diff --git a/.github/fixtures/win7-aws-lc-cache/Cargo.lock b/.github/fixtures/win7-aws-lc-cache/Cargo.lock
index d7e7749fbf..da3ffe6b69 100644
--- a/.github/fixtures/win7-aws-lc-cache/Cargo.lock
+++ b/.github/fixtures/win7-aws-lc-cache/Cargo.lock
@@ -4,9 +4,9 @@ version = 4
 
 [[package]]
 name = "aws-lc-sys"
-version = "0.43.0"
+version = "0.46.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43103168cc76fe62678a375e722fc9cb3a0146159ac5828bc4f0dfd755c2224c"
+checksum = "f1622d8446a2d4b2ce0c7eefc73dd43a99779028d5ee5c2dd8073a658ba8a2bc"
 dependencies = [
  "cc",
  "cmake",
diff --git a/.github/fixtures/win7-aws-lc-cache/Cargo.toml b/.github/fixtures/win7-aws-lc-cache/Cargo.toml
index 913022a767..e62de88fd2 100644
--- a/.github/fixtures/win7-aws-lc-cache/Cargo.toml
+++ b/.github/fixtures/win7-aws-lc-cache/Cargo.toml
@@ -5,6 +5,6 @@ edition = "2021"
 publish = false
 
 [dependencies]
-aws-lc-sys = { version = "=0.43.0", features = ["prebuilt-nasm"] }
+aws-lc-sys = { version = "=0.46.0", features = ["prebuilt-nasm"] }
 
 [workspace]
diff --git a/agents/drivers/duckdb/Cargo.toml b/agents/drivers/duckdb/Cargo.toml
index 5b1a243ec9..95e51d7d56 100644
--- a/agents/drivers/duckdb/Cargo.toml
+++ b/agents/drivers/duckdb/Cargo.toml
@@ -33,7 +33,7 @@ tokio = { version = "1", features = ["full"] }
 
 [dev-dependencies]
 dbx-core = { path = "../../../crates/dbx-core", default-features = false, features = ["duckdb-sidecar"] }
-sysinfo = "0.32"
+sysinfo = "0.39"
 tokio-util = "0.7"
 uuid = { version = "1", features = ["v4"] }
 
diff --git a/agents/drivers/tdengine/Cargo.lock b/agents/drivers/tdengine/Cargo.lock
index 40a9b8e2a3..4363f246e9 100644
--- a/agents/drivers/tdengine/Cargo.lock
+++ b/agents/drivers/tdengine/Cargo.lock
@@ -55,6 +55,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "bigdecimal"
 version = "0.4.10"
@@ -422,7 +428,7 @@ name = "dbx-tdengine-driver"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "base64",
+ "base64 0.23.1",
  "chrono",
  "chrono-tz",
  "futures",
@@ -639,9 +645,9 @@ checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
 
 [[package]]
 name = "futures"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a88cf1f829d945f548cf8fec32c61b1f202b6d93b45848602fc02af4b12ad218"
+checksum = "9a31d2a3fbaaeb2af2368bbdd904aa8e812d3c04a1ee10d3171f52d556e5d0a3"
 dependencies = [
  "futures-channel",
  "futures-core",
@@ -654,9 +660,9 @@ dependencies = [
 
 [[package]]
 name = "futures-channel"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "262590f4fe6afeb0bc83be1daa64e52657fe185690a958af7f3ad0e92085c5ae"
+checksum = "b1f9e3d69d39e4862ffed03ed071a76f9a13ba1d9109d355b0f0aa6b15e393c4"
 dependencies = [
  "futures-core",
  "futures-sink",
@@ -664,15 +670,15 @@ dependencies = [
 
 [[package]]
 name = "futures-core"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2cd50c473c80f6d7c3670a752354b8e569b1a7cbfdc0419ec88e5edad85e0dc7"
+checksum = "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e"
 
 [[package]]
 name = "futures-executor"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6754879cc9f2c66f88c6e5c35344bb0bdb0708b0352b1201815667c7eabc7458"
+checksum = "031b47cf1a3c6cc8bc2fc76cd437f521619387907d469316e7c0bc278f1f5432"
 dependencies = [
  "futures-core",
  "futures-task",
@@ -681,38 +687,38 @@ dependencies = [
 
 [[package]]
 name = "futures-io"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4577ecaa3c4f96589d473f679a71b596316f6641bc350038b962a5daf0085d7a"
+checksum = "53c0fa8157de1303bfffdaa1cc2a673bfffb60102f76b0ef4441659124373fed"
 
 [[package]]
 name = "futures-macro"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d6d3cde68c518367be28956066ddfef33813991b77a55005a69dae04bf3b10b"
+checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.119",
+ "syn 3.0.3",
 ]
 
 [[package]]
 name = "futures-sink"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e34418ac499d6305c2fb5ad0ed2f6ac998c5f8ca209b4510f7f94242c647e307"
+checksum = "1944426bf7d03f1d14f708785e4b33efd750b36d48a157b836b3efc15ede8e1d"
 
 [[package]]
 name = "futures-task"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b231ed28831efb4a61a08580c4bc233ec56bc009f4cd8f52da2c3cb97df0c109"
+checksum = "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd"
 
 [[package]]
 name = "futures-util"
-version = "0.3.33"
+version = "0.3.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a77a90a256fce34da66415271e30f94ee91c57b04b8a2c042d9cf3220179deaa"
+checksum = "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc"
 dependencies = [
  "futures-channel",
  "futures-core",
@@ -796,7 +802,7 @@ version = "0.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b3314d5adb5d94bcdf56771f2e50dbbc80bb4bdf88967526706205ac9eff24eb"
 dependencies = [
- "base64",
+ "base64 0.22.1",
  "bytes",
  "headers-core",
  "http",
@@ -1843,9 +1849,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.151"
+version = "1.0.154"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+checksum = "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
 dependencies = [
  "itoa",
  "memchr",
@@ -1871,7 +1877,7 @@ version = "3.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "76a5c54c7310e7b8b9577c286d7e399ddd876c3e12b3ed917a8aabc4b96e9e8c"
 dependencies = [
- "base64",
+ "base64 0.22.1",
  "bs58",
  "chrono",
  "hex",
@@ -2253,9 +2259,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.53.1"
+version = "1.53.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
+checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
 dependencies = [
  "bytes",
  "libc",
@@ -2306,9 +2312,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-util"
-version = "0.7.19"
+version = "0.7.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "494815d09bf52b5548659851081238f0ca39ff638363907596da739561c62c52"
+checksum = "e464cf451ba96ebfc6f9b6542f17ee8b8956e33f1e40d9690624e59d7a7f8a4b"
 dependencies = [
  "bytes",
  "futures-core",
@@ -2463,9 +2469,9 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
 
 [[package]]
 name = "uuid"
-version = "1.24.0"
+version = "1.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf3923a6f5c4c6382e0b653c4117f48d631ea17f38ed86e2a828e6f7412f5239"
+checksum = "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606"
 dependencies = [
  "getrandom 0.4.3",
  "js-sys",
diff --git a/agents/drivers/tdengine/Cargo.toml b/agents/drivers/tdengine/Cargo.toml
index fe973805ff..c60f258eba 100644
--- a/agents/drivers/tdengine/Cargo.toml
+++ b/agents/drivers/tdengine/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 
 [dependencies]
 anyhow = "1"
-base64 = "0.22"
+base64 = "0.23"
 chrono = "0.4"
 chrono-tz = "0.10"
 futures = "0.3"
diff --git a/crates/dbx-ai-provider/Cargo.toml b/crates/dbx-ai-provider/Cargo.toml
index d7977f605d..05c9d9988d 100644
--- a/crates/dbx-ai-provider/Cargo.toml
+++ b/crates/dbx-ai-provider/Cargo.toml
@@ -10,15 +10,15 @@ dbx-platform = { path = "../dbx-platform" }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
 futures = "0.3"
-reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls", "socks"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "stream", "rustls-tls", "socks"] }
 tokio = { version = "1", features = ["process", "io-util", "sync", "time", "rt", "macros"] }
 log = "0.4"
 uuid = { version = "1", features = ["v4", "serde"] }
-base64 = "0.22"
+base64 = "0.23"
 bytes = "1"
 httpdate = "1"
 tempfile = "3"
 
 [dev-dependencies]
-reqwest = { version = "0.12", default-features = false, features = ["system-proxy"] }
+reqwest = { version = "0.13", default-features = false, features = ["system-proxy"] }
 tokio = { version = "1", features = ["test-util", "rt-multi-thread"] }
diff --git a/crates/dbx-cli/Cargo.toml b/crates/dbx-cli/Cargo.toml
index 7915d3a1d8..12e21b657a 100644
--- a/crates/dbx-cli/Cargo.toml
+++ b/crates/dbx-cli/Cargo.toml
@@ -15,7 +15,7 @@ dirs = "6"
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 tempfile = "3"
 tokio = { version = "1", features = ["fs", "macros", "rt-multi-thread"] }
 
diff --git a/crates/dbx-core/Cargo.toml b/crates/dbx-core/Cargo.toml
index 191a123123..d129e2e810 100644
--- a/crates/dbx-core/Cargo.toml
+++ b/crates/dbx-core/Cargo.toml
@@ -52,42 +52,42 @@ uuid = { version = "1", features = ["v4", "serde"] }
 tokio-postgres = { version = "0.7", features = ["with-chrono-0_4", "with-uuid-1", "with-serde_json-1"] }
 deadpool-postgres = { version = "0.14", features = ["rt_tokio_1"] }
 webpki-roots = "0.26"
-rusqlite = { version = "0.32", default-features = false, features = ["load_extension", "backup", "functions", "column_decltype"] }
+rusqlite = { version = "0.40", default-features = false, features = ["load_extension", "backup", "functions", "column_decltype"] }
 mysql_async = { version = "0.37", default-features = false, features = ["default-rustls", "client_ed25519", "chrono", "rust_decimal"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 redis = { version = "1.7.1", features = ["tokio-comp", "tls-rustls", "tls-rustls-insecure", "tokio-rustls-comp", "sentinel", "cluster-async"] }
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 rustls-pemfile = "2.2"
-reqwest = { version = "0.12", default-features = false, features = ["cookies", "json", "stream", "rustls-tls", "socks"] }
+reqwest = { version = "0.13", default-features = false, features = ["cookies", "json", "stream", "rustls-tls", "socks"] }
 prometheus-parse = "=0.2.5"
 futures = "0.3"
 mongodb = { version = "3.2.5", features = ["socks5-proxy"] }
-rumqttc = { version = "0.24", features = ["websocket"], optional = true }
+rumqttc = { version = "0.25", features = ["websocket"], optional = true }
 portpicker = "0.1.1"
 csv = "1"
-calamine = { version = "0.30.1", features = ["dates"] }
+calamine = { version = "0.37.0", features = ["dates"] }
 ssfmt = { version = "0.1.2", default-features = false }
-quick-xml = "0.37"
-base64 = "0.22"
+quick-xml = "0.42"
+base64 = "0.23"
 jsonwebtoken = "9"
-aes-gcm = "0.10"
-aes = "0.8"
-cbc = "0.1"
-argon2 = "0.5"
+aes-gcm = "0.11"
+aes = "0.9"
+cbc = "0.2"
+argon2 = "0.6"
 # macOS/Windows keychain backend. The crate's own Linux backend requires
 # C libdbus (cannot cross-compile); Linux uses the secret-service crate below
 # with the same on-disk attribute layout instead.
 keyring = { version = "3.6.3", default-features = false, optional = true, features = ["apple-native", "windows-native", "crypto-rust"] }
-sha2 = "0.10"
+sha2 = "0.11"
 async-trait = "0.1"
 bytes = "1"
 font-kit = { version = "0.14.3", optional = true }
 zip = { version = "4", default-features = false, features = ["deflate"] }
 flate2 = "1"
 crc = "3"
-sha1 = "0.10"
+sha1 = "0.11"
 tar = "0.4"
-sysinfo = { version = "0.32", features = ["system"] }
+sysinfo = { version = "0.39", features = ["system"] }
 minijinja = "2"
 notify = { version = "7", default-features = false, features = ["macos_kqueue"] }
 arc-swap = "1"
@@ -98,7 +98,7 @@ windows-sys = { version = "0.61", features = ["Win32_Storage_FileSystem", "Win32
 
 [dev-dependencies]
 dbx-core = { path = ".", default-features = false, features = ["test-support"] }
-zstd = "0.13"
+zstd = "0.14"
 dbx-drivers = { path = "../dbx-drivers", default-features = false, features = ["test-support"] }
 dbx-plugin-runtime = { path = "../dbx-plugin-runtime", features = ["test-support"] }
 dbx-platform = { path = "../dbx-platform", features = ["test-support"] }
diff --git a/crates/dbx-driver-agent/Cargo.toml b/crates/dbx-driver-agent/Cargo.toml
index 9762a80714..cdb42f862f 100644
--- a/crates/dbx-driver-agent/Cargo.toml
+++ b/crates/dbx-driver-agent/Cargo.toml
@@ -19,17 +19,17 @@ flate2 = "1"
 futures = "0.3"
 log = "0.4"
 percent-encoding = "2"
-reqwest = { version = "0.12", default-features = false, features = ["cookies", "json", "stream", "rustls-tls", "socks"] }
+reqwest = { version = "0.13", default-features = false, features = ["cookies", "json", "stream", "rustls-tls", "socks"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sha2 = "0.10"
+sha2 = "0.11"
 tar = "0.4"
 tempfile = "3"
 tokio = { version = "1", features = ["full"] }
 tokio-util = { version = "0.7", features = ["compat"] }
 uuid = { version = "1", features = ["v4", "serde"] }
 zip = { version = "4", default-features = false, features = ["deflate"] }
-zstd = "0.13"
+zstd = "0.14"
 
 [target.'cfg(windows)'.dependencies]
-sysinfo = { version = "0.32", features = ["system"] }
+sysinfo = { version = "0.39", features = ["system"] }
diff --git a/crates/dbx-driver-elasticsearch/Cargo.toml b/crates/dbx-driver-elasticsearch/Cargo.toml
index 251e853611..6b42a656fe 100644
--- a/crates/dbx-driver-elasticsearch/Cargo.toml
+++ b/crates/dbx-driver-elasticsearch/Cargo.toml
@@ -10,7 +10,7 @@ dbx-driver-support = { path = "../dbx-driver-support" }
 dbx-types = { path = "../dbx-types", default-features = false }
 percent-encoding = "2"
 regex = "1"
-reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "rustls-tls"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
 tokio = { version = "1", features = ["full"] }
diff --git a/crates/dbx-driver-mongodb/Cargo.toml b/crates/dbx-driver-mongodb/Cargo.toml
index 0a79bdecea..8106f343c4 100644
--- a/crates/dbx-driver-mongodb/Cargo.toml
+++ b/crates/dbx-driver-mongodb/Cargo.toml
@@ -8,16 +8,16 @@ publish = false
 [dependencies]
 dbx-driver-support = { path = "../dbx-driver-support" }
 dbx-types = { path = "../dbx-types", default-features = false }
-base64 = "0.22"
+base64 = "0.23"
 chrono = { version = "0.4", features = ["serde"] }
 futures = "0.3"
 json5 = "0.4"
 log = "0.4"
 mongodb = { version = "3.2.5", features = ["socks5-proxy"] }
 percent-encoding = "2"
-reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "rustls-tls"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sha2 = "0.10"
+sha2 = "0.11"
 tokio = { version = "1", features = ["full"] }
 uuid = { version = "1", features = ["v4"] }
diff --git a/crates/dbx-driver-mysql/Cargo.toml b/crates/dbx-driver-mysql/Cargo.toml
index f76110a894..803d85dae7 100644
--- a/crates/dbx-driver-mysql/Cargo.toml
+++ b/crates/dbx-driver-mysql/Cargo.toml
@@ -21,7 +21,7 @@ mysql_async = { version = "0.37", default-features = false, features = ["default
 percent-encoding = "2"
 rust_decimal = { version = "1", features = ["serde"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 tokio = { version = "1", features = ["full"] }
 tokio-util = { version = "0.7", features = ["compat"] }
 
diff --git a/crates/dbx-driver-postgres/Cargo.toml b/crates/dbx-driver-postgres/Cargo.toml
index 01e9ed8195..2103d8e1a4 100644
--- a/crates/dbx-driver-postgres/Cargo.toml
+++ b/crates/dbx-driver-postgres/Cargo.toml
@@ -21,10 +21,10 @@ postgres-openssl = "0.5"
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 rustls-pemfile = "2.2"
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 tokio = { version = "1", features = ["full"] }
 tokio-postgres = { version = "0.7", features = ["with-chrono-0_4", "with-uuid-1", "with-serde_json-1"] }
-tokio-postgres-rustls = "0.13"
+tokio-postgres-rustls = "0.14"
 tokio-util = { version = "0.7", features = ["compat"] }
 uuid = { version = "1", features = ["v4", "serde"] }
 webpki-roots = "0.26"
diff --git a/crates/dbx-driver-redis/Cargo.toml b/crates/dbx-driver-redis/Cargo.toml
index 976cce758e..d22e2a42df 100644
--- a/crates/dbx-driver-redis/Cargo.toml
+++ b/crates/dbx-driver-redis/Cargo.toml
@@ -12,7 +12,7 @@ test-support = []
 [dependencies]
 dbx-driver-support = { path = "../dbx-driver-support" }
 dbx-types = { path = "../dbx-types", default-features = false }
-base64 = "0.22"
+base64 = "0.23"
 redis = { version = "1.7.1", features = ["tokio-comp", "tls-rustls", "tls-rustls-insecure", "tokio-rustls-comp", "sentinel", "cluster-async"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
diff --git a/crates/dbx-driver-sqlserver/Cargo.toml b/crates/dbx-driver-sqlserver/Cargo.toml
index 26d0aaf4c4..6bfbc36665 100644
--- a/crates/dbx-driver-sqlserver/Cargo.toml
+++ b/crates/dbx-driver-sqlserver/Cargo.toml
@@ -22,8 +22,8 @@ futures = "0.3"
 log = "0.4"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
-tiberius = { version = "0.12.3", default-features = false, features = ["tds73", "chrono", "rust_decimal", "rustls", "sql-browser-tokio"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
+tiberius = { version = "0.13.0", default-features = false, features = ["tds73", "chrono", "rust_decimal", "rustls", "sql-browser-tokio"] }
 tokio = { version = "1", features = ["full"] }
 tokio-util = { version = "0.7", features = ["compat"] }
 tracing = "0.1"
diff --git a/crates/dbx-driver-support/Cargo.toml b/crates/dbx-driver-support/Cargo.toml
index e2c3bb2507..0ab8a3e824 100644
--- a/crates/dbx-driver-support/Cargo.toml
+++ b/crates/dbx-driver-support/Cargo.toml
@@ -15,11 +15,11 @@ dbx-types = { path = "../dbx-types", default-features = false }
 bytes = "1"
 glob = "0.3"
 portpicker = "0.1.1"
-reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "socks"] }
-russh = "0.60"
+reqwest = { version = "0.13", default-features = false, features = ["rustls-tls", "socks"] }
+russh = "0.64"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 tokio = { version = "1", features = ["io-util", "net", "rt", "sync", "time"] }
 tokio-util = { version = "0.7", features = ["rt"] }
 uuid = { version = "1", features = ["v4"] }
diff --git a/crates/dbx-drivers/Cargo.toml b/crates/dbx-drivers/Cargo.toml
index 2ed7c22922..797838c721 100644
--- a/crates/dbx-drivers/Cargo.toml
+++ b/crates/dbx-drivers/Cargo.toml
@@ -47,32 +47,32 @@ rust_decimal = { version = "1", features = ["serde"] }
 uuid = { version = "1", features = ["v4", "serde"] }
 tokio-postgres = { version = "0.7", features = ["with-chrono-0_4", "with-uuid-1", "with-serde_json-1"] }
 deadpool-postgres = { version = "0.14", features = ["rt_tokio_1"] }
-tokio-postgres-rustls = "0.13"
+tokio-postgres-rustls = "0.14"
 postgres-openssl = "0.5"
 openssl = { version = "0.10", features = ["vendored"] }
 webpki-roots = "0.26"
-rusqlite = { version = "0.32", default-features = false, features = ["load_extension", "backup", "functions", "column_decltype"] }
+rusqlite = { version = "0.40", default-features = false, features = ["load_extension", "backup", "functions", "column_decltype"] }
 libsqlite3-hotbundle = { git = "https://github.com/zipg/libsqlite3-hotbundle.git", rev = "7f12f203b4f4694a273410bd9b02d77f82b6114e", features = ["cipher-sqlcipher"], optional = true }
 mysql_async = { version = "0.37", default-features = false, features = ["default-rustls", "client_ed25519", "chrono", "rust_decimal"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 rustls-pemfile = "2.2"
-tiberius = { version = "0.12.3", default-features = false, features = ["tds73", "chrono", "rust_decimal", "rustls", "sql-browser-tokio"] }
-reqwest = { version = "0.12", default-features = false, features = ["cookies", "json", "stream", "rustls-tls", "socks"] }
+tiberius = { version = "0.13.0", default-features = false, features = ["tds73", "chrono", "rust_decimal", "rustls", "sql-browser-tokio"] }
+reqwest = { version = "0.13", default-features = false, features = ["cookies", "json", "stream", "rustls-tls", "socks"] }
 futures = "0.3"
-aws-sdk-dynamodb = { version = "=1.104.0", optional = true }
-russh = "0.60"
+aws-sdk-dynamodb = { version = "=1.130.0", optional = true }
+russh = "0.64"
 pageant = "0.2"
 portpicker = "0.1.1"
 csv = "1"
-base64 = "0.22"
-sha2 = "0.10"
+base64 = "0.23"
+sha2 = "0.11"
 bytes = "1"
 zip = { version = "4", default-features = false, features = ["deflate"] }
 flate2 = "1"
 crc = "3"
 tar = "0.4"
-zstd = "0.13"
+zstd = "0.14"
 tempfile = "3"
 
 [target.'cfg(windows)'.dependencies]
diff --git a/crates/dbx-formats/Cargo.toml b/crates/dbx-formats/Cargo.toml
index 9cb9445cc0..88d90dfb96 100644
--- a/crates/dbx-formats/Cargo.toml
+++ b/crates/dbx-formats/Cargo.toml
@@ -13,5 +13,5 @@ zip = { version = "4", default-features = false, features = ["deflate"] }
 
 [dev-dependencies]
 uuid = { version = "1", features = ["v4"] }
-calamine = { version = "0.30.1", features = ["dates"] }
+calamine = { version = "0.37.0", features = ["dates"] }
 tempfile = "3"
diff --git a/crates/dbx-mcp/Cargo.toml b/crates/dbx-mcp/Cargo.toml
index 3dcc14e1f5..c292e51832 100644
--- a/crates/dbx-mcp/Cargo.toml
+++ b/crates/dbx-mcp/Cargo.toml
@@ -33,15 +33,15 @@ mysql_async = { version = "0.37", default-features = false, features = ["default
 axum = "0.8"
 chrono = "0.4"
 rmcp = { version = "3.5.1", features = ["client", "transport-io", "transport-streamable-http-server"] }
-reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "socks"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "rustls-tls", "socks"] }
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 schemars = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sqlparser = { version = "0.62", features = ["visitor"] }
+sqlparser = { version = "0.63", features = ["visitor"] }
 tokio = { version = "1", features = ["fs", "macros", "net", "rt-multi-thread", "signal"] }
 tokio-util = "0.7"
-tower-http = { version = "0.6", features = ["cors"] }
+tower-http = { version = "0.7", features = ["cors"] }
 uuid = { version = "1", features = ["v4"] }
 url = "2"
 
diff --git a/crates/dbx-platform/Cargo.toml b/crates/dbx-platform/Cargo.toml
index b732191807..b82405ccca 100644
--- a/crates/dbx-platform/Cargo.toml
+++ b/crates/dbx-platform/Cargo.toml
@@ -12,7 +12,7 @@ test-support = ["host-prompts"]
 downloads = ["dep:reqwest", "dep:futures", "dep:serde"]
 
 [dependencies]
-reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls", "socks"], optional = true }
+reqwest = { version = "0.13", default-features = false, features = ["json", "stream", "rustls-tls", "socks"], optional = true }
 futures = { version = "0.3", optional = true }
 tokio = { version = "1", features = ["process", "time"] }
 serde = { version = "1.0", features = ["derive"], optional = true }
diff --git a/crates/dbx-plugin-runtime/Cargo.toml b/crates/dbx-plugin-runtime/Cargo.toml
index 6afd2c0d99..9f1494025c 100644
--- a/crates/dbx-plugin-runtime/Cargo.toml
+++ b/crates/dbx-plugin-runtime/Cargo.toml
@@ -21,10 +21,10 @@ log = "0.4"
 tokio = { version = "1", features = ["process", "io-util", "sync", "time", "rt", "macros"] }
 chrono = { version = "0.4", features = ["serde"] }
 uuid = { version = "1", features = ["v4"] }
-reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls", "socks"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "stream", "rustls-tls", "socks"] }
 futures = "0.3"
-base64 = "0.22"
-sha2 = "0.10"
+base64 = "0.23"
+sha2 = "0.11"
 bytes = "1"
 zip = { version = "4", default-features = false, features = ["deflate"] }
 tempfile = "3"
diff --git a/crates/dbx-sql-core/Cargo.toml b/crates/dbx-sql-core/Cargo.toml
index 3de2674f85..31e30dc768 100644
--- a/crates/dbx-sql-core/Cargo.toml
+++ b/crates/dbx-sql-core/Cargo.toml
@@ -13,6 +13,6 @@ log = "0.4"
 regex = "1"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 unicode-ident = "1"
 winnow = "1.0"
diff --git a/crates/dbx-sql-data/Cargo.toml b/crates/dbx-sql-data/Cargo.toml
index 4daa57c61f..bfcbae3d71 100644
--- a/crates/dbx-sql-data/Cargo.toml
+++ b/crates/dbx-sql-data/Cargo.toml
@@ -16,6 +16,6 @@ dbx-types = { path = "../dbx-types", default-features = false }
 chrono = "0.4"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 unicode-width = "0.2"
 utoipa = { version = "5.5", optional = true }
diff --git a/crates/dbx-sql-schema/Cargo.toml b/crates/dbx-sql-schema/Cargo.toml
index 647fd2fb3c..cdc61c9713 100644
--- a/crates/dbx-sql-schema/Cargo.toml
+++ b/crates/dbx-sql-schema/Cargo.toml
@@ -19,7 +19,7 @@ regex = "1"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision", "preserve_order"] }
 serde_yaml = "0.9"
-sqlparser = { version = "0.62.0", features = ["visitor"] }
+sqlparser = { version = "0.63.0", features = ["visitor"] }
 
 [dev-dependencies]
-rusqlite = { version = "0.32", default-features = false }
+rusqlite = { version = "0.40", default-features = false }
diff --git a/crates/dbx-sqlite-worker/Cargo.toml b/crates/dbx-sqlite-worker/Cargo.toml
index e35cbcb2d3..c73d4b822c 100644
--- a/crates/dbx-sqlite-worker/Cargo.toml
+++ b/crates/dbx-sqlite-worker/Cargo.toml
@@ -18,8 +18,8 @@ runtime = ["dep:rusqlite", "dep:sqlparser"]
 [dependencies]
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", features = ["arbitrary_precision"] }
-rusqlite = { version = "0.32", optional = true, features = ["bundled", "backup", "column_decltype"] }
-sqlparser = { version = "0.62.0", optional = true }
+rusqlite = { version = "0.40", optional = true, features = ["bundled", "backup", "column_decltype"] }
+sqlparser = { version = "0.63.0", optional = true }
 
 [dev-dependencies]
 serde_json = { version = "1.0", features = ["arbitrary_precision"] }
diff --git a/crates/dbx-web/Cargo.toml b/crates/dbx-web/Cargo.toml
index b79765fe3a..7147b429c3 100644
--- a/crates/dbx-web/Cargo.toml
+++ b/crates/dbx-web/Cargo.toml
@@ -29,13 +29,13 @@ dbx-core = { path = "../dbx-core", default-features = false, features = ["openap
 dbx-mcp = { path = "../dbx-mcp", default-features = false }
 redis = { version = "1.7.1", features = ["tokio-comp"] }
 axum = { version = "0.8", features = ["multipart", "ws"] }
-tower-http = { version = "0.6", features = ["cors", "fs", "compression-gzip", "trace"] }
+tower-http = { version = "0.7", features = ["cors", "fs", "compression-gzip", "trace"] }
 tokio = { version = "1", features = ["full"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 utoipa = { version = "5.5", features = ["axum_extras"] }
 uuid = { version = "1", features = ["v4"] }
-argon2 = "0.5"
+argon2 = "0.6"
 log = "0.4"
 tracing-subscriber = { version = "0.3", features = ["env-filter", "tracing-log"] }
 tracing = "0.1"
@@ -43,12 +43,12 @@ async-stream = "0.3"
 futures = "0.3"
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 tokio-util = { version = "0.7", features = ["io"] }
-reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "rustls-tls"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "stream", "rustls-tls"] }
 chrono = "0.4"
-aes-gcm = "0.10"
-base64 = "0.22"
-pbkdf2 = "0.12"
-sha2 = "0.10"
+aes-gcm = "0.11"
+base64 = "0.23"
+pbkdf2 = "0.13"
+sha2 = "0.11"
 tempfile = "3"
 rust-embed = { version = "8", features = ["debug-embed"], optional = true }
 mime_guess = { version = "2", optional = true }
@@ -56,4 +56,4 @@ mime_guess = { version = "2", optional = true }
 
 [dev-dependencies]
 dbx-core = { path = "../dbx-core", default-features = false, features = ["test-support"] }
-reqwest = { version = "0.12", default-features = false, features = ["multipart"] }
+reqwest = { version = "0.13", default-features = false, features = ["multipart"] }
diff --git a/plugins/sdk/cli/Cargo.lock b/plugins/sdk/cli/Cargo.lock
index 6d507fd7a6..8bd39e87cf 100644
--- a/plugins/sdk/cli/Cargo.lock
+++ b/plugins/sdk/cli/Cargo.lock
@@ -19,9 +19,9 @@ dependencies = [
 
 [[package]]
 name = "base64"
-version = "0.22.1"
+version = "0.23.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
 
 [[package]]
 name = "base64ct"
@@ -44,6 +44,15 @@ dependencies = [
  "generic-array",
 ]
 
+[[package]]
+name = "block-buffer"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2f6c7dbe95a6ed67ad9f18e57daf93a2f034c524b99fd2b76d18fdfeb6660aa"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "bumpalo"
 version = "3.20.3"
@@ -62,6 +71,12 @@ version = "0.9.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
 
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
 [[package]]
 name = "cpufeatures"
 version = "0.2.17"
@@ -71,6 +86,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "cpufeatures"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ca28b0ae3115b884660db4118d803791fd6756b6e88f39c0f3f7859060d7566"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "crc32fast"
 version = "1.5.0"
@@ -90,6 +114,15 @@ dependencies = [
  "typenum",
 ]
 
+[[package]]
+name = "crypto-common"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce6e4c961d6cd6c9a86db418387425e8bdeaf05b3c8bc1411e6dca4c252f1453"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "curve25519-dalek"
 version = "4.1.3"
@@ -97,9 +130,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
 dependencies = [
  "cfg-if",
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "curve25519-dalek-derive",
- "digest",
+ "digest 0.10.7",
  "fiat-crypto",
  "rustc_version",
  "subtle",
@@ -137,7 +170,7 @@ dependencies = [
  "ed25519-dalek",
  "getrandom 0.4.3",
  "serde_json",
- "sha2",
+ "sha2 0.11.1",
  "walkdir",
  "zip",
 ]
@@ -148,7 +181,7 @@ version = "0.7.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
 dependencies = [
- "const-oid",
+ "const-oid 0.9.6",
  "zeroize",
 ]
 
@@ -169,8 +202,19 @@ version = "0.10.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
- "block-buffer",
- "crypto-common",
+ "block-buffer 0.10.4",
+ "crypto-common 0.1.7",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
+dependencies = [
+ "block-buffer 0.12.1",
+ "const-oid 0.10.2",
+ "crypto-common 0.2.2",
 ]
 
 [[package]]
@@ -192,7 +236,7 @@ dependencies = [
  "curve25519-dalek",
  "ed25519",
  "serde",
- "sha2",
+ "sha2 0.10.9",
  "subtle",
  "zeroize",
 ]
@@ -235,6 +279,12 @@ dependencies = [
  "zlib-rs",
 ]
 
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
 [[package]]
 name = "generic-array"
 version = "0.14.7"
@@ -273,6 +323,15 @@ version = "0.17.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
 
+[[package]]
+name = "hybrid-array"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27f864f10dfb56725ce5ce5472bc52252c8f93a4ab86327122cebf62c5f59a17"
+dependencies = [
+ "typenum",
+]
+
 [[package]]
 name = "indexmap"
 version = "2.14.0"
@@ -441,10 +500,11 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.151"
+version = "1.0.154"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+checksum = "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
 dependencies = [
+ "foldhash",
  "indexmap",
  "itoa",
  "memchr",
@@ -455,11 +515,11 @@ dependencies = [
 
 [[package]]
 name = "serde_spanned"
-version = "0.6.9"
+version = "1.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+checksum = "4e7523beb55eece201a2356bee0bbca0d1ab466c14c07703b2e0ee6d42cb0c2c"
 dependencies = [
- "serde",
+ "serde_core",
 ]
 
 [[package]]
@@ -469,8 +529,19 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
 dependencies = [
  "cfg-if",
- "cpufeatures",
- "digest",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha2"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d7069beb7d6ac7b9acd1039986e73443f24234f41074da099d6f994ac9ad19"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.1",
+ "digest 0.11.3",
 ]
 
 [[package]]
@@ -541,44 +612,42 @@ dependencies = [
 
 [[package]]
 name = "toml"
-version = "0.8.23"
+version = "0.9.12+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
+checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
 dependencies = [
- "serde",
+ "indexmap",
+ "serde_core",
  "serde_spanned",
  "toml_datetime",
- "toml_edit",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.15",
 ]
 
 [[package]]
 name = "toml_datetime"
-version = "0.6.11"
+version = "0.7.5+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
 dependencies = [
- "serde",
+ "serde_core",
 ]
 
 [[package]]
-name = "toml_edit"
-version = "0.22.27"
+name = "toml_parser"
+version = "1.1.5+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
+checksum = "baa693a8032d7e1cada7d0041e96126df243179ff061456783ac7f12bda4744c"
 dependencies = [
- "indexmap",
- "serde",
- "serde_spanned",
- "toml_datetime",
- "toml_write",
- "winnow",
+ "winnow 1.0.4",
 ]
 
 [[package]]
-name = "toml_write"
-version = "0.1.2"
+name = "toml_writer"
+version = "1.1.3+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
+checksum = "06bdbd8cfc056b8d2e2e85f29b56a3bdbecb527cef81eb39e3e7b98af4652770"
 
 [[package]]
 name = "typenum"
@@ -643,9 +712,12 @@ name = "winnow"
 version = "0.7.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
-dependencies = [
- "memchr",
-]
+
+[[package]]
+name = "winnow"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b97319f7b8343df12cc98938e5c3eb436064524c8d2b4e30a1d3a36eecdf81"
 
 [[package]]
 name = "zeroize"
diff --git a/plugins/sdk/cli/Cargo.toml b/plugins/sdk/cli/Cargo.toml
index f498f89a11..57bbc889cb 100644
--- a/plugins/sdk/cli/Cargo.toml
+++ b/plugins/sdk/cli/Cargo.toml
@@ -16,7 +16,7 @@ dbx-plugin-packager = { version = "0.1.0", path = "../packager" }
 semver = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-toml = "0.8"
+toml = "0.9"
 
 [dev-dependencies]
 tempfile = "3"
diff --git a/plugins/sdk/packager/Cargo.lock b/plugins/sdk/packager/Cargo.lock
index e3f9595bd7..4265cb4d8f 100644
--- a/plugins/sdk/packager/Cargo.lock
+++ b/plugins/sdk/packager/Cargo.lock
@@ -19,9 +19,9 @@ dependencies = [
 
 [[package]]
 name = "base64"
-version = "0.22.1"
+version = "0.23.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
 
 [[package]]
 name = "base64ct"
@@ -44,6 +44,15 @@ dependencies = [
  "generic-array",
 ]
 
+[[package]]
+name = "block-buffer"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2f6c7dbe95a6ed67ad9f18e57daf93a2f034c524b99fd2b76d18fdfeb6660aa"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "bumpalo"
 version = "3.20.3"
@@ -62,6 +71,12 @@ version = "0.9.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
 
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
 [[package]]
 name = "cpufeatures"
 version = "0.2.17"
@@ -71,6 +86,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "cpufeatures"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ca28b0ae3115b884660db4118d803791fd6756b6e88f39c0f3f7859060d7566"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "crc32fast"
 version = "1.5.0"
@@ -90,6 +114,15 @@ dependencies = [
  "typenum",
 ]
 
+[[package]]
+name = "crypto-common"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce6e4c961d6cd6c9a86db418387425e8bdeaf05b3c8bc1411e6dca4c252f1453"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "curve25519-dalek"
 version = "4.1.3"
@@ -97,9 +130,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
 dependencies = [
  "cfg-if",
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "curve25519-dalek-derive",
- "digest",
+ "digest 0.10.7",
  "fiat-crypto",
  "rustc_version",
  "subtle",
@@ -125,7 +158,7 @@ dependencies = [
  "ed25519-dalek",
  "getrandom 0.4.3",
  "serde_json",
- "sha2",
+ "sha2 0.11.1",
  "tempfile",
  "walkdir",
  "zip",
@@ -137,7 +170,7 @@ version = "0.7.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
 dependencies = [
- "const-oid",
+ "const-oid 0.9.6",
  "zeroize",
 ]
 
@@ -158,8 +191,19 @@ version = "0.10.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
- "block-buffer",
- "crypto-common",
+ "block-buffer 0.10.4",
+ "crypto-common 0.1.7",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
+dependencies = [
+ "block-buffer 0.12.1",
+ "const-oid 0.10.2",
+ "crypto-common 0.2.2",
 ]
 
 [[package]]
@@ -181,7 +225,7 @@ dependencies = [
  "curve25519-dalek",
  "ed25519",
  "serde",
- "sha2",
+ "sha2 0.10.9",
  "subtle",
  "zeroize",
 ]
@@ -224,6 +268,12 @@ dependencies = [
  "zlib-rs",
 ]
 
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
 [[package]]
 name = "generic-array"
 version = "0.14.7"
@@ -262,6 +312,15 @@ version = "0.17.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
 
+[[package]]
+name = "hybrid-array"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27f864f10dfb56725ce5ce5472bc52252c8f93a4ab86327122cebf62c5f59a17"
+dependencies = [
+ "typenum",
+]
+
 [[package]]
 name = "indexmap"
 version = "2.14.0"
@@ -429,10 +488,11 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.151"
+version = "1.0.154"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+checksum = "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6"
 dependencies = [
+ "foldhash",
  "indexmap",
  "itoa",
  "memchr",
@@ -448,8 +508,19 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
 dependencies = [
  "cfg-if",
- "cpufeatures",
- "digest",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha2"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d7069beb7d6ac7b9acd1039986e73443f24234f41074da099d6f994ac9ad19"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.1",
+ "digest 0.11.3",
 ]
 
 [[package]]
diff --git a/plugins/sdk/packager/Cargo.toml b/plugins/sdk/packager/Cargo.toml
index f89a70b009..b76de1068b 100644
--- a/plugins/sdk/packager/Cargo.toml
+++ b/plugins/sdk/packager/Cargo.toml
@@ -17,11 +17,11 @@ name = "dbx-plugin-packager"
 path = "src/bin/dbx-plugin-packager.rs"
 
 [dependencies]
-base64 = "0.22"
+base64 = "0.23"
 ed25519-dalek = "2"
 getrandom = "0.4"
 serde_json = { version = "1", features = ["preserve_order"] }
-sha2 = "0.10"
+sha2 = "0.11"
 walkdir = "2"
 zip = { version = "4", default-features = false, features = ["deflate"] }
 
diff --git a/scripts/ai-proxy-12277/Cargo.toml b/scripts/ai-proxy-12277/Cargo.toml
index c32a3e2b0d..a7def1b32e 100644
--- a/scripts/ai-proxy-12277/Cargo.toml
+++ b/scripts/ai-proxy-12277/Cargo.toml
@@ -8,8 +8,8 @@ publish = false
 
 [dependencies]
 dbx-ai-provider = { path = "../../crates/dbx-ai-provider" }
-reqwest = { version = "=0.12.28", default-features = false, features = ["rustls-tls", "system-proxy"] }
-hyper-util = "=0.1.20"
+reqwest = { version = "=0.13.5", default-features = false, features = ["rustls-tls", "system-proxy"] }
+hyper-util = "=0.1.21"
 serde_json = "1"
 tokio = { version = "1", features = ["rt", "macros"] }
 
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 327a529940..353a32d271 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -33,7 +33,7 @@ serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 tempfile = "3"
 serde_yaml_ng = "0.10"
-base64 = "0.22"
+base64 = "0.23"
 log = "0.4"
 tauri = { version = "2.10.3", features = ["tray-icon", "image-png"] }
 tauri-plugin-log = "2"
@@ -50,27 +50,27 @@ tauri-plugin-dialog = "2.7.0"
 tauri-plugin-fs = "2.5.0"
 tauri-plugin-single-instance = "2.4.2"
 tauri-plugin-shell = "2"
-tauri-plugin-updater = "=2.10.1"
+tauri-plugin-updater = "=2.14.0"
 tauri-plugin-process = "2"
 tauri-plugin-window-state = "2"
 redis = { version = "1.7.1", features = ["tokio-comp", "tls-rustls", "tokio-rustls-comp", "cluster-async"] }
 rustls = { version = "0.23", features = ["aws-lc-rs"] }
 portpicker = "0.1.1"
-tiberius = { version = "0.12.3", default-features = false, features = ["tds73", "chrono", "rust_decimal", "rustls", "sql-browser-tokio"] }
+tiberius = { version = "0.13.0", default-features = false, features = ["tds73", "chrono", "rust_decimal", "rustls", "sql-browser-tokio"] }
 tokio-util = { version = "0.7", features = ["compat"] }
-reqwest = { version = "0.12", features = ["json", "stream"] }
+reqwest = { version = "0.13", features = ["json", "stream"] }
 regex = "1"
-grep = "0.3"
+grep = "0.4"
 ignore = "0.4"
 futures = "0.3"
 mongodb = { version = "3.2.5", features = ["socks5-proxy"] }
 percent-encoding = "2"
-minisign-verify = "0.2.5"
+minisign-verify = "0.3.0"
 semver = "1"
-sha2 = "0.10"
-russh = "0.60"
+sha2 = "0.11"
+russh = "0.64"
 csv = "1.4.0"
-calamine = "0.30.1"
+calamine = "0.37.0"
 zip = "4.6.1"
 dbx-core = { path = "../crates/dbx-core", default-features = false }
 dbx-mcp = { path = "../crates/dbx-mcp", default-features = false, features = ["duckdb-sidecar", "mq-admin"] }
@@ -81,7 +81,7 @@ axum = { version = "0.8", features = ["ws"] }
 font-kit = "0.14.3"
 tauri-plugin-clipboard-manager = "2.3.2"
 sys-locale = "0.3"
-sysinfo = { version = "0.32", features = ["system"] }
+sysinfo = { version = "0.39", features = ["system"] }
 
 [dev-dependencies]
 dbx-core = { path = "../crates/dbx-core", default-features = false, features = ["test-support"] }
@@ -93,14 +93,14 @@ objc2-app-kit = { version = "0.3.2", default-features = false, features = ["NSAp
 objc2-foundation = { version = "0.3.2", default-features = false, features = ["NSBundle", "NSData", "NSString"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
-libloading = "0.8"
-gtk = "0.18"
+libloading = "0.9"
+gtk = "0.19"
 
 [target.'cfg(target_os = "windows")'.dependencies]
 # 与 vendored wry / tauri-runtime-wry 同版本（Cargo.lock 只有一份 0.38.x），用于在
 # 快捷键录入态运行时切换 WebView2 的浏览器加速键开关（见 commands/shortcut_recording.rs）。
-webview2-com = "0.38"
+webview2-com = "0.39"
 # `cast`（Settings → Settings3 的 QueryInterface）来自 windows-core 的 Interface trait，
 # 版本与 vendored wry / webview2-com-sys 一致。
-windows-core = "0.61"
+windows-core = "0.100"
 windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_Storage_FileSystem", "Win32_System_Threading", "Win32_UI_WindowsAndMessaging"] }