diff --git a/Cargo.toml b/Cargo.toml
index 85d0e475787..03851e2cf1d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -71,7 +71,7 @@ static_assertions = "1.1.0"
 textwrap = "0.16.0"
 thin-vec = "0.2.13"
 time = { version = "0.3.37", default-features = false, features = ["local-offset", "large-dates", "wasm-bindgen", "parsing", "formatting", "macros"] }
-tinystr = "0.7.5"
+tinystr = "0.8.0"
 log = "0.4.25"
 simple_logger = "5.0.0"
 cargo_metadata = "0.19.1"
@@ -83,7 +83,7 @@ comfy-table = "7.1.3"
 serde_repr = "0.1.19"
 bus = "2.4.1"
 wasm-bindgen = { version = "0.2.97", default-features = false }
-getrandom = { version = "0.2.15", default-features = false }
+getrandom = { version = "0.3.0", default-features = false }
 console_error_panic_hook = "0.1.7"
 wasm-bindgen-test = "0.3.47"
 smol = "2.0.2"
@@ -98,14 +98,14 @@ measureme = "12.0.0"
 # TODO: when moving past 1.84, remove dependency to sptr and use `.addr()` directly.
 sptr = "0.3.2"
 paste = "1.0"
-rand = "0.8.5"
+rand = "0.9.0"
 num-integer = "0.1.46"
 ryu-js = "1.0.1"
 tap = "1.0.1"
 thiserror = { version = "2.0.11", default-features = false }
 dashmap = "6.1.0"
 num_enum = "0.7.3"
-itertools = { version = "0.13.0", default-features = false }
+itertools = { version = "0.14.0", default-features = false }
 portable-atomic = "1.10.0"
 bytemuck = { version = "1.21.0", default-features = false }
 arrayvec = "0.7.6"
@@ -142,7 +142,7 @@ icu_provider_blob = { version = "~1.5.0", default-features = false }
 icu_properties = { version = "~1.5.0", default-features = true }
 icu_normalizer = { version = "~1.5.0", default-features = false }
 icu_decimal = { version = "~1.5.0", default-features = false }
-writeable = "~0.5.5"
+writeable = "~0.6.0"
 yoke = "~0.7.5"
 zerofrom = "~0.1.5"
 fixed_decimal = "~0.5.6"