c22566bad54 100644
--- a/src/persist-client/Cargo.toml
+++ b/src/persist-client/Cargo.toml
@@ -28,17 +28,17 @@ name = "benches"
 harness = false
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrayvec = "0.7.6"
 arrow = { version = "55.2.0", default-features = false }
 async-stream = "0.3.6"
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 bytes = { version = "1.10.1", features = ["serde"] }
 clap = { version = "4.5.23", features = ["derive"] }
 differential-dataflow = "0.17.0"
 futures = "0.3.31"
 futures-util = "0.3"
-h2 = "0.4.11"
+h2 = "0.4.12"
 hex = "0.4.3"
 itertools = "0.14.0"
 mz-build-info = { path = "../build-info" }
diff --git a/src/persist-types/Cargo.toml b/src/persist-types/Cargo.toml
index 991427671d807..43249f07743d1 100644
--- a/src/persist-types/Cargo.toml
+++ b/src/persist-types/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 # NB: This is meant to be a strong, independent abstraction boundary. Please
 # don't leak in dependencies on other Materialize packages.
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 bytes = { version = "1.10.1", features = ["serde"] }
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
diff --git a/src/persist/Cargo.toml b/src/persist/Cargo.toml
index ce9bc80808dd2..96b32321b19c4 100644
--- a/src/persist/Cargo.toml
+++ b/src/persist/Cargo.toml
@@ -22,12 +22,12 @@ bench = false
 # NB: This is meant to be a strong, independent abstraction boundary. Please
 # don't leak in dependencies on other Materialize packages.
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 async-stream = "0.3.6"
 aws-config = { version = "1.2.0", default-features = false }
-aws-credential-types = { version = "1.2.4", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.6", features = ["hardcoded-credentials"] }
 aws-sdk-s3 = { version = "1.48.0", default-features = false, features = ["rt-tokio"] }
 aws-types = "1.3.7"
 azure_identity = { version = "0.21.0" }
diff --git a/src/pgtest/Cargo.toml b/src/pgtest/Cargo.toml
index 57ea208963c30..871aa2eb1e1fb 100644
--- a/src/pgtest/Cargo.toml
+++ b/src/pgtest/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 bytes = "1.10.1"
 clap = { version = "4.5.23", features = ["derive"] }
 datadriven = "0.8.0"
diff --git a/src/pgtz/Cargo.toml b/src/pgtz/Cargo.toml
index 9dbfcad62bc43..7d8737d477464 100644
--- a/src/pgtz/Cargo.toml
+++ b/src/pgtz/Cargo.toml
@@ -25,7 +25,7 @@ uncased = "0.9.7"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [build-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 chrono-tz = { version = "0.8.1", features = ["serde", "case-insensitive"] }
 mz-build-tools = { path = "../build-tools", default-features = false, features = ["protobuf-src"] }
 mz-ore-build = { path = "../ore-build", default-features = false }
diff --git a/src/pgwire-common/Cargo.toml b/src/pgwire-common/Cargo.toml
index b09d19c48ea6c..d173e099164da 100644
--- a/src/pgwire-common/Cargo.toml
+++ b/src/pgwire-common/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 byteorder = "1.4.3"
 bytes = "1.10.1"
 bytesize = "1.3.0"
diff --git a/src/pgwire/Cargo.toml b/src/pgwire/Cargo.toml
index a19fbbed56805..c4ebc656710ce 100644
--- a/src/pgwire/Cargo.toml
+++ b/src/pgwire/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 base64 = "0.22.1"
 byteorder = "1.4.3"
 bytes = "1.10.1"
diff --git a/src/postgres-client/Cargo.toml b/src/postgres-client/Cargo.toml
index f6dcf95afefc6..5a9bb45884b04 100644
--- a/src/postgres-client/Cargo.toml
+++ b/src/postgres-client/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 deadpool-postgres = "0.10.3"
 mz-ore = { path = "../ore", default-features = false, features = ["metrics", "async", "bytes"] }
 mz-tls-util = { path = "../tls-util" }
diff --git a/src/postgres-util/Cargo.toml b/src/postgres-util/Cargo.toml
index 8fdad0b3fa7ff..084385c55f1c4 100644
--- a/src/postgres-util/Cargo.toml
+++ b/src/postgres-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 itertools = "0.14.0"
 mz-cloud-resources = { path = "../cloud-resources", optional = true }
 mz-ore = { path = "../ore", features = ["async"], optional = true }
diff --git a/src/prof-http/Cargo.toml b/src/prof-http/Cargo.toml
index 6cb01d238bc91..eb80d6717f341 100644
--- a/src/prof-http/Cargo.toml
+++ b/src/prof-http/Cargo.toml
@@ -14,11 +14,11 @@ askama = { version = "0.12.1", default-features = false, features = ["config", "
 axum = "0.7.5"
 axum-extra = { version = "0.9.3", features = ["typed-header"] }
 bytesize = "1.3.0"
-cfg-if = "1.0.1"
+cfg-if = "1.0.3"
 headers = "0.4.1"
 http = "1.2.0"
 include_dir = "0.7.4"
-mappings = "0.7.0"
+mappings = "0.7.1"
 mime = "0.3.16"
 mz-build-info = { path = "../build-info", default-features = false }
 mz-http-util = { path = "../http-util", default-features = false }
@@ -32,7 +32,7 @@ tracing = { version = "0.1.37", optional = true }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [build-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-npm = { path = "../npm", default-features = false }
 
 [features]
diff --git a/src/prof/Cargo.toml b/src/prof/Cargo.toml
index e3037ca9a2612..7453c1c8a6150 100644
--- a/src/prof/Cargo.toml
+++ b/src/prof/Cargo.toml
@@ -11,7 +11,7 @@ license = "Apache-2.0"
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 backtrace = "0.3.75"
 flate2 = "1.1.2"
 itertools = "0.14.0"
@@ -26,7 +26,7 @@ tokio = { version = "1.44.1", features = ["time"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [build-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-build-tools = { path = "../build-tools", default-features = false, features = ["protobuf-src"] }
 prost-build = "0.13.5"
 
diff --git a/src/proto/Cargo.toml b/src/proto/Cargo.toml
index be0eb2b783f47..4215a3c1910f0 100644
--- a/src/proto/Cargo.toml
+++ b/src/proto/Cargo.toml
@@ -11,7 +11,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 chrono = { version = "0.4.39", default-features = false, features = ["serde", "std"], optional = true }
 chrono-tz = { version = "0.8.1", features = ["serde", "case-insensitive"], optional = true }
 globset = "0.4.16"
diff --git a/src/regexp/Cargo.toml b/src/regexp/Cargo.toml
index f93be83d27927..eba9f2db58de0 100644
--- a/src/regexp/Cargo.toml
+++ b/src/regexp/Cargo.toml
@@ -14,7 +14,7 @@ mz-repr = { path = "../repr" }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-ore = { path = "../ore", features = ["cli"] }
 postgres = "0.19.5"
 
diff --git a/src/repr/Cargo.toml b/src/repr/Cargo.toml
index c6b52b2cafb70..488602c4ad0c5 100644
--- a/src/repr/Cargo.toml
+++ b/src/repr/Cargo.toml
@@ -26,13 +26,13 @@ name = "data_types"
 harness = false
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 bitflags = "1.3.2"
-bytemuck = { version = "1.23.1", features = ["latest_stable_rust"] }
+bytemuck = { version = "1.23.2", features = ["latest_stable_rust"] }
 bytes = "1.10.1"
-cfg-if = "1.0.1"
-columnar = "0.10.1"
+cfg-if = "1.0.3"
+columnar = "0.10.2"
 columnation = "0.1.0"
 chrono = { version = "0.4.39", default-features = false, features = ["serde", "std"] }
 compact_bytes = "0.2.1"
@@ -85,7 +85,7 @@ workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = tru
 [dev-dependencies]
 bincode = "1.3.3"
 criterion = { version = "0.6.0" }
-insta = { version = "1.43.1", features = ["json"] }
+insta = { version = "1.43.2", features = ["json"] }
 mz-persist = { path = "../persist" }
 rand = "0.8.5"
 
diff --git a/src/rocksdb-types/Cargo.toml b/src/rocksdb-types/Cargo.toml
index e721e861158be..9ab4d180cd396 100644
--- a/src/rocksdb-types/Cargo.toml
+++ b/src/rocksdb-types/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-ore = { path = "../ore", features = ["async", "metrics", "test"] }
 serde = { version = "1.0.219", features = ["derive"] }
 uncased = "0.9.7"
diff --git a/src/rocksdb/Cargo.toml b/src/rocksdb/Cargo.toml
index 126cf9382f9e7..18d06ac09e41d 100644
--- a/src/rocksdb/Cargo.toml
+++ b/src/rocksdb/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 bincode = { version = "1.3.3" }
 derivative = "2.2.0"
 itertools = { version = "0.14.0" }
diff --git a/src/s3-datagen/Cargo.toml b/src/s3-datagen/Cargo.toml
index 223a76ab35634..69ce0f4fea8bb 100644
--- a/src/s3-datagen/Cargo.toml
+++ b/src/s3-datagen/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 aws-config = { version = "1.2.0", default-features = false }
 aws-sdk-s3 = { version = "1.48.0", default-features = false, features = ["rt-tokio"] }
 bytefmt = "0.1.7"
diff --git a/src/secrets/Cargo.toml b/src/secrets/Cargo.toml
index f836210eb124c..289f742b49052 100644
--- a/src/secrets/Cargo.toml
+++ b/src/secrets/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 mz-repr = { path = "../repr", default-features = false }
 tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/server-core/Cargo.toml b/src/server-core/Cargo.toml
index bab7e86d3f118..a4781bd3d550b 100644
--- a/src/server-core/Cargo.toml
+++ b/src/server-core/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = { version = "0.1.88" }
+anyhow = "1.0.100"
+async-trait = { version = "0.1.89" }
 clap = { version = "4.5.23", features = ["derive", "env"] }
 openssl = { version = "0.10.73", features = ["vendored"] }
 schemars = { version = "1.0.4" }
diff --git a/src/service/Cargo.toml b/src/service/Cargo.toml
index f7bb137dad486..7561d1fd47325 100644
--- a/src/service/Cargo.toml
+++ b/src/service/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 async-stream = "0.3.6"
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 bincode = "1.3.3"
 clap = { version = "4.5.23", features = ["env", "derive"] }
 crossbeam-channel = "0.5.15"
diff --git a/src/sql-lexer/Cargo.toml b/src/sql-lexer/Cargo.toml
index 72c82e1815159..ee0703f3e133c 100644
--- a/src/sql-lexer/Cargo.toml
+++ b/src/sql-lexer/Cargo.toml
@@ -21,7 +21,7 @@ datadriven = "0.8.0"
 mz-ore = { path = "../ore", default-features = false, features = ["test"] }
 
 [build-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-ore-build = { path = "../ore-build", default-features = false }
 phf = { version = "0.11.1", features = ["uncased"] }
 phf_codegen = "0.11.3"
diff --git a/src/sql-parser/Cargo.toml b/src/sql-parser/Cargo.toml
index e09fba5c7740f..e80c5c77ceb25 100644
--- a/src/sql-parser/Cargo.toml
+++ b/src/sql-parser/Cargo.toml
@@ -34,7 +34,7 @@ mz-ore = { path = "../ore", default-features = false, features = ["test"] }
 mz-sql-parser = { path = ".", default-features = false, features = ["test"] }
 
 [build-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 mz-ore-build = { path = "../ore-build", default-features = false }
 mz-walkabout = { path = "../walkabout", default-features = false }
 
diff --git a/src/sql-server-util/Cargo.toml b/src/sql-server-util/Cargo.toml
index 2837c654413af..e241183856391 100644
--- a/src/sql-server-util/Cargo.toml
+++ b/src/sql-server-util/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 name = "cdc"
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 async-stream = "0.3.3"
 base64 = "0.22.1"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
diff --git a/src/sql/Cargo.toml b/src/sql/Cargo.toml
index 4c1bdab94c3f5..feec07672bf77 100644
--- a/src/sql/Cargo.toml
+++ b/src/sql/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 array-concat = "0.5.5"
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = [
     "rt-tokio",
diff --git a/src/sqllogictest/Cargo.toml b/src/sqllogictest/Cargo.toml
index 4aa3299095514..c0bb881911954 100644
--- a/src/sqllogictest/Cargo.toml
+++ b/src/sqllogictest/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 bytes = "1.10.1"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 clap = { version = "4.5.23", features = ["derive"] }
diff --git a/src/ssh-util/Cargo.toml b/src/ssh-util/Cargo.toml
index 340670381f128..eaeb26cc37e43 100644
--- a/src/ssh-util/Cargo.toml
+++ b/src/ssh-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = { version = "1.0.98" }
+anyhow = { version = "1.0.100" }
 mz-ore = { path = "../ore", features = ["test"] }
 openssh = { version = "0.11.5", default-features = false, features = ["native-mux"] }
 openssh-mux-client = "0.17.7"
diff --git a/src/storage-client/Cargo.toml b/src/storage-client/Cargo.toml
index 67d0c8bfa9ed3..be38c62b51ff7 100644
--- a/src/storage-client/Cargo.toml
+++ b/src/storage-client/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 differential-dataflow = "0.17.0"
 futures = "0.3.31"
diff --git a/src/storage-controller/Cargo.toml b/src/storage-controller/Cargo.toml
index 2ca975c34fd29..29d3249428d8c 100644
--- a/src/storage-controller/Cargo.toml
+++ b/src/storage-controller/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 bytes = "1.10.1"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 derivative = "2.2.0"
diff --git a/src/storage-operators/Cargo.toml b/src/storage-operators/Cargo.toml
index 66c5e03726771..c3191480b5437 100644
--- a/src/storage-operators/Cargo.toml
+++ b/src/storage-operators/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 async-compression = { version = "0.4.27", features = ["bzip2-sys", "gzip", "tokio", "xz", "zstd"] }
 async-stream = "0.3.6"
@@ -23,7 +23,7 @@ csv-async = { version = "1.3.1", features = ["tokio"] }
 derivative = "2.2.0"
 differential-dataflow = "0.17.0"
 futures = "0.3.31"
-glob = "0.3.2"
+glob = "0.3.3"
 http = "1.2.0"
 itertools = "0.14.0"
 mz-aws-util = { path = "../aws-util" }
diff --git a/src/storage-types/Cargo.toml b/src/storage-types/Cargo.toml
index baf745deec19e..13c6730f10d81 100644
--- a/src/storage-types/Cargo.toml
+++ b/src/storage-types/Cargo.toml
@@ -14,11 +14,11 @@ name = "row"
 harness = false
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 aws-config = { version = "1.2.0", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.4", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.6", features = ["hardcoded-credentials"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
 aws-types = "1.3.7"
 bytes = "1.10.1"
diff --git a/src/storage/Cargo.toml b/src/storage/Cargo.toml
index f3cf9d6445767..84068eee4f3fc 100644
--- a/src/storage/Cargo.toml
+++ b/src/storage/Cargo.toml
@@ -14,9 +14,9 @@ name = "upsert_open_loop"
 bench = false
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 async-stream = "0.3.6"
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 bytes = { version = "1.10.1", features = ["serde"] }
 bytesize = "1.3.0"
 bincode = "1"
@@ -33,7 +33,7 @@ indexmap = { version = "2.10.0", default-features = false, features = ["std"] }
 itertools = { version = "0.14.0" }
 maplit = "1.0.2"
 mysql_async = { version = "0.36.1", default-features = false, features = ["minimal", "binlog"] }
-mysql_common = { version = "0.35.4", default-features = false, features = ["chrono"] }
+mysql_common = { version = "0.35.5", default-features = false, features = ["chrono"] }
 mz-build-info = { path = "../build-info" }
 mz-ccsr = { path = "../ccsr" }
 mz-cluster-client = { path = "../cluster-client" }
@@ -89,7 +89,7 @@ uuid = { version = "1.17.0", features = ["serde", "v4"] }
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 axum = "0.7.5"
 clap = { version = "4.5.23", features = ["derive", "env"] }
 humantime = "2.2.0"
diff --git a/src/testdrive/Cargo.toml b/src/testdrive/Cargo.toml
index 12f19e1e477b7..8b665567cb774 100644
--- a/src/testdrive/Cargo.toml
+++ b/src/testdrive/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 async-compression = { version = "0.4.27", features = ["bzip2-sys", "gzip", "tokio", "xz", "zstd"] }
-async-trait = "0.1.88"
-aws-credential-types = { version = "1.2.4", features = ["hardcoded-credentials"] }
+async-trait = "0.1.89"
+aws-credential-types = { version = "1.2.6", features = ["hardcoded-credentials"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
 aws-types = "1.3.7"
 arrow = { version = "55.2.0", default-features = false }
diff --git a/src/timely-util/Cargo.toml b/src/timely-util/Cargo.toml
index 1c2a952946f9e..199282f634179 100644
--- a/src/timely-util/Cargo.toml
+++ b/src/timely-util/Cargo.toml
@@ -16,8 +16,8 @@ harness = false
 [dependencies]
 ahash = { version = "0.8.12", default-features = false }
 bincode = "1.3.3"
-bytemuck = "1.23.1"
-columnar = "0.10.1"
+bytemuck = "1.23.2"
+columnar = "0.10.2"
 columnation = "0.1.0"
 differential-dataflow = "0.17.0"
 either = "1"
diff --git a/src/timestamp-oracle/Cargo.toml b/src/timestamp-oracle/Cargo.toml
index 43c50e4703e25..7cb8f9aa6ba8a 100644
--- a/src/timestamp-oracle/Cargo.toml
+++ b/src/timestamp-oracle/Cargo.toml
@@ -10,8 +10,8 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
-async-trait = "0.1.88"
+anyhow = "1.0.100"
+async-trait = "0.1.89"
 dec = "0.4.8"
 deadpool-postgres = "0.10.3"
 futures = "0.3.31"
diff --git a/src/tls-util/Cargo.toml b/src/tls-util/Cargo.toml
index 73969a4de4cf2..eeb5866e9feb7 100644
--- a/src/tls-util/Cargo.toml
+++ b/src/tls-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 openssl = { version = "0.10.73", features = ["vendored"] }
 openssl-sys = { version = "0.9.108", features = ["vendored"] }
 postgres-openssl = { version = "0.5.0" }
diff --git a/src/transform/Cargo.toml b/src/transform/Cargo.toml
index ae755558cc9e5..63139d2b8496f 100644
--- a/src/transform/Cargo.toml
+++ b/src/transform/Cargo.toml
@@ -27,7 +27,7 @@ tracing = "0.1.37"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
 [dev-dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 datadriven = "0.8.0"
 mz-expr-parser = { path = "../expr-parser" }
 mz-expr-test-util = { path = "../expr-test-util" }
diff --git a/src/txn-wal/Cargo.toml b/src/txn-wal/Cargo.toml
index bc09065ad15a7..5b090e156637c 100644
--- a/src/txn-wal/Cargo.toml
+++ b/src/txn-wal/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.88"
+async-trait = "0.1.89"
 bytes = { version = "1.10.1" }
 differential-dataflow = "0.17.0"
 futures = "0.3.31"
diff --git a/src/walkabout/Cargo.toml b/src/walkabout/Cargo.toml
index 83a03fab9ccad..aec4132530a96 100644
--- a/src/walkabout/Cargo.toml
+++ b/src/walkabout/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 itertools = "0.14.0"
 mz-ore-build = { path = "../ore-build", default-features = false }
 quote = "1.0.40"
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index e94b4e1bef773..7f01a66288026 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -22,10 +22,10 @@ aho-corasick = { version = "1.1.3" }
 arrayvec = { version = "0.7.6" }
 async-compression = { git = "https://github.com/MaterializeInc/async-compression.git", rev = "fe7411eb6104a02a89e2c3a76ab326dd6594214d", default-features = false, features = ["brotli", "bzip2-sys", "gzip", "tokio", "xz", "zlib", "zstd"] }
 aws-config = { version = "1.2.1", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.5", default-features = false, features = ["hardcoded-credentials", "test-util"] }
-aws-runtime = { version = "1.5.9", default-features = false, features = ["event-stream", "http-02x"] }
+aws-credential-types = { version = "1.2.6", default-features = false, features = ["hardcoded-credentials", "test-util"] }
+aws-runtime = { version = "1.5.10", default-features = false, features = ["event-stream", "http-02x"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
-aws-sigv4 = { version = "1.3.3", features = ["http0-compat", "sign-eventstream"] }
+aws-sigv4 = { version = "1.3.4", features = ["http0-compat", "sign-eventstream"] }
 aws-smithy-async = { version = "1.2.5", default-features = false, features = ["rt-tokio"] }
 aws-smithy-http = { version = "0.60.12", default-features = false, features = ["event-stream"] }
 aws-smithy-runtime = { version = "1.8.4", default-features = false, features = ["client", "connector-hyper-0-14-x"] }
@@ -39,7 +39,7 @@ bit-vec = { version = "0.8.0" }
 bitflags = { version = "2.9.0", default-features = false, features = ["std"] }
 brotli = { version = "8.0.2" }
 bstr = { version = "1.12.0" }
-bytemuck = { version = "1.23.1", default-features = false, features = ["latest_stable_rust"] }
+bytemuck = { version = "1.23.2", default-features = false, features = ["latest_stable_rust"] }
 bytes = { version = "1.10.1", features = ["serde"] }
 chrono = { version = "0.4.41", features = ["serde"] }
 clap = { version = "4.5.23", features = ["derive", "env", "string", "wrap_help"] }
@@ -57,11 +57,11 @@ dec = { version = "0.4.11", default-features = false, features = ["num-traits",
 deranged = { version = "0.3.11", default-features = false, features = ["powerfmt", "quickcheck", "serde", "std"] }
 digest = { version = "0.10.7", features = ["mac", "oid", "std"] }
 either = { version = "1.15.0", features = ["use_std"] }
-event-listener = { version = "5.4.0" }
+event-listener = { version = "5.4.1" }
 event-listener-strategy = { version = "0.5.4" }
 fastrand = { version = "2.3.0" }
 flate2 = { version = "1.1.2", features = ["zlib", "zlib-rs"] }
-form_urlencoded = { version = "1.2.1" }
+form_urlencoded = { version = "1.2.2" }
 futures-channel = { version = "0.3.31", features = ["sink"] }
 futures-core = { version = "0.3.31" }
 futures-executor = { version = "0.3.31" }
@@ -75,20 +75,20 @@ half = { version = "2.6.0", features = ["num-traits"] }
 hashbrown-3575ec1268b04181 = { package = "hashbrown", version = "0.15.3" }
 hashbrown-582f2526e08bb6a0 = { package = "hashbrown", version = "0.14.5", default-features = false, features = ["allocator-api2", "inline-more", "raw"] }
 hyper = { version = "0.14.27", features = ["client", "http1", "http2", "stream", "tcp"] }
-hyper-util = { version = "0.1.16", features = ["client-legacy", "server-auto", "service", "tracing"] }
-insta = { version = "1.43.1", features = ["json"] }
+hyper-util = { version = "0.1.17", features = ["client-legacy", "server-auto", "service", "tracing"] }
+insta = { version = "1.43.2", features = ["json"] }
 itertools = { version = "0.13.0" }
-libc = { version = "0.2.174", features = ["extra_traits", "use_std"] }
+libc = { version = "0.2.175", features = ["extra_traits", "use_std"] }
 libz-sys = { version = "1.1.22", features = ["static"] }
 lock_api = { version = "0.4.13", features = ["serde"] }
-log = { version = "0.4.27", default-features = false, features = ["std"] }
+log = { version = "0.4.28", default-features = false, features = ["std"] }
 lru = { version = "0.12.5" }
 memchr = { version = "2.7.5" }
 mime_guess = { version = "2.0.5" }
 minimal-lexical = { version = "0.2.1", default-features = false, features = ["std"] }
 moka = { version = "0.12.10", features = ["future", "sync"] }
 mysql_async = { version = "0.36.1", default-features = false, features = ["binlog", "minimal", "native-tls-tls", "tracing"] }
-mysql_common = { version = "0.35.4", default-features = false, features = ["binlog", "chrono"] }
+mysql_common = { version = "0.35.5", default-features = false, features = ["binlog", "chrono"] }
 native-tls = { version = "0.2.14", default-features = false, features = ["alpn"] }
 nix = { version = "0.30.1", features = ["fs", "signal"] }
 nom = { version = "7.1.3" }
@@ -165,10 +165,10 @@ aho-corasick = { version = "1.1.3" }
 arrayvec = { version = "0.7.6" }
 async-compression = { git = "https://github.com/MaterializeInc/async-compression.git", rev = "fe7411eb6104a02a89e2c3a76ab326dd6594214d", default-features = false, features = ["brotli", "bzip2-sys", "gzip", "tokio", "xz", "zlib", "zstd"] }
 aws-config = { version = "1.2.1", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.5", default-features = false, features = ["hardcoded-credentials", "test-util"] }
-aws-runtime = { version = "1.5.9", default-features = false, features = ["event-stream", "http-02x"] }
+aws-credential-types = { version = "1.2.6", default-features = false, features = ["hardcoded-credentials", "test-util"] }
+aws-runtime = { version = "1.5.10", default-features = false, features = ["event-stream", "http-02x"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
-aws-sigv4 = { version = "1.3.3", features = ["http0-compat", "sign-eventstream"] }
+aws-sigv4 = { version = "1.3.4", features = ["http0-compat", "sign-eventstream"] }
 aws-smithy-async = { version = "1.2.5", default-features = false, features = ["rt-tokio"] }
 aws-smithy-http = { version = "0.60.12", default-features = false, features = ["event-stream"] }
 aws-smithy-runtime = { version = "1.8.4", default-features = false, features = ["client", "connector-hyper-0-14-x"] }
@@ -182,9 +182,9 @@ bit-vec = { version = "0.8.0" }
 bitflags = { version = "2.9.0", default-features = false, features = ["std"] }
 brotli = { version = "8.0.2" }
 bstr = { version = "1.12.0" }
-bytemuck = { version = "1.23.1", default-features = false, features = ["latest_stable_rust"] }
+bytemuck = { version = "1.23.2", default-features = false, features = ["latest_stable_rust"] }
 bytes = { version = "1.10.1", features = ["serde"] }
-cc = { version = "1.2.30", default-features = false, features = ["parallel"] }
+cc = { version = "1.2.38", default-features = false, features = ["parallel"] }
 chrono = { version = "0.4.41", features = ["serde"] }
 clap = { version = "4.5.23", features = ["derive", "env", "string", "wrap_help"] }
 clap_builder = { version = "4.5.23", default-features = false, features = ["color", "env", "std", "string", "suggestions", "usage", "wrap_help"] }
@@ -201,11 +201,11 @@ dec = { version = "0.4.11", default-features = false, features = ["num-traits",
 deranged = { version = "0.3.11", default-features = false, features = ["powerfmt", "quickcheck", "serde", "std"] }
 digest = { version = "0.10.7", features = ["mac", "oid", "std"] }
 either = { version = "1.15.0", features = ["use_std"] }
-event-listener = { version = "5.4.0" }
+event-listener = { version = "5.4.1" }
 event-listener-strategy = { version = "0.5.4" }
 fastrand = { version = "2.3.0" }
 flate2 = { version = "1.1.2", features = ["zlib", "zlib-rs"] }
-form_urlencoded = { version = "1.2.1" }
+form_urlencoded = { version = "1.2.2" }
 futures-channel = { version = "0.3.31", features = ["sink"] }
 futures-core = { version = "0.3.31" }
 futures-executor = { version = "0.3.31" }
@@ -219,20 +219,20 @@ half = { version = "2.6.0", features = ["num-traits"] }
 hashbrown-3575ec1268b04181 = { package = "hashbrown", version = "0.15.3" }
 hashbrown-582f2526e08bb6a0 = { package = "hashbrown", version = "0.14.5", default-features = false, features = ["allocator-api2", "inline-more", "raw"] }
 hyper = { version = "0.14.27", features = ["client", "http1", "http2", "stream", "tcp"] }
-hyper-util = { version = "0.1.16", features = ["client-legacy", "server-auto", "service", "tracing"] }
-insta = { version = "1.43.1", features = ["json"] }
+hyper-util = { version = "0.1.17", features = ["client-legacy", "server-auto", "service", "tracing"] }
+insta = { version = "1.43.2", features = ["json"] }
 itertools = { version = "0.13.0" }
-libc = { version = "0.2.174", features = ["extra_traits", "use_std"] }
+libc = { version = "0.2.175", features = ["extra_traits", "use_std"] }
 libz-sys = { version = "1.1.22", features = ["static"] }
 lock_api = { version = "0.4.13", features = ["serde"] }
-log = { version = "0.4.27", default-features = false, features = ["std"] }
+log = { version = "0.4.28", default-features = false, features = ["std"] }
 lru = { version = "0.12.5" }
 memchr = { version = "2.7.5" }
 mime_guess = { version = "2.0.5" }
 minimal-lexical = { version = "0.2.1", default-features = false, features = ["std"] }
 moka = { version = "0.12.10", features = ["future", "sync"] }
 mysql_async = { version = "0.36.1", default-features = false, features = ["binlog", "minimal", "native-tls-tls", "tracing"] }
-mysql_common = { version = "0.35.4", default-features = false, features = ["binlog", "chrono"] }
+mysql_common = { version = "0.35.5", default-features = false, features = ["binlog", "chrono"] }
 native-tls = { version = "0.2.14", default-features = false, features = ["alpn"] }
 nix = { version = "0.30.1", features = ["fs", "signal"] }
 nom = { version = "7.1.3" }
@@ -308,7 +308,7 @@ zstd-sys = { version = "2.0.13", features = ["std"] }
 [target.x86_64-unknown-linux-gnu.dependencies]
 camino = { version = "1.1.10", default-features = false, features = ["serde1"] }
 hyper = { version = "0.14.27", default-features = false, features = ["runtime"] }
-hyper-util = { version = "0.1.16", default-features = false, features = ["client-proxy", "client-proxy-system"] }
+hyper-util = { version = "0.1.17", default-features = false, features = ["client-proxy", "client-proxy-system"] }
 idna = { version = "1.0.3" }
 linux-raw-sys-274715c4dabd11b0 = { package = "linux-raw-sys", version = "0.9.4", default-features = false, features = ["elf", "errno", "general", "ioctl", "no_std", "prctl"] }
 linux-raw-sys-9fbad63c4bcf4a8f = { package = "linux-raw-sys", version = "0.4.15", default-features = false, features = ["elf", "errno", "general", "if_ether", "ioctl", "net", "netlink", "no_std", "prctl", "std", "xdp"] }
@@ -325,7 +325,7 @@ tower-http = { version = "0.6.6", default-features = false, features = ["follow-
 [target.x86_64-unknown-linux-gnu.build-dependencies]
 camino = { version = "1.1.10", default-features = false, features = ["serde1"] }
 hyper = { version = "0.14.27", default-features = false, features = ["runtime"] }
-hyper-util = { version = "0.1.16", default-features = false, features = ["client-proxy", "client-proxy-system"] }
+hyper-util = { version = "0.1.17", default-features = false, features = ["client-proxy", "client-proxy-system"] }
 idna = { version = "1.0.3" }
 linux-raw-sys-274715c4dabd11b0 = { package = "linux-raw-sys", version = "0.9.4", default-features = false, features = ["elf", "errno", "general", "ioctl", "no_std", "prctl"] }
 linux-raw-sys-9fbad63c4bcf4a8f = { package = "linux-raw-sys", version = "0.4.15", default-features = false, features = ["elf", "errno", "general", "if_ether", "ioctl", "net", "netlink", "no_std", "prctl", "std", "xdp"] }
@@ -342,7 +342,7 @@ tower-http = { version = "0.6.6", default-features = false, features = ["follow-
 [target.x86_64-apple-darwin.dependencies]
 camino = { version = "1.1.10", default-features = false, features = ["serde1"] }
 hyper = { version = "0.14.27", default-features = false, features = ["runtime"] }
-hyper-util = { version = "0.1.16", default-features = false, features = ["client-proxy", "client-proxy-system"] }
+hyper-util = { version = "0.1.17", default-features = false, features = ["client-proxy", "client-proxy-system"] }
 idna = { version = "1.0.3" }
 miniz_oxide = { version = "0.8.9", default-features = false, features = ["with-alloc"] }
 native-tls = { version = "0.2.14", default-features = false, features = ["vendored"] }
@@ -356,7 +356,7 @@ tower-http = { version = "0.6.6", default-features = false, features = ["follow-
 [target.x86_64-apple-darwin.build-dependencies]
 camino = { version = "1.1.10", default-features = false, features = ["serde1"] }
 hyper = { version = "0.14.27", default-features = false, features = ["runtime"] }
-hyper-util = { version = "0.1.16", default-features = false, features = ["client-proxy", "client-proxy-system"] }
+hyper-util = { version = "0.1.17", default-features = false, features = ["client-proxy", "client-proxy-system"] }
 idna = { version = "1.0.3" }
 miniz_oxide = { version = "0.8.9", default-features = false, features = ["with-alloc"] }
 native-tls = { version = "0.2.14", default-features = false, features = ["vendored"] }
diff --git a/test/metabase/smoketest/Cargo.toml b/test/metabase/smoketest/Cargo.toml
index a7af3fd023e33..01a0b4884799a 100644
--- a/test/metabase/smoketest/Cargo.toml
+++ b/test/metabase/smoketest/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 itertools = "0.14.0"
 mz-metabase = { path = "../../../src/metabase" }
 mz-ore = { path = "../../../src/ore", features = ["network", "async", "test"] }
diff --git a/test/test-util/Cargo.toml b/test/test-util/Cargo.toml
index 0fd15c47b93ec..f35c54c630d1c 100644
--- a/test/test-util/Cargo.toml
+++ b/test/test-util/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 workspace = true
 
 [dependencies]
-anyhow = "1.0.98"
+anyhow = "1.0.100"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 mz-kafka-util = { path = "../../src/kafka-util" }
 mz-ore = { path = "../../src/ore", features = ["async"] }