diff --git a/sds/Cargo.toml b/sds/Cargo.toml
index c4db4e5d..77f14e08 100644
--- a/sds/Cargo.toml
+++ b/sds/Cargo.toml
@@ -26,20 +26,20 @@ regex = "1.9.5"
 regex-automata = "0.4.7"
 # Switch over to the original repo when this issue is resolved: https://github.com/rust-lang/regex/issues/1241
 regex-automata-fork = { git = "https://github.com/fbryden/regex", rev = "6952250af962ca3e364da47382b16dba9c703431", package = "regex-automata" }
-regex-syntax = "0.7.5"
+regex-syntax = "0.8.0"
 serde = { version = "1.0", features = ["derive"] }
 serde_with = "3.6.1"
-strum = { version = "0.25", features = ["derive"] }
+strum = { version = "0.28", features = ["derive"] }
 thiserror = "1.0.58"
 metrics = "0.24.0"
-metrics-util = "0.18.0"
+metrics-util = "0.20.0"
 crc32fast = "1.4.0"
 base62 = "2.0.2"
 iban_validate = "4"
 num_cpus = "1.16.0"
 
 lazy_static = "1.5.0"
-reqwest = { version = "0.12", default-features = false, features = ["blocking", "charset", "http2", "rustls-tls-native-roots"] }
+reqwest = { version = "0.13", default-features = false, features = ["blocking", "charset", "http2", "rustls-tls-native-roots"] }
 aws-sign-v4 = "0.3.0"
 chrono = { version = "0.4", features = ["serde"] }
 slotmap = "1.0.7"
@@ -59,11 +59,11 @@ once_cell = "1.21.3"
 slab = "0.4.11"
 
 [dev-dependencies]
-criterion = { version = "0.5.1", features = ["html_reports"] }
+criterion = { version = "0.8.0", features = ["html_reports"] }
 serde_json = "1.0.114"
 serde_yaml = "0.9.34"
 serde_test = "1.0.176"
-httpmock = "0.7.0"
+httpmock = "0.8.0"
 dd-sds = { path = ".", features = ["bench"] }
 threadpool = "1.8.1"
 
diff --git a/sds/tools/fuzz/Cargo.toml b/sds/tools/fuzz/Cargo.toml
index afdd81bd..6414f25e 100644
--- a/sds/tools/fuzz/Cargo.toml
+++ b/sds/tools/fuzz/Cargo.toml
@@ -13,10 +13,10 @@ name = "fuzz"
 path = "src/main.rs"
 
 [dependencies]
-afl = "0.14.5"
+afl = "0.17.0"
 ahash = "0.8.11"
 dd-sds = { path = "../../" }
 
 # optional
 hyperscan = { version = "0.3.2", features = ["static"], optional = true }
-rand = "0.8.5"
+rand = "0.10.0"