diff --git a/Cargo.lock b/Cargo.lock
index c8665d0e4..e5c421ee9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -316,9 +316,9 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 
 [[package]]
 name = "chrono"
-version = "0.4.33"
+version = "0.4.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f13690e35a5e4ace198e7beea2895d29f3a9cc55015fcebe6336bd2010af9eb"
+checksum = "5bc015644b92d5890fab7489e49d21f879d5c990186827d42ec511919404f38b"
 dependencies = [
  "android-tzdata",
  "iana-time-zone",
@@ -966,9 +966,9 @@ dependencies = [
 
 [[package]]
 name = "indicatif"
-version = "0.17.7"
+version = "0.17.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fb28741c9db9a713d93deb3bb9515c20788cef5815265bee4980e87bde7e0f25"
+checksum = "763a5a8f45087d6bcea4222e7b72c291a054edf80e4ef6efd2a4979878c7bea3"
 dependencies = [
  "console",
  "instant",
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index 452a1d048..52a53f9e1 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -19,9 +19,9 @@ platforms = ["x86_64-unknown-linux-gnu", "aarch64-unknown-linux-gnu", "powerpc64
 [dependencies]
 anyhow = "1.0"
 bootc-lib = { version = "0.1", path = "../lib" }
-clap = "4.2"
-libc = "0.2.92"
+clap = "4.5"
+libc = "0.2.153"
 tokio = { version = "1", features = ["macros"] }
-log = "0.4.0"
+log = "0.4.20"
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
diff --git a/lib/Cargo.toml b/lib/Cargo.toml
index 912fa072e..3608904f4 100644
--- a/lib/Cargo.toml
+++ b/lib/Cargo.toml
@@ -14,38 +14,38 @@ include = ["/src", "LICENSE-APACHE", "LICENSE-MIT"]
 anstream = "0.6.11"
 anstyle = "1.0.6"
 anyhow = "1.0"
-camino = { version = "1.0.4", features = ["serde1"] }
+camino = { version = "1.1.6", features = ["serde1"] }
 ostree-ext = { version = "0.13", git = "https://github.com/ostreedev/ostree-rs-ext", rev = "cb9eab9b7d1061bcdc2b797c7370aa8d21375b2f" }
-chrono = { version = "0.4.23", features = ["serde"] }
-clap = { version= "4.2", features = ["derive"] }
+chrono = { version = "0.4.34", features = ["serde"] }
+clap = { version= "4.5", features = ["derive"] }
 clap_mangen = { version = "0.2", optional = true }
 cap-std-ext = "4"
-hex = "^0.4"
-fn-error-context = "0.2.0"
+hex = "^0.4.3"
+fn-error-context = "0.2.1"
 gvariant = "0.4.0"
-indicatif = "0.17.0"
-libc = "^0.2"
+indicatif = "0.17.8"
+libc = "^0.2.153"
 liboverdrop = "0.1.0"
 libsystemd = "0.7"
-once_cell = "1.9"
-openssl = "^0.10"
+once_cell = "1.19"
+openssl = "^0.10.63"
 # TODO drop this in favor of rustix
 nix = { version = "0.27", features = ["ioctl", "sched"] }
-regex = "1.7.1"
+regex = "1.10.3"
 rustix = { "version" = "0.38", features = ["thread", "fs", "system", "process"] }
-schemars = { version = "0.8.6", features = ["chrono"] }
-serde = { features = ["derive"], version = "1.0.125" }
-serde_ignored = "0.1.9"
-serde_json = "1.0.64"
-serde_yaml = "0.9.17"
-serde_with = ">= 1.9.4, < 2"
-tokio = { features = ["io-std", "time", "process", "rt", "net"], version = ">= 1.13.0" }
+schemars = { version = "0.8.16", features = ["chrono"] }
+serde = { features = ["derive"], version = "1.0.196" }
+serde_ignored = "0.1.10"
+serde_json = "1.0.113"
+serde_yaml = "0.9.31"
+serde_with = ">= 1.14.0, < 2"
+tokio = { features = ["io-std", "time", "process", "rt", "net"], version = ">= 1.36.0" }
 tokio-util = { features = ["io-util"], version = "0.7" }
 tracing = "0.1"
-tempfile = "3.3.0"
+tempfile = "3.10.0"
 toml = "0.7.2"
 xshell = { version = "0.2", optional = true }
-uuid = { version = "1.2.2", features = ["v4"] }
+uuid = { version = "1.7.0", features = ["v4"] }
 
 [features]
 default = ["install"]
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index 7e0d66437..02858a31e 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -12,10 +12,10 @@ name = "xtask"
 path = "src/xtask.rs"
 
 [dependencies]
-anyhow = "1.0.68"
-camino = "1.0"
-chrono = { version = "0.4.23", default_features = false, features = ["std"] }
-fn-error-context = "0.2.0"
-tempfile = "3.3"
+anyhow = "1.0.79"
+camino = "1.1"
+chrono = { version = "0.4.34", default_features = false, features = ["std"] }
+fn-error-context = "0.2.1"
+tempfile = "3.10"
 mandown = "0.1"
 xshell = { version = "0.2" }