diff --git a/Cargo.lock b/Cargo.lock
index ee5cf7fc..12414bf4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2348,9 +2348,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-util"
-version = "0.7.7"
+version = "0.7.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5427d89453009325de0d8f342c9490009f76e999cb7672d77e46267448f7e6b2"
+checksum = "806fe8c2c87eccc8b3267cbae29ed3ab2d0bd37fca70ab622e46aaa9375ddb7d"
 dependencies = [
  "bytes",
  "futures-core",
diff --git a/crates/binstalk-downloader/Cargo.toml b/crates/binstalk-downloader/Cargo.toml
index feda8c80..640deb8b 100644
--- a/crates/binstalk-downloader/Cargo.toml
+++ b/crates/binstalk-downloader/Cargo.toml
@@ -35,7 +35,7 @@ tempfile = "3.5.0"
 thiserror = "1.0.40"
 tokio = { version = "1.28.0", features = ["macros", "rt-multi-thread", "sync", "time", "fs"], default-features = false }
 tokio-tar = "0.3.0"
-tokio-util = { version = "0.7.7", features = ["io"] }
+tokio-util = { version = "0.7.8", features = ["io"] }
 tower = { version = "0.4.13", features = ["limit", "util"] }
 tracing = "0.1.38"
 # trust-dns-resolver must be kept in sync with the version reqwest uses