diff --git a/Cargo.toml b/Cargo.toml
index 760349ac525..38c6c5a6284 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -57,7 +57,7 @@ hex = { version = "0.4.3", features = ["serde"] }
 http = "0.2.11"
 insta = { version = "1.38.0", features = ["json", "redactions", "yaml"] }
 once_cell = "1.19.0"
-reqwest = { version = "0.11.24", default-features = false, features = [
+reqwest = { version = "0.12.0", default-features = false, features = [
     "rustls-tls",
     "rustls-native-certs",
     "gzip",
diff --git a/apollo-router/Cargo.toml b/apollo-router/Cargo.toml
index ba4daf69c92..ec18c3f3f0f 100644
--- a/apollo-router/Cargo.toml
+++ b/apollo-router/Cargo.toml
@@ -78,8 +78,8 @@ async-compression = { version = "0.4.6", features = [
     "deflate",
 ] }
 async-trait.workspace = true
-axum = { version = "0.6.20", features = ["headers", "json", "original-uri"] }
-base64 = "0.21.7"
+axum = { version = "0.7.0", features = ["headers", "json", "original-uri"] }
+base64 = "0.22.0"
 bloomfilter = "1.0.13"
 buildstructor = "0.5.4"
 bytes = "1.6.0"
@@ -89,7 +89,7 @@ clap = { version = "4.5.8", default-features = false, features = [
     "std",
     "help",
 ] }
-console-subscriber = { version = "0.2.0", optional = true }
+console-subscriber = { version = "0.4.0", optional = true }
 cookie = { version = "0.18.0", default-features = false }
 crossbeam-channel = "0.5"
 ci_info = { version = "0.14.14", features = ["serde-1"] }
@@ -106,20 +106,20 @@ displaydoc = "0.2"
 flate2 = "1.0.30"
 fred = { version = "7.1.2", features = ["enable-rustls"] }
 futures = { version = "0.3.30", features = ["thread-pool"] }
-graphql_client = "0.13.0"
+graphql_client = "0.14.0"
 hex.workspace = true
 http.workspace = true
 http-body = "0.4.6"
-heck = "0.4.1"
+heck = "0.5.0"
 humantime = "2.1.0"
 humantime-serde = "1.1.1"
 hyper = { version = "0.14.28", features = ["server", "client", "stream"] }
-hyper-rustls = { version = "0.24.2", features = ["http1", "http2"] }
+hyper-rustls = { version = "0.27.0", features = ["http1", "http2"] }
 indexmap = { version = "2.2.6", features = ["serde"] }
-itertools = "0.12.1"
+itertools = "0.13.0"
 jsonpath_lib = "0.3.0"
-jsonpath-rust = "0.3.5"
-jsonschema = { version = "0.17.1", default-features = false }
+jsonpath-rust = "0.7.0"
+jsonschema = { version = "0.18.0", default-features = false }
 jsonwebtoken = "9.3.0"
 lazy_static = "1.4.0"
 libc = "0.2.155"
@@ -127,15 +127,15 @@ linkme = "0.3.27"
 lru = "0.12.3"
 maplit = "1.0.2"
 mediatype = "0.19.18"
-mockall = "0.11.4"
+mockall = "0.13.0"
 mime = "0.3.17"
 multer = "2.1.0"
-multimap = "0.9.1"
+multimap = "0.10.0"
 # To avoid tokio issues
 notify = { version = "6.1.1", default-features = false, features = [
     "macos_kqueue",
 ] }
-nu-ansi-term = "0.49"
+nu-ansi-term = "0.50"
 num-traits = "0.2.19"
 once_cell = "1.19.0"
 
@@ -186,8 +186,8 @@ opentelemetry-prometheus = "0.13.0"
 paste = "1.0.15"
 pin-project-lite = "0.2.14"
 prometheus = "0.13"
-prost = "0.12.6"
-prost-types = "0.12.6"
+prost = "0.13.0"
+prost-types = "0.13.0"
 proteus = "0.5.0"
 rand = "0.8.5"
 rhai = { version = "1.19.0", features = ["sync", "serde", "internals"] }
@@ -198,8 +198,8 @@ reqwest.workspace = true
 router-bridge = "=0.5.27+v2.8.1"
 
 rust-embed = { version = "8.4.0", features = ["include-exclude"] }
-rustls = "0.21.12"
-rustls-native-certs = "0.6.3"
+rustls = "0.23.0"
+rustls-native-certs = "0.7.0"
 rustls-pemfile = "1.0.4"
 schemars.workspace = true
 shellexpand = "3.1.0"
@@ -210,22 +210,22 @@ serde_derive_default = "0.1"
 serde_json_bytes.workspace = true
 serde_json.workspace = true
 serde_urlencoded = "0.7.1"
-serde_yaml = "0.8.26"
+serde_yaml = "0.9.0"
 static_assertions = "1.1.0"
-strum_macros = "0.25.3"
+strum_macros = "0.26.0"
 sys-info = "0.9.1"
 thiserror = "1.0.61"
 tokio.workspace = true
 tokio-stream = { version = "0.1.15", features = ["sync", "net"] }
 tokio-util = { version = "0.7.11", features = ["net", "codec", "time"] }
-tonic = { version = "0.9.2", features = [
+tonic = { version = "0.12.0", features = [
     "transport",
     "tls",
     "tls-roots",
     "gzip",
 ] }
 tower.workspace = true
-tower-http = { version = "0.4.4", features = [
+tower-http = { version = "0.5.0", features = [
     "add-extension",
     "trace",
     "cors",
@@ -247,12 +247,12 @@ url = { version = "2.5.2", features = ["serde"] }
 urlencoding = "2.1.3"
 uuid = { version = "1.9.1", features = ["serde", "v4"] }
 yaml-rust = "0.4.5"
-wiremock = "0.5.22"
+wiremock = "0.6.0"
 wsl = "0.1.0"
-tokio-tungstenite = { version = "0.20.1", features = [
+tokio-tungstenite = { version = "0.23.0", features = [
     "rustls-tls-native-roots",
 ] }
-tokio-rustls = "0.24.1"
+tokio-rustls = "0.26.0"
 http-serde = "1.1.3"
 hmac = "0.12.1"
 parking_lot = { version = "0.12.3", features = ["serde"] }
@@ -281,15 +281,15 @@ uname = "0.1.1"
 
 [target.'cfg(unix)'.dependencies]
 uname = "0.1.1"
-hyperlocal = { version = "0.8.0", default-features = false, features = [
+hyperlocal = { version = "0.9.0", default-features = false, features = [
     "client",
 ] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
-tikv-jemallocator = "0.5.4"
+tikv-jemallocator = "0.6.0"
 
 [dev-dependencies]
-axum = { version = "0.6.20", features = [
+axum = { version = "0.7.0", features = [
     "headers",
     "json",
     "original-uri",
@@ -301,7 +301,7 @@ futures-test = "0.3.30"
 insta.workspace = true
 maplit = "1.0.2"
 memchr = { version = "2.7.4", default-features = false }
-mockall = "0.11.4"
+mockall = "0.13.0"
 num-traits = "0.2.19"
 once_cell.workspace = true
 opentelemetry-stdout = { version = "0.1.0", features = ["trace"] }
@@ -315,7 +315,7 @@ opentelemetry-proto = { version = "0.5.0", features = [
 opentelemetry-datadog = { version = "0.8.0", features = ["reqwest-client"] }
 p256 = "0.13.2"
 rand_core = "0.6.4"
-reqwest = { version = "0.11.27", default-features = false, features = [
+reqwest = { version = "0.12.0", default-features = false, features = [
     "json",
     "multipart",
     "stream",
@@ -331,7 +331,7 @@ tempfile.workspace = true
 test-log = { version = "0.2.16", default-features = false, features = [
     "trace",
 ] }
-test-span = "0.7.0"
+test-span = "0.8.0"
 basic-toml = "0.1.9"
 tower-test = "0.4.0"
 
@@ -344,20 +344,20 @@ tracing-subscriber = { version = "0.3.18", default-features = false, features =
 tracing-opentelemetry = "0.21.0"
 tracing-test = "0.2.5"
 walkdir = "2.5.0"
-wiremock = "0.5.22"
+wiremock = "0.6.0"
 libtest-mimic = "0.7.3"
 
 [target.'cfg(target_os = "linux")'.dev-dependencies]
 rstack = { version = "0.3.3", features = ["dw"], default-features = false }
 
 [target.'cfg(unix)'.dev-dependencies]
-hyperlocal = { version = "0.8.0", default-features = false, features = [
+hyperlocal = { version = "0.9.0", default-features = false, features = [
     "client",
     "server",
 ] }
 
 [build-dependencies]
-tonic-build = "0.9.2"
+tonic-build = "0.12.0"
 basic-toml = "0.1.9"
 serde_json.workspace = true
 
diff --git a/fuzz/Cargo.toml b/fuzz/Cargo.toml
index 928b68ed731..b7ac0c8645a 100644
--- a/fuzz/Cargo.toml
+++ b/fuzz/Cargo.toml
@@ -14,7 +14,7 @@ libfuzzer-sys = "0.4"
 apollo-compiler.workspace = true
 apollo-parser = "0.7.6"
 apollo-smith = "0.9.0"
-env_logger = "0.10.2"
+env_logger = "0.11.0"
 log = "0.4"
 reqwest = { workspace = true, features = ["json", "blocking"] }
 serde_json.workspace = true
diff --git a/fuzz/subgraph/Cargo.toml b/fuzz/subgraph/Cargo.toml
index a6be7c3c72f..07bbe1610a8 100644
--- a/fuzz/subgraph/Cargo.toml
+++ b/fuzz/subgraph/Cargo.toml
@@ -7,11 +7,11 @@ edition = "2021"
 actix-web = { version = "4", features = ["default"] }
 async-graphql = "5"
 async-graphql-actix-web = "5"
-env_logger = "0.9.0"
+env_logger = "0.11.0"
 futures = "0.3.17"
 lazy_static = "1.4.0"
 log = "0.4.16"
-moka = { version = "0.8.5", features = ["future"] }
+moka = { version = "0.12.0", features = ["future"] }
 rand = { version = "0.8.5", features = ["std_rng"] }
 serde_json = "1.0.79"
 tokio = { version = "1.22.0", features = ["time", "full"] }
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index 7efbefff1b4..dc859d804e5 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -20,14 +20,14 @@ chrono = { version = "0.4.34", default-features = false, features = ["clock"] }
 console = "0.15.8"
 dialoguer = "0.11.0"
 flate2 = "1"
-graphql_client = { version = "0.13.0", features = ["reqwest-rustls"] }
-itertools = "0.12.1"
+graphql_client = { version = "0.14.0", features = ["reqwest-rustls"] }
+itertools = "0.13.0"
 libc = "0.2"
 memorable-wordlist = "0.1.7"
-nu-ansi-term = "0.49"
+nu-ansi-term = "0.50"
 once_cell = "1"
 regex = "1.10.3"
-reqwest = { version = "0.11", default-features = false, features = [
+reqwest = { version = "0.12", default-features = false, features = [
     "blocking",
     "rustls-tls",
     "rustls-tls-native-roots",
@@ -43,7 +43,7 @@ walkdir = "2.4.0"
 xshell = "0.2.6"
 
 [target.'cfg(target_os = "macos")'.dependencies]
-base64 = "0.21"
+base64 = "0.22"
 zip = { version = "0.6", default-features = false }
 
 [dev-dependencies]