diff --git a/blockdev/Cargo.toml b/blockdev/Cargo.toml
index 58cfdd492..29c031c09 100644
--- a/blockdev/Cargo.toml
+++ b/blockdev/Cargo.toml
@@ -19,7 +19,7 @@ serde_json = { workspace = true }
 tracing = { workspace = true }
 
 [dev-dependencies]
-indoc = "2.0.5"
+indoc = "=2.0.5"
 
 [lib]
 path = "src/blockdev.rs"
\ No newline at end of file
diff --git a/lib/Cargo.toml b/lib/Cargo.toml
index ffe00a73c..3d170e049 100644
--- a/lib/Cargo.toml
+++ b/lib/Cargo.toml
@@ -41,7 +41,7 @@ linkme = "0.3"
 openssl = { workspace = true }
 regex = "1.10.4"
 rustix = { workspace = true }
-schemars = { version = "0.8.17", features = ["chrono"] }
+schemars = { version = "0.9.0", features = ["chrono"] }
 serde = { workspace = true, features = ["derive"] }
 serde_ignored = "0.1.10"
 serde_json = { workspace = true }
diff --git a/mount/Cargo.toml b/mount/Cargo.toml
index 94265d084..485804dcb 100644
--- a/mount/Cargo.toml
+++ b/mount/Cargo.toml
@@ -19,7 +19,7 @@ serde = { workspace = true, features = ["derive"] }
 tracing = { workspace = true }
 
 [dev-dependencies]
-indoc = "2.0.5"
+indoc = "=2.0.5"
 
 [lib]
 path = "src/mount.rs"
diff --git a/ostree-ext/.github/workflows/rust.yml b/ostree-ext/.github/workflows/rust.yml
index 91c971ea0..f966a5360 100644
--- a/ostree-ext/.github/workflows/rust.yml
+++ b/ostree-ext/.github/workflows/rust.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Code lints
         run: ./ci/lints.sh
       - name: Install deps
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Install deps
         run: ./ci/installdeps.sh
       - name: Cache Dependencies
@@ -67,7 +67,7 @@ jobs:
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Install deps
         run: ./ci/installdeps.sh
       - name: Detect crate MSRV
@@ -91,8 +91,8 @@ jobs:
   cargo-deny:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: EmbarkStudios/cargo-deny-action@v1
+    - uses: actions/checkout@v4
+    - uses: EmbarkStudios/cargo-deny-action@v2
       with:
         log-level: warn
         command: check bans sources licenses
@@ -103,9 +103,9 @@ jobs:
     container: quay.io/fedora/fedora-coreos:testing-devel
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Download ostree-ext-cli
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v4.3.0
         with:
           name: ostree-ext-cli
       - name: Install
@@ -119,9 +119,9 @@ jobs:
     container: quay.io/fedora/fedora-coreos:testing-devel
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Download ostree-ext-cli
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v4.3.0
         with:
           name: ostree-ext-cli
       - name: Install
@@ -133,13 +133,13 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     container:
-      image: quay.io/fedora/fedora-bootc:41
+      image: quay.io/fedora/fedora-bootc:43
       options: "--privileged --pid=host -v /var/tmp:/var/tmp -v /run/dbus:/run/dbus -v /run/systemd:/run/systemd -v /:/run/host"
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
       - name: Download
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v4.3.0
         with:
           name: ostree-ext-cli
       - name: Install
@@ -152,14 +152,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Checkout coreos-layering-examples
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: coreos/coreos-layering-examples
           path: coreos-layering-examples
       - name: Download
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v4.3.0
         with:
           name: ostree-ext-cli
       - name: Integration tests
diff --git a/ostree-ext/Cargo.toml b/ostree-ext/Cargo.toml
index e61eb8b24..d3b20af6b 100644
--- a/ostree-ext/Cargo.toml
+++ b/ostree-ext/Cargo.toml
@@ -57,7 +57,7 @@ xshell = { version = "0.2", optional = true }
 similar-asserts = { version = "1.5.0", optional = true }
 
 [dev-dependencies]
-quickcheck = "1"
+quickcheck = "=1.0.3"
 # https://github.com/rust-lang/cargo/issues/2911
 # https://github.com/rust-lang/rfcs/pull/1956
 ostree-ext = { path = ".", features = ["internal-testing-api"] }
diff --git a/system-reinstall-bootc/Cargo.toml b/system-reinstall-bootc/Cargo.toml
index 163f8c26b..7cfec4a5e 100644
--- a/system-reinstall-bootc/Cargo.toml
+++ b/system-reinstall-bootc/Cargo.toml
@@ -31,7 +31,7 @@ serde_yaml = "0.9.22"
 tempfile = { workspace = true }
 tracing = { workspace = true }
 uzers = "0.12.1"
-which = "7.0.2"
+which = "8.0.0"
 
 [lints]
 workspace = true
diff --git a/tests-integration/Cargo.toml b/tests-integration/Cargo.toml
index 275a7b344..ed4ae0b2d 100644
--- a/tests-integration/Cargo.toml
+++ b/tests-integration/Cargo.toml
@@ -18,8 +18,8 @@ clap = { workspace = true, features = ["derive","cargo"] }
 fn-error-context = { workspace = true }
 indoc = { workspace = true }
 libtest-mimic = "0.8.0"
-oci-spec = "0.7.0"
-rexpect = "0.5"
+oci-spec = "0.8.0"
+rexpect = "0.6"
 rustix = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index d1c451d2a..008cbb343 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -19,7 +19,7 @@ fn-error-context = { workspace = true }
 tar = "0.4"
 toml = "0.8"
 tempfile = { workspace = true }
-mandown = "0.1.3"
+mandown = "1.0.0"
 xshell = { version = "0.2.6" }
 
 [lints]