diff --git a/Cargo.lock b/Cargo.lock
index c41ca5c2..53a9a71d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1249,13 +1249,12 @@ checksum = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4"
 
 [[package]]
 name = "hyper"
-version = "1.0.0-rc.3"
+version = "1.0.0-rc.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b75264b2003a3913f118d35c586e535293b3e22e41f074930762929d071e092"
+checksum = "d280a71f348bcc670fc55b02b63c53a04ac0bf2daff2980795aeaf53edae10e6"
 dependencies = [
  "bytes",
  "futures-channel",
- "futures-core",
  "futures-util",
  "http",
  "http-body",
diff --git a/crates/quickjs-wasm-sys/Cargo.toml b/crates/quickjs-wasm-sys/Cargo.toml
index 6fe87e31..4feacd2d 100644
--- a/crates/quickjs-wasm-sys/Cargo.toml
+++ b/crates/quickjs-wasm-sys/Cargo.toml
@@ -18,7 +18,7 @@ anyhow.workspace = true
 # The dependencies below are pinned so they map exactly to the exemptions
 # we copied from the wasmtime team to our supply-chain config
 tokio = { version = "=1.33.0", default-features = false, features = ["rt", "macros", "net"] }
-hyper = { version = "=1.0.0-rc.3", features = ["client", "http1"], default-features = false }
+hyper = { version = "=1.0.0-rc.4", features = ["client", "http1"], default-features = false }
 bytes = "=1.5.0"
 futures-task = "=0.3.29"
 futures-util = { version = "=0.3.27", default-features = false }