diff --git a/Cargo.lock b/Cargo.lock
index c858cd8d..f6353a6d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2187,7 +2187,7 @@ dependencies = [
  "regex",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2 0.11.0",
  "sqlx",
  "tar",
  "tempfile",
@@ -3456,21 +3456,6 @@ dependencies = [
  "tokio",
 ]
 
-[[package]]
-name = "toml"
-version = "0.9.12+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
-dependencies = [
- "indexmap",
- "serde_core",
- "serde_spanned",
- "toml_datetime 0.7.5+spec-1.1.0",
- "toml_parser",
- "toml_writer",
- "winnow 0.7.15",
-]
-
 [[package]]
 name = "toml"
 version = "1.1.2+spec-1.1.0"
@@ -3480,19 +3465,10 @@ dependencies = [
  "indexmap",
  "serde_core",
  "serde_spanned",
- "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_datetime",
  "toml_parser",
  "toml_writer",
- "winnow 1.0.3",
-]
-
-[[package]]
-name = "toml_datetime"
-version = "0.7.5+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
-dependencies = [
- "serde_core",
+ "winnow",
 ]
 
 [[package]]
@@ -3511,9 +3487,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d2153edc6955a6c354fad8f5efd38b6a8769bdccf9fe50f8e1329f81b0baa5d7"
 dependencies = [
  "indexmap",
- "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_datetime",
  "toml_parser",
- "winnow 1.0.3",
+ "winnow",
 ]
 
 [[package]]
@@ -3522,7 +3498,7 @@ version = "1.1.2+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
 dependencies = [
- "winnow 1.0.3",
+ "winnow",
 ]
 
 [[package]]
@@ -4088,7 +4064,7 @@ dependencies = [
  "serde_json",
  "serde_yaml",
  "thiserror",
- "toml 1.1.2+spec-1.1.0",
+ "toml",
  "url",
 ]
 
@@ -4153,7 +4129,7 @@ dependencies = [
  "tar",
  "tempfile",
  "thiserror",
- "toml 1.1.2+spec-1.1.0",
+ "toml",
  "url",
  "wasmer-config",
  "wasmer-types",
@@ -4269,7 +4245,7 @@ dependencies = [
  "thiserror",
  "tokio",
  "tokio-stream",
- "toml 1.1.2+spec-1.1.0",
+ "toml",
  "tracing",
  "url",
  "urlencoding",
@@ -4334,6 +4310,16 @@ name = "wasmparser"
 version = "0.250.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "071d99cdfb8111603ed05500506c3298a940b58d609dd0259d3981785dd33556"
+dependencies = [
+ "bitflags 2.12.1",
+ "indexmap",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.251.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "437970b35b1a85cfde9c74b2398352d8d653f3bd8e3a3db0c063ea8f5b4b36ff"
 dependencies = [
  "bitflags 2.12.1",
  "hashbrown 0.17.1",
@@ -4590,12 +4576,6 @@ version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
-[[package]]
-name = "winnow"
-version = "0.7.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
-
 [[package]]
 name = "winnow"
 version = "1.0.3"
@@ -4726,17 +4706,17 @@ dependencies = [
  "pglite-oxide",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2 0.11.0",
  "sqlx",
  "tar",
  "tokio",
  "tokio-postgres",
- "toml 0.9.12+spec-1.1.0",
+ "toml",
  "walkdir",
  "wasmer",
  "wasmer-types",
  "wasmer-wasix",
- "wasmparser 0.250.0",
+ "wasmparser 0.251.0",
  "webc",
  "zstd",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 8a3428db..3276e15c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -73,7 +73,7 @@ serde_json = "1"
 regex = "1"
 tempfile = "3"
 hex = "0.4"
-sha2 = "0.10"
+sha2 = "0.11"
 dunce = "1"
 filetime = "0.2"
 pglite-oxide-assets = { version = "=0.5.1", path = "crates/assets", optional = true }
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index e6afb8de..7b581508 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -21,7 +21,7 @@ futures-util = "0.3"
 pglite-oxide = { path = "..", features = ["extensions"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-sha2 = "0.10"
+sha2 = "0.11"
 sqlx = { version = "0.8", default-features = false, features = [
   "postgres",
   "runtime-tokio",
@@ -29,7 +29,7 @@ sqlx = { version = "0.8", default-features = false, features = [
 tar = "0.4"
 tokio = { version = "1", features = ["rt-multi-thread"] }
 tokio-postgres = "0.7"
-toml = "0.9"
+toml = "1.1"
 walkdir = "2"
 wasmer = { version = "=7.2.0-alpha.3", default-features = false, features = [
   "sys",
@@ -41,6 +41,6 @@ wasmer-wasix = { version = "=0.702.0-alpha.3", default-features = false, feature
   "sys-thread",
   "time",
 ], optional = true }
-wasmparser = "0.250.0"
+wasmparser = "0.251.0"
 webc = { version = "=12.0.0", optional = true }
 zstd = "0.13"