diff --git a/Cargo.lock b/Cargo.lock
index bbf4a19..c14b6ae 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -459,9 +459,9 @@ dependencies = [
 
 [[package]]
 name = "regex"
-version = "1.11.2"
+version = "1.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23d7fd106d8c02486a8d64e778353d1cffe08ce79ac2e82f540c86d0facf6912"
+checksum = "8b5288124840bee7b386bc413c487869b360b2b4ec421ea56425128692f2a82c"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -471,9 +471,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.4.9"
+version = "0.4.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908"
+checksum = "833eb9ce86d40ef33cb1306d8accf7bc8ec2bfea4355cbdebb3df68b40925cad"
 dependencies = [
  "aho-corasick",
  "memchr",
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
index f342fe4..d269cf2 100644
--- a/supply-chain/audits.toml
+++ b/supply-chain/audits.toml
@@ -7,6 +7,18 @@ criteria = "safe-to-deploy"
 version = "6.1.4"
 notes = "This is my own crate published using Trusted Publishing, but I can't mark it as trusted by cargo-vet because it doesn't support Trusted Publishing and just sees that the publisher is unknown."
 
+[[audits.regex]]
+who = "Oliver Hamlet <git@ortham.net>"
+criteria = "safe-to-deploy"
+delta = "1.11.2 -> 1.11.3"
+notes = "It just increments the minimum version of regex-automata."
+
+[[audits.regex-automata]]
+who = "Oliver Hamlet <git@ortham.net>"
+criteria = "safe-to-deploy"
+delta = "0.4.9 -> 0.4.11"
+notes = "It's a combination of format!() syntax tweaks and added calls to .shrink_to_fit()."
+
 [[trusted.esplugin]]
 criteria = "safe-to-deploy"
 user-id = 9999 # Oliver Hamlet (Ortham)