diff --git a/Cargo.lock b/Cargo.lock
index 2bf4325f..ab3ad654 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -279,7 +279,7 @@ dependencies = [
  "strum",
  "target-lexicon",
  "tempfile",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tokio",
  "tracing",
  "url",
@@ -296,7 +296,7 @@ dependencies = [
  "leon",
  "miette",
  "normalize-path",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tracing",
 ]
 
@@ -326,7 +326,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tempfile",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tokio",
  "tokio-tar",
  "tokio-util",
@@ -354,7 +354,7 @@ dependencies = [
  "minisign-verify",
  "once_cell",
  "strum",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tokio",
  "tracing",
  "url",
@@ -371,7 +371,7 @@ dependencies = [
  "serde",
  "serde-tuple-vec-map",
  "serde_json",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tokio",
  "tracing",
  "tracing-subscriber",
@@ -395,7 +395,7 @@ dependencies = [
  "serde-tuple-vec-map",
  "serde_json",
  "tempfile",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "toml_edit",
  "url",
 ]
@@ -420,7 +420,7 @@ dependencies = [
  "sha2",
  "simple-git",
  "tempfile",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tokio",
  "toml_edit",
  "tracing",
@@ -610,7 +610,7 @@ dependencies = [
  "normalize-path",
  "serde",
  "tempfile",
- "thiserror 2.0.1",
+ "thiserror 2.0.3",
  "tracing",
 ]
 
@@ -697,9 +697,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.20"
+version = "4.5.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b97f376d85a664d5837dbae44bf546e6477a679ff6610010f17276f686d867e8"
+checksum = "fb3b4b9e5a7c7514dfa52869339ee98b3156b0bfb4e8a77c4ff4babb64b1604f"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -707,9 +707,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.20"
+version = "4.5.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "19bc80abd44e4bed93ca373a0704ccbd1b710dc5749406201bb018272808dc54"
+checksum = "b17a95aa67cc7b5ebd32aa5370189aa0d79069ef1c64ce893bd30fb24bff20ec"
 dependencies = [
  "anstream",
  "anstyle",
@@ -992,9 +992,9 @@ checksum = "60b1af1c220855b6ceac025d3f6ecdd2b7c4894bfe9cd9bda4fbb4bc7c0d4cf0"
 
 [[package]]
 name = "embed-resource"
-version = "2.5.1"
+version = "3.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b68b6f9f63a0b6a38bc447d4ce84e2b388f3ec95c99c641c8ff0dd3ef89a6379"
+checksum = "4762ce03154ba57ebaeee60cc631901ceae4f18219cbb874e464347471594742"
 dependencies = [
  "cc",
  "memchr",
@@ -1097,9 +1097,9 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.0.34"
+version = "1.0.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1b589b4dc103969ad3cf85c950899926ec64300a1a46d76c03a6072957036f0"
+checksum = "c936bfdafb507ebbf50b8074c54fa31c5be9a1e7e5f467dd659697041407d07c"
 dependencies = [
  "crc32fast",
  "libz-ng-sys",
@@ -2634,19 +2634,19 @@ checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
 
 [[package]]
 name = "leon"
-version = "3.0.1"
+version = "3.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d82a8693bd856b8b0596b6abed75d494ba6ca04b8e1b12be3a2ab947c305d8b1"
+checksum = "42a865ffec5587961f5afc6d365bccb304f4feaa1928f4fe94c91c9d210d7310"
 dependencies = [
  "miette",
- "thiserror 1.0.68",
+ "thiserror 2.0.3",
 ]
 
 [[package]]
 name = "leon-macros"
-version = "1.0.2"
+version = "1.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "acf3621546e1f1fedade073ad01f1c1bf561584a9b4c83c37728a28da69544aa"
+checksum = "e0c7ff357e507638488e191166c6e396ff53f921664547d40fe63aa38e5014b0"
 dependencies = [
  "leon",
  "proc-macro2",
@@ -3477,9 +3477,9 @@ dependencies = [
 
 [[package]]
 name = "reflink-copy"
-version = "0.1.19"
+version = "0.1.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc31414597d1cd7fdd2422798b7652a6329dda0fe0219e6335a13d5bcaa9aeb6"
+checksum = "17400ed684c3a0615932f00c271ae3eea13e47056a1455821995122348ab6438"
 dependencies = [
  "cfg-if",
  "rustix",
@@ -3754,9 +3754,9 @@ dependencies = [
 
 [[package]]
 name = "serde"
-version = "1.0.214"
+version = "1.0.215"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f55c3193aca71c12ad7890f1785d2b73e1b9f63a0bbc353c08ef26fe03fc56b5"
+checksum = "6513c1ad0b11a9376da888e3e0baa0077f1aed55c17f50e7b2397136129fb88f"
 dependencies = [
  "serde_derive",
 ]
@@ -3772,9 +3772,9 @@ dependencies = [
 
 [[package]]
 name = "serde_derive"
-version = "1.0.214"
+version = "1.0.215"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "de523f781f095e28fa605cdce0f8307e451cc0fd14e2eb4cd2e98a355b147766"
+checksum = "ad1e866f866923f252f05c889987993144fb74e722403468a4ebd70c3cd756c0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -4127,11 +4127,11 @@ dependencies = [
 
 [[package]]
 name = "thiserror"
-version = "2.0.1"
+version = "2.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07c1e40dd48a282ae8edc36c732cbc219144b87fb6a4c7316d611c6b1f06ec0c"
+checksum = "c006c85c7651b3cf2ada4584faa36773bd07bac24acfb39f3c431b36d7e667aa"
 dependencies = [
- "thiserror-impl 2.0.1",
+ "thiserror-impl 2.0.3",
 ]
 
 [[package]]
@@ -4147,9 +4147,9 @@ dependencies = [
 
 [[package]]
 name = "thiserror-impl"
-version = "2.0.1"
+version = "2.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "874aa7e446f1da8d9c3a5c95b1c5eb41d800045252121dc7f8e0ba370cee55f5"
+checksum = "f077553d607adc1caf65430528a576c757a71ed73944b66ebb58ef2bbd243568"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/crates/atomic-file-install/Cargo.toml b/crates/atomic-file-install/Cargo.toml
index 6472d276..dcfe53b7 100644
--- a/crates/atomic-file-install/Cargo.toml
+++ b/crates/atomic-file-install/Cargo.toml
@@ -10,7 +10,7 @@ license = "Apache-2.0 OR MIT"
 rust-version = "1.65.0"
 
 [dependencies]
-reflink-copy = "0.1.15"
+reflink-copy = "0.1.20"
 tempfile = "3.5.0"
 tracing = "0.1.39"
 
diff --git a/crates/bin/Cargo.toml b/crates/bin/Cargo.toml
index bed9f188..09da7f08 100644
--- a/crates/bin/Cargo.toml
+++ b/crates/bin/Cargo.toml
@@ -25,7 +25,7 @@ pkg-fmt = "zip"
 atomic-file-install = { version = "1.0.5", path = "../atomic-file-install" }
 binstalk = { path = "../binstalk", version = "0.28.12", default-features = false }
 binstalk-manifests = { path = "../binstalk-manifests", version = "0.15.9" }
-clap = { version = "4.5.3", features = ["derive", "env"] }
+clap = { version = "4.5.21", features = ["derive", "env"] }
 compact_str = "0.8.0"
 dirs = "5.0.1"
 file-format = { version = "0.26.0", default-features = false }
@@ -47,7 +47,7 @@ tracing-subscriber = { version = "0.3.17", features = ["fmt", "json", "ansi"], d
 zeroize = "1.8.1"
 
 [build-dependencies]
-embed-resource = "2.4.1"
+embed-resource = "3.0.1"
 vergen = { version = "8.2.7", features = ["build", "cargo", "git", "gitcl", "rustc"] }
 
 [features]
diff --git a/crates/binstalk-bins/Cargo.toml b/crates/binstalk-bins/Cargo.toml
index 71addaaa..2634976f 100644
--- a/crates/binstalk-bins/Cargo.toml
+++ b/crates/binstalk-bins/Cargo.toml
@@ -14,8 +14,8 @@ license = "GPL-3.0-only"
 atomic-file-install = { version = "1.0.5", path = "../atomic-file-install" }
 binstalk-types = { version = "0.9.1", path = "../binstalk-types" }
 compact_str = { version = "0.8.0", features = ["serde"] }
-leon = "3.0.0"
+leon = "3.0.2"
 miette = "7.0.0"
 normalize-path = { version = "0.2.1", path = "../normalize-path" }
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 tracing = "0.1.39"
diff --git a/crates/binstalk-downloader/Cargo.toml b/crates/binstalk-downloader/Cargo.toml
index 0c3d8f77..12f9aed7 100644
--- a/crates/binstalk-downloader/Cargo.toml
+++ b/crates/binstalk-downloader/Cargo.toml
@@ -23,7 +23,7 @@ bytes = "1.4.0"
 bzip2 = "0.4.4"
 cfg-if = "1"
 compact_str = "0.8.0"
-flate2 = { version = "1.0.28", default-features = false }
+flate2 = { version = "1.0.35", default-features = false }
 futures-util = "0.3.30"
 futures-io = "0.3.30"
 httpdate = "1.0.2"
@@ -42,7 +42,7 @@ reqwest = { version = "0.12.5", features = [
     "brotli",
     "deflate",
 ], default-features = false }
-serde = { version = "1.0.163", features = ["derive"], optional = true }
+serde = { version = "1.0.215", features = ["derive"], optional = true }
 serde_json = { version = "1.0.107", optional = true }
 # Use a fork here since we need PAX support, but the upstream
 # does not hav the PR merged yet.
@@ -50,7 +50,7 @@ serde_json = { version = "1.0.107", optional = true }
 #tar = "0.4.38"
 tar = { package = "binstall-tar", version = "0.4.39" }
 tempfile = "3.5.0"
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 tokio = { version = "1.35.0", features = [
     "macros",
     "rt-multi-thread",
diff --git a/crates/binstalk-fetchers/Cargo.toml b/crates/binstalk-fetchers/Cargo.toml
index 8a67361c..6816619d 100644
--- a/crates/binstalk-fetchers/Cargo.toml
+++ b/crates/binstalk-fetchers/Cargo.toml
@@ -19,13 +19,13 @@ bytes = "1.4.0"
 compact_str = { version = "0.8.0" }
 either = "1.11.0"
 itertools = "0.13.0"
-leon = "3.0.0"
-leon-macros = "1.0.1"
+leon = "3.0.2"
+leon-macros = "1.0.3"
 miette = "7.0.0"
 minisign-verify = "0.2.1"
 once_cell = "1.18.0"
 strum = "0.26.1"
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 tokio = { version = "1.35.0", features = [
     "rt",
     "sync",
diff --git a/crates/binstalk-git-repo-api/Cargo.toml b/crates/binstalk-git-repo-api/Cargo.toml
index e0f1bac8..cf6ba3c2 100644
--- a/crates/binstalk-git-repo-api/Cargo.toml
+++ b/crates/binstalk-git-repo-api/Cargo.toml
@@ -15,10 +15,10 @@ binstalk-downloader = { version = "0.13.4", path = "../binstalk-downloader", def
 ] }
 compact_str = "0.8.0"
 percent-encoding = "2.2.0"
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.215", features = ["derive"] }
 serde-tuple-vec-map = "1.0.1"
 serde_json = { version = "1.0.107" }
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 tokio = { version = "1.35.0", features = ["sync"], default-features = false }
 tracing = "0.1.39"
 url = "2.5.3"
diff --git a/crates/binstalk-manifests/Cargo.toml b/crates/binstalk-manifests/Cargo.toml
index 501286fc..95ccc734 100644
--- a/crates/binstalk-manifests/Cargo.toml
+++ b/crates/binstalk-manifests/Cargo.toml
@@ -17,10 +17,10 @@ fs-lock = { version = "0.1.6", path = "../fs-lock" }
 home = "0.5.9"
 miette = "7.0.0"
 semver = { version = "1.0.17", features = ["serde"] }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.215", features = ["derive"] }
 serde-tuple-vec-map = "1.0.1"
 serde_json = "1.0.107"
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 toml_edit = { version = "0.22.12", features = ["serde"] }
 url = { version = "2.5.3", features = ["serde"] }
 
diff --git a/crates/binstalk-registry/Cargo.toml b/crates/binstalk-registry/Cargo.toml
index 1e68cd22..5cc9909b 100644
--- a/crates/binstalk-registry/Cargo.toml
+++ b/crates/binstalk-registry/Cargo.toml
@@ -19,17 +19,17 @@ binstalk-downloader = { version = "0.13.4", path = "../binstalk-downloader", def
 binstalk-types = { version = "0.9.1", path = "../binstalk-types" }
 cargo-toml-workspace = { version = "6.0.3", path = "../cargo-toml-workspace" }
 compact_str = { version = "0.8.0", features = ["serde"] }
-leon = "3.0.0"
+leon = "3.0.2"
 miette = "7.0.0"
 normalize-path = { version = "0.2.1", path = "../normalize-path" }
 once_cell = "1.18.0"
 semver = { version = "1.0.17", features = ["serde"] }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.215", features = ["derive"] }
 serde_json = "1.0.107"
 sha2 = "0.10.7"
 simple-git = { version = "0.2.4", optional = true }
 tempfile = "3.5.0"
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 tokio = { version = "1.35.0", features = [
     "rt",
     "sync",
diff --git a/crates/binstalk-types/Cargo.toml b/crates/binstalk-types/Cargo.toml
index b1e91d01..f3de0012 100644
--- a/crates/binstalk-types/Cargo.toml
+++ b/crates/binstalk-types/Cargo.toml
@@ -14,7 +14,7 @@ compact_str = { version = "0.8.0", features = ["serde"] }
 maybe-owned = { version = "0.3.4", features = ["serde"] }
 once_cell = "1.18.0"
 semver = { version = "1.0.17", features = ["serde"] }
-serde = { version = "1.0.163", features = ["derive"] }
+serde = { version = "1.0.215", features = ["derive"] }
 strum = "0.26.1"
 strum_macros = "0.26.1"
 url = { version = "2.5.3", features = ["serde"] }
diff --git a/crates/binstalk/Cargo.toml b/crates/binstalk/Cargo.toml
index 295672df..4b509c0f 100644
--- a/crates/binstalk/Cargo.toml
+++ b/crates/binstalk/Cargo.toml
@@ -27,7 +27,7 @@ detect-targets = { version = "0.1.28", path = "../detect-targets", features = [
 either = "1.11.0"
 itertools = "0.13.0"
 jobslot = { version = "0.2.11", features = ["tokio"] }
-leon = "3.0.0"
+leon = "3.0.2"
 maybe-owned = "0.3.4"
 miette = "7.0.0"
 semver = { version = "1.0.17", features = ["serde"] }
@@ -35,7 +35,7 @@ simple-git = { version = "0.2.10", optional = true }
 strum = "0.26.1"
 target-lexicon = { version = "0.12.11", features = ["std"] }
 tempfile = "3.5.0"
-thiserror = "2.0.1"
+thiserror = "2.0.3"
 tokio = { version = "1.35.0", features = [
     "rt",
     "process",
diff --git a/crates/cargo-toml-workspace/Cargo.toml b/crates/cargo-toml-workspace/Cargo.toml
index 06d25f35..8c808039 100644
--- a/crates/cargo-toml-workspace/Cargo.toml
+++ b/crates/cargo-toml-workspace/Cargo.toml
@@ -14,8 +14,8 @@ cargo_toml = "0.20.0"
 compact_str = { version = "0.8.0", features = ["serde"] }
 glob = "0.3.1"
 normalize-path = { version = "0.2.1", path = "../normalize-path" }
-serde = "1.0.163"
-thiserror = "2.0.1"
+serde = "1.0.215"
+thiserror = "2.0.3"
 tracing = "0.1.39"
 
 [dev-dependencies]