diff --git a/crates/e2e-tests/Cargo.toml b/crates/e2e-tests/Cargo.toml
index 5d4c94a..ce2d158 100644
--- a/crates/e2e-tests/Cargo.toml
+++ b/crates/e2e-tests/Cargo.toml
@@ -21,7 +21,7 @@ anyhow = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 uuid = { version = "1", features = ["v4"] }
-rusqlite = { version = "0.32", features = ["bundled"] }
+rusqlite = { version = "0.39", features = ["bundled"] }
 axum = "0.8"
 
 [lints]
diff --git a/crates/tokf-cli/Cargo.toml b/crates/tokf-cli/Cargo.toml
index 22b4493..3c976fc 100644
--- a/crates/tokf-cli/Cargo.toml
+++ b/crates/tokf-cli/Cargo.toml
@@ -28,7 +28,7 @@ include_dir = { version = "0.7", features = ["glob"] }
 # Pinned to 0.32.x: uses libsqlite3-sys ^0.30.1, same as sqlx-sqlite in tokf-server.
 # Upgrading rusqlite past 0.32.x would require a newer libsqlite3-sys that conflicts
 # with sqlx-sqlite's links = "sqlite3" constraint in the workspace resolver.
-rusqlite = { version = "0.32", features = ["bundled"] }
+rusqlite = { version = "0.39", features = ["bundled"] }
 rkyv = { version = "0.8", features = ["bytecheck", "unaligned"] }
 reqwest = { version = "0.13", default-features = false, features = ["rustls", "json", "blocking", "multipart", "query"] }
 # linux-native uses kernel keyutils (no libdbus-sys dependency).
@@ -41,7 +41,7 @@ clap_complete = "4.5"
 clap_complete_nushell = "4.5"
 dialoguer = { version = "0.12", default-features = false }
 which = "8"
-rable = "0.1.15"
+rable = "0.2.0"
 tempfile = "3"
 opentelemetry     = { version = "0.31", optional = true, features = ["metrics"] }
 opentelemetry_sdk = { version = "0.31", optional = true, features = ["metrics"] }
diff --git a/crates/tokf-common/Cargo.toml b/crates/tokf-common/Cargo.toml
index 81f0a50..5a129da 100644
--- a/crates/tokf-common/Cargo.toml
+++ b/crates/tokf-common/Cargo.toml
@@ -12,7 +12,7 @@ categories = ["command-line-utilities", "development-tools"]
 [dependencies]
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 toml = { version = "1.0", optional = true }
 regex = { version = "1", optional = true }
 unicode-normalization = "0.1"
diff --git a/crates/tokf-server/Cargo.toml b/crates/tokf-server/Cargo.toml
index 41bf3f0..95bf69e 100644
--- a/crates/tokf-server/Cargo.toml
+++ b/crates/tokf-server/Cargo.toml
@@ -27,7 +27,7 @@ clap = { version = "4", features = ["derive"] }
 sqlx = { version = "=0.8.6", default-features = false, features = ["postgres", "runtime-tokio-rustls", "uuid", "chrono", "macros", "migrate"] }
 uuid = { version = "1", features = ["v4", "serde"] }
 reqwest = { version = "0.13", default-features = false, features = ["rustls", "json", "form"] }
-sha2 = "0.10"
+sha2 = "0.11"
 rand = "0.9"
 hex = "0.4"
 async-trait = "0.1"