diff --git a/Cargo.lock b/Cargo.lock
index 31b24c2c3b7..4ec7eaf2246 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -406,9 +406,9 @@ dependencies = [
 
 [[package]]
 name = "bstr"
-version = "1.11.3"
+version = "1.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "531a9155a481e2ee699d4f98f43c0ca4ff8ee1bfd55c31e9e98fb29d2b176fe0"
+checksum = "234113d19d0d7d613b40e86fb654acf958910802bcceab913a4f9e7cda03b1a4"
 dependencies = [
  "memchr",
  "regex-automata",
@@ -421,6 +421,12 @@ version = "3.17.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf"
 
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
 [[package]]
 name = "bytes"
 version = "1.10.1"
@@ -429,9 +435,15 @@ checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
 
 [[package]]
 name = "bytesize"
-version = "1.3.2"
+version = "1.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e93abca9e28e0a1b9877922aacb20576e05d4679ffa78c3d6dc22a26a216659"
+
+[[package]]
+name = "bytesize"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d2c12f985c78475a6b8d629afd0c360260ef34cfef52efccdcfd31972f81c2e"
+checksum = "a3c8f83209414aacf0eeae3cf730b18d6981697fba62f200fcfb92b9f082acba"
 dependencies = [
  "serde",
 ]
@@ -541,9 +553,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.32"
+version = "4.5.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6088f3ae8c3608d19260cd7445411865a485688711b78b5be70d78cd96136f83"
+checksum = "d8aa86934b44c19c50f87cc2790e19f54f7a67aedb64101c2e1a2e5ecfb73944"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -551,9 +563,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.32"
+version = "4.5.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22a7ef7f676155edfb82daa97f99441f3ebf4a58d5e32f295a56259f1b6facc8"
+checksum = "2414dbb2dd0695280da6ea9261e327479e9d37b0630f6b53ba2a11c60c679fd9"
 dependencies = [
  "anstream",
  "anstyle",
@@ -563,9 +575,9 @@ dependencies = [
 
 [[package]]
 name = "clap_complete"
-version = "4.5.46"
+version = "4.5.47"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f5c5508ea23c5366f77e53f5a0070e5a84e51687ec3ef9e0464c86dc8d13ce98"
+checksum = "c06f5378ea264ad4f82bbc826628b5aad714a75abf6ece087e923010eb937fb6"
 dependencies = [
  "clap",
 ]
@@ -995,16 +1007,26 @@ dependencies = [
  "cfg-if",
 ]
 
+[[package]]
+name = "env_filter"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "186e05a59d4c50738528153b83b0b0194d3a29507dfec16eccd4b342903397d0"
+dependencies = [
+ "log",
+]
+
 [[package]]
 name = "env_logger"
-version = "0.10.2"
+version = "0.11.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4cd405aab171cb85d6735e5c8d9db038c17d3ca007a4d2c25f337935c3d90580"
+checksum = "13c863f0904021b108aa8b2f55046443e6b1ebde8fd4a15c399893aae4fa069f"
 dependencies = [
- "humantime",
- "is-terminal",
+ "anstream",
+ "anstyle",
+ "env_filter",
+ "jiff",
  "log",
- "termcolor",
 ]
 
 [[package]]
@@ -1079,7 +1101,14 @@ name = "faster-hex"
 version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a2a2b11eda1d40935b26cf18f6833c526845ae8c41e58d09af6adeb6f0269183"
+
+[[package]]
+name = "faster-hex"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7223ae2d2f179b803433d9c830478527e92b8117eab39460edae7f1614d9fb73"
 dependencies = [
+ "heapless",
  "serde",
 ]
 
@@ -1103,9 +1132,9 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.1.0"
+version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "11faaf5a5236997af9848be0bef4db95824b1d534ebc64d0f0c6cf3e67bd38dc"
+checksum = "7ced92e76e966ca2fd84c8f7aa01a4aea65b0eb6648d72f7c8f3e2764a67fece"
 dependencies = [
  "crc32fast",
  "libz-ng-sys",
@@ -1152,9 +1181,9 @@ dependencies = [
 
 [[package]]
 name = "fs-err"
-version = "2.11.0"
+version = "3.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "88a41f105fe1d5b6b34b2055e3dc59bb79b46b48b2040b9e6c7b4b5de097aa41"
+checksum = "1f89bda4c2a21204059a977ed3bfe746677dfd137b83c339e702b0ac91d482aa"
 dependencies = [
  "autocfg",
 ]
@@ -1331,7 +1360,7 @@ dependencies = [
  "async-net",
  "async-trait",
  "blocking",
- "bytesize",
+ "bytesize 2.0.1",
  "crossbeam-channel",
  "document-features",
  "fs-err",
@@ -1462,7 +1491,7 @@ dependencies = [
  "pretty_assertions",
  "serde",
  "thiserror 2.0.12",
- "winnow 0.7.4",
+ "winnow 0.7.6",
 ]
 
 [[package]]
@@ -1641,7 +1670,7 @@ dependencies = [
  "smallvec",
  "thiserror 2.0.12",
  "unicode-bom",
- "winnow 0.7.4",
+ "winnow 0.7.6",
 ]
 
 [[package]]
@@ -1649,7 +1678,7 @@ name = "gix-config-tests"
 version = "0.0.0"
 dependencies = [
  "bstr",
- "bytesize",
+ "bytesize 2.0.1",
  "cap",
  "gix-config",
  "gix-path 0.10.15",
@@ -1840,7 +1869,7 @@ version = "0.41.1"
 dependencies = [
  "bstr",
  "bytes",
- "bytesize",
+ "bytesize 2.0.1",
  "crc32fast",
  "crossbeam-channel",
  "document-features",
@@ -1951,7 +1980,7 @@ version = "0.14.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f93d7df7366121b5018f947a04d37f034717e113dcf9ccd85c34b58e57a74d5e"
 dependencies = [
- "faster-hex",
+ "faster-hex 0.9.0",
  "thiserror 1.0.69",
 ]
 
@@ -1960,7 +1989,7 @@ name = "gix-hash"
 version = "0.17.0"
 dependencies = [
  "document-features",
- "faster-hex",
+ "faster-hex 0.10.0",
  "gix-features 0.41.1",
  "gix-testtools",
  "serde",
@@ -2067,7 +2096,7 @@ dependencies = [
  "itoa",
  "libc",
  "memmap2",
- "rustix 0.38.44",
+ "rustix 1.0.3",
  "serde",
  "smallvec",
  "thiserror 2.0.12",
@@ -2228,7 +2257,7 @@ dependencies = [
  "smallvec",
  "termtree",
  "thiserror 2.0.12",
- "winnow 0.7.4",
+ "winnow 0.7.6",
 ]
 
 [[package]]
@@ -2317,7 +2346,7 @@ dependencies = [
  "async-std",
  "bstr",
  "document-features",
- "faster-hex",
+ "faster-hex 0.10.0",
  "futures-io",
  "futures-lite",
  "gix-hash 0.17.0",
@@ -2336,7 +2365,7 @@ version = "0.18.3"
 dependencies = [
  "bstr",
  "document-features",
- "faster-hex",
+ "faster-hex 0.10.0",
  "gix-trace 0.1.12",
  "serde",
  "thiserror 2.0.12",
@@ -2367,7 +2396,7 @@ dependencies = [
  "once_cell",
  "serial_test",
  "thiserror 2.0.12",
- "windows 0.58.0",
+ "windows 0.61.1",
  "winreg",
 ]
 
@@ -2396,7 +2425,7 @@ dependencies = [
  "gix-config-value",
  "gix-testtools",
  "parking_lot",
- "rustix 0.38.44",
+ "rustix 1.0.3",
  "serial_test",
  "thiserror 2.0.12",
 ]
@@ -2429,7 +2458,7 @@ dependencies = [
  "maybe-async",
  "serde",
  "thiserror 2.0.12",
- "winnow 0.7.4",
+ "winnow 0.7.6",
 ]
 
 [[package]]
@@ -2498,7 +2527,7 @@ dependencies = [
  "memmap2",
  "serde",
  "thiserror 2.0.12",
- "winnow 0.7.4",
+ "winnow 0.7.6",
 ]
 
 [[package]]
@@ -2605,7 +2634,7 @@ dependencies = [
  "libc",
  "serde",
  "tempfile",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -2734,7 +2763,7 @@ dependencies = [
  "serial_test",
  "tar",
  "tempfile",
- "winnow 0.7.4",
+ "winnow 0.7.6",
  "xz2",
 ]
 
@@ -3050,6 +3079,15 @@ dependencies = [
  "crunchy",
 ]
 
+[[package]]
+name = "hash32"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d60b12902ba28e2730cd37e95b8c9223af2808df9e902d4df49588d1470606"
+dependencies = [
+ "byteorder",
+]
+
 [[package]]
 name = "hashbrown"
 version = "0.14.5"
@@ -3073,11 +3111,21 @@ dependencies = [
 
 [[package]]
 name = "hashlink"
-version = "0.9.1"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ba4ff7128dee98c7dc9794b6a411377e1404dba1c97deb8d1a55297bd25d8af"
+checksum = "7382cf6263419f2d8df38c55d7da83da5c18aef87fc7a7fc1fb1e344edfe14c1"
 dependencies = [
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
+]
+
+[[package]]
+name = "heapless"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bfb9eb618601c89945a70e254898da93b13be0388091d42117462b265bb3fad"
+dependencies = [
+ "hash32",
+ "stable_deref_trait",
 ]
 
 [[package]]
@@ -3153,12 +3201,6 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5c3b1f728c459d27b12448862017b96ad4767b1ec2ec5e6434e99f1577f085b8"
 
-[[package]]
-name = "humantime"
-version = "2.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b112acc8b3adf4b107a8ec20977da0273a8c386765a3ec0229bd500a1443f9f"
-
 [[package]]
 name = "hyper"
 version = "1.6.0"
@@ -3507,9 +3549,9 @@ checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
 
 [[package]]
 name = "jiff"
-version = "0.2.4"
+version = "0.2.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d699bc6dfc879fb1bf9bdff0d4c56f0884fc6f0d0eb0fba397a6d00cd9a6b85e"
+checksum = "1f33145a5cbea837164362c7bd596106eb7c5198f97d1ba6f6ebb3223952e488"
 dependencies = [
  "jiff-static",
  "jiff-tzdb-platform",
@@ -3522,9 +3564,9 @@ dependencies = [
 
 [[package]]
 name = "jiff-static"
-version = "0.2.4"
+version = "0.2.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d16e75759ee0aa64c57a56acbf43916987b20c77373cb7e808979e02b93c9f9"
+checksum = "43ce13c40ec6956157a3635d97a1ee2df323b263f09ea14165131289cb0f5c19"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -3533,15 +3575,15 @@ dependencies = [
 
 [[package]]
 name = "jiff-tzdb"
-version = "0.1.3"
+version = "0.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "962e1dfe9b2d75a84536cf5bf5eaaa4319aa7906c7160134a22883ac316d5f31"
+checksum = "c1283705eb0a21404d2bfd6eef2a7593d240bc42a0bdb39db0ad6fa2ec026524"
 
 [[package]]
 name = "jiff-tzdb-platform"
-version = "0.1.2"
+version = "0.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a63c62e404e7b92979d2792352d885a7f8f83fd1d0d31eea582d77b2ceca697e"
+checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
 dependencies = [
  "jiff-tzdb",
 ]
@@ -3670,9 +3712,9 @@ dependencies = [
 
 [[package]]
 name = "libsqlite3-sys"
-version = "0.30.1"
+version = "0.32.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e99fb7a497b1e3339bc746195567ed8d3e24945ecd636e3619d20b9de9e9149"
+checksum = "fbb8270bb4060bd76c6e96f20c52d80620f1d82a3470885694e41e0f81ef6fe7"
 dependencies = [
  "cc",
  "pkg-config",
@@ -3691,9 +3733,9 @@ dependencies = [
 
 [[package]]
 name = "libz-rs-sys"
-version = "0.4.2"
+version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "902bc563b5d65ad9bba616b490842ef0651066a1a1dc3ce1087113ffcb873c8d"
+checksum = "6489ca9bd760fe9642d7644e827b0c9add07df89857b0416ee15c1cc1a3b8c5a"
 dependencies = [
  "zlib-rs",
 ]
@@ -3973,6 +4015,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "daeaf60f25471d26948a1c2f840e3f7d86f4109e3af4e8e4b5cd70c39690d925"
+dependencies = [
+ "bitflags 2.9.0",
+]
+
 [[package]]
 name = "object"
 version = "0.36.7"
@@ -3984,9 +4035,9 @@ dependencies = [
 
 [[package]]
 name = "once_cell"
-version = "1.21.1"
+version = "1.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d75b0bedcc4fe52caa0e03d9f1151a323e4aa5e2d78ba3580400cd3c9e2bc4bc"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
 
 [[package]]
 name = "oorandom"
@@ -4272,7 +4323,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ee7ce24c980b976607e2d6ae4aae92827994d23fed71659c3ede3f92528b58b"
 dependencies = [
  "async-io",
- "bytesize",
+ "bytesize 1.3.3",
  "crosstermion",
  "futures-core",
  "futures-lite",
@@ -4540,9 +4591,9 @@ dependencies = [
 
 [[package]]
 name = "rusqlite"
-version = "0.32.1"
+version = "0.34.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7753b721174eb8ff87a9a0e799e2d7bc3749323e773db92e0984debb00019d6e"
+checksum = "37e34486da88d8e051c7c0e23c3f15fd806ea8546260aa2fec247e97242ec143"
 dependencies = [
  "bitflags 2.9.0",
  "fallible-iterator",
@@ -4962,9 +5013,9 @@ dependencies = [
 
 [[package]]
 name = "smallvec"
-version = "1.14.0"
+version = "1.15.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7fcf8323ef1faaee30a44a340193b1ac6814fd9b7b4e88e9d4519a3e4abe1cfd"
+checksum = "8917285742e9f3e1683f0a9c4e6b57960b7314d0b08d30d1ecd426713ee2eee9"
 dependencies = [
  "serde",
 ]
@@ -5085,14 +5136,14 @@ dependencies = [
 
 [[package]]
 name = "sysinfo"
-version = "0.31.4"
+version = "0.34.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "355dbe4f8799b304b05e1b0f05fc59b2a18d36645cf169607da45bde2f69a1be"
+checksum = "a4b93974b3d3aeaa036504b8eefd4c039dced109171c1ae973f1dc63b2c7e4b2"
 dependencies = [
- "core-foundation-sys",
  "libc",
  "memchr",
  "ntapi",
+ "objc2-core-foundation",
  "windows 0.57.0",
 ]
 
@@ -5136,9 +5187,9 @@ checksum = "1ac9aa371f599d22256307c24a9d748c041e548cbf599f35d890f9d365361790"
 
 [[package]]
 name = "tempfile"
-version = "3.19.0"
+version = "3.19.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "488960f40a3fd53d72c2a29a58722561dee8afdd175bd88e3db4677d7b2ba600"
+checksum = "7437ac7763b9b123ccf33c338a5cc1bac6f69b45a136c19bdd8a65e3916435bf"
 dependencies = [
  "fastrand",
  "getrandom 0.3.2",
@@ -5158,12 +5209,12 @@ dependencies = [
 
 [[package]]
 name = "terminal_size"
-version = "0.3.0"
+version = "0.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "21bebf2b7c9e0a515f6e0f8c51dc0f8e4696391e6f1ff30379559f8365fb0df7"
+checksum = "45c6481c4829e4cc63825e62c49186a34538b7b2750b73b266581ffb612fb5ed"
 dependencies = [
- "rustix 0.38.44",
- "windows-sys 0.48.0",
+ "rustix 1.0.3",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -5369,7 +5420,7 @@ dependencies = [
  "serde",
  "serde_spanned",
  "toml_datetime",
- "winnow 0.7.4",
+ "winnow 0.7.6",
 ]
 
 [[package]]
@@ -5818,12 +5869,24 @@ dependencies = [
 
 [[package]]
 name = "windows"
-version = "0.58.0"
+version = "0.61.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
+checksum = "c5ee8f3d025738cb02bad7868bbb5f8a6327501e870bf51f1b455b0a2454a419"
 dependencies = [
- "windows-core 0.58.0",
- "windows-targets 0.52.6",
+ "windows-collections",
+ "windows-core 0.61.0",
+ "windows-future",
+ "windows-link",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
+dependencies = [
+ "windows-core 0.61.0",
 ]
 
 [[package]]
@@ -5840,15 +5903,25 @@ dependencies = [
 
 [[package]]
 name = "windows-core"
-version = "0.58.0"
+version = "0.61.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99"
+checksum = "4763c1de310c86d75a878046489e2e5ba02c649d185f21c67d4cf8a56d098980"
 dependencies = [
- "windows-implement 0.58.0",
- "windows-interface 0.58.0",
- "windows-result 0.2.0",
- "windows-strings 0.1.0",
- "windows-targets 0.52.6",
+ "windows-implement 0.60.0",
+ "windows-interface 0.59.1",
+ "windows-link",
+ "windows-result 0.3.2",
+ "windows-strings 0.4.0",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a1d6bbefcb7b60acd19828e1bc965da6fcf18a7e39490c5f8be71e54a19ba32"
+dependencies = [
+ "windows-core 0.61.0",
+ "windows-link",
 ]
 
 [[package]]
@@ -5864,9 +5937,9 @@ dependencies = [
 
 [[package]]
 name = "windows-implement"
-version = "0.58.0"
+version = "0.60.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b"
+checksum = "a47fddd13af08290e67f4acabf4b459f647552718f683a7b415d290ac744a836"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -5886,9 +5959,9 @@ dependencies = [
 
 [[package]]
 name = "windows-interface"
-version = "0.58.0"
+version = "0.59.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515"
+checksum = "bd9211b69f8dcdfa817bfd14bf1c97c9188afa36f4750130fcdf3f400eca9fa8"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -5901,6 +5974,16 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "76840935b766e1b0a05c0066835fb9ec80071d4c09a16f6bd5f7e655e3c14c38"
 
+[[package]]
+name = "windows-numerics"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
+dependencies = [
+ "windows-core 0.61.0",
+ "windows-link",
+]
+
 [[package]]
 name = "windows-registry"
 version = "0.4.0"
@@ -5921,15 +6004,6 @@ dependencies = [
  "windows-targets 0.52.6",
 ]
 
-[[package]]
-name = "windows-result"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
 [[package]]
 name = "windows-result"
 version = "0.3.2"
@@ -5941,19 +6015,18 @@ dependencies = [
 
 [[package]]
 name = "windows-strings"
-version = "0.1.0"
+version = "0.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10"
+checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
 dependencies = [
- "windows-result 0.2.0",
- "windows-targets 0.52.6",
+ "windows-link",
 ]
 
 [[package]]
 name = "windows-strings"
-version = "0.3.1"
+version = "0.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
+checksum = "7a2ba9642430ee452d5a7aa78d72907ebe8cfda358e8cb7918a2050581322f97"
 dependencies = [
  "windows-link",
 ]
@@ -6238,21 +6311,21 @@ dependencies = [
 
 [[package]]
 name = "winnow"
-version = "0.7.4"
+version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e97b544156e9bebe1a0ffbc03484fc1ffe3100cbce3ffb17eac35f7cdd7ab36"
+checksum = "63d3fcd9bba44b03821e7d699eeee959f3126dcc4aa8e4ae18ec617c2a5cea10"
 dependencies = [
  "memchr",
 ]
 
 [[package]]
 name = "winreg"
-version = "0.52.0"
+version = "0.55.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a277a57398d4bfa075df44f501a17cfdf8542d224f0d36095a2adc7aee4ef0a5"
+checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97"
 dependencies = [
  "cfg-if",
- "windows-sys 0.48.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -6416,26 +6489,24 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "2.4.2"
+version = "2.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fabe6324e908f85a1c52063ce7aa26b68dcb7eb6dbc83a2d148403c9bc3eba50"
+checksum = "1dcb24d0152526ae49b9b96c1dcf71850ca1e0b882e4e28ed898a93c41334744"
 dependencies = [
  "arbitrary",
  "crc32fast",
  "crossbeam-utils",
- "displaydoc",
  "flate2",
  "indexmap",
  "memchr",
- "thiserror 2.0.12",
  "zopfli",
 ]
 
 [[package]]
 name = "zlib-rs"
-version = "0.4.2"
+version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b20717f0917c908dc63de2e44e97f1e6b126ca58d0e391cee86d504eb8fbd05"
+checksum = "868b928d7949e09af2f6086dfc1e01936064cc7a819253bce650d4e2a2d63ba8"
 
 [[package]]
 name = "zopfli"
diff --git a/Cargo.toml b/Cargo.toml
index a22f1745259..63ea2709837 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -171,11 +171,11 @@ gitoxide-core = { version = "^0.46.0", path = "gitoxide-core" }
 gix-features = { version = "^0.41.1", path = "gix-features" }
 gix = { version = "^0.71.0", path = "gix", default-features = false }
 
-clap = { version = "4.1.1", features = ["derive", "cargo"] }
-clap_complete = "4.4.3"
+clap = { version = "4.5.35", features = ["derive", "cargo"] }
+clap_complete = "4.5.47"
 prodash = { version = "29.0.1", optional = true }
 is-terminal = { version = "0.4.0", optional = true }
-env_logger = { version = "0.10.0", default-features = false }
+env_logger = { version = "0.11.8", default-features = false }
 crosstermion = { version = "0.14.0", optional = true, default-features = false }
 futures-lite = { version = "2.1.0", optional = true }
 
@@ -185,12 +185,12 @@ tracing-subscriber = { version = "0.3.17", optional = true }
 tracing = { version = "0.1.37", optional = true }
 
 # for config-tree
-terminal_size = "0.3.0"
+terminal_size = "0.4.2"
 
 # Avoid pre-compiled binaries, see https://github.com/serde-rs/serde/issues/2538 and https://github.com/serde-rs/serde/pull/2590
 serde_derive = ">=1.0.185"
 
-once_cell = "1.18.0"
+once_cell = "1.21.3"
 document-features = { version = "0.2.0", optional = true }
 [profile.dev.package]
 insta.opt-level = 3
diff --git a/gitoxide-core/Cargo.toml b/gitoxide-core/Cargo.toml
index 100488eee07..32fe4238f2d 100644
--- a/gitoxide-core/Cargo.toml
+++ b/gitoxide-core/Cargo.toml
@@ -58,8 +58,8 @@ gix-fsck = { version = "^0.10.0", path = "../gix-fsck" }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 anyhow = "1.0.42"
 thiserror = "2.0.0"
-bytesize = "1.0.1"
-tempfile = "3.1.0"
+bytesize = "2.0.1"
+tempfile = "3.19.1"
 
 # for async-client
 async-trait = { version = "0.1.51", optional = true }
@@ -74,16 +74,16 @@ gix-url = { version = "^0.30.0", path = "../gix-url", optional = true }
 jwalk = { version = "0.8.0", optional = true }
 
 # for 'hours'
-fs-err = { version = "2.6.0", optional = true }
+fs-err = { version = "3.1.0", optional = true }
 crossbeam-channel = { version = "0.5.15", optional = true }
-smallvec = { version = "1.10.0", optional = true }
+smallvec = { version = "1.15.0", optional = true }
 
 # for 'query' and 'corpus'
-rusqlite = { version = "0.32.1", optional = true, features = ["bundled"] }
+rusqlite = { version = "0.34.0", optional = true, features = ["bundled"] }
 
 # for 'corpus'
 parking_lot = { version = "0.12.1", optional = true }
-sysinfo = { version = "0.31.2", optional = true, default-features = false, features = ["system"] }
+sysinfo = { version = "0.34.2", optional = true, default-features = false, features = ["system"] }
 serde_json = { version = "1.0.65", optional = true }
 tracing-forest = { version = "0.1.5", features = ["serde"], optional = true }
 tracing-subscriber = { version = "0.3.17", optional = true }
diff --git a/gitoxide-core/src/corpus/db.rs b/gitoxide-core/src/corpus/db.rs
index f1ee3f6ec3e..6b9640f7bcd 100644
--- a/gitoxide-core/src/corpus/db.rs
+++ b/gitoxide-core/src/corpus/db.rs
@@ -118,7 +118,7 @@ pub fn create(path: impl AsRef<std::path::Path>) -> anyhow::Result<rusqlite::Con
     CREATE TABLE if not exists task(
         id integer PRIMARY KEY,
         short_name UNIQUE, -- the unique and permanent identifier for the task
-        description text UNIQUE -- the descriptive name of the task, it can be changed at will 
+        description text UNIQUE -- the descriptive name of the task, it can be changed at will
     )
     "#,
     )?;
@@ -148,8 +148,9 @@ pub fn create(path: impl AsRef<std::path::Path>) -> anyhow::Result<rusqlite::Con
 /// Utilities
 impl Engine {
     pub(crate) fn runner_id_or_insert(&self) -> anyhow::Result<Id> {
-        let sys =
-            sysinfo::System::new_with_specifics(RefreshKind::new().with_cpu(CpuRefreshKind::new().with_frequency()));
+        let sys = sysinfo::System::new_with_specifics(
+            RefreshKind::nothing().with_cpu(CpuRefreshKind::nothing().with_frequency()),
+        );
         let cpu = &sys.cpus()[0];
         let vendor = Some(cpu.vendor_id().to_owned());
         let host = sysinfo::System::host_name();
diff --git a/gitoxide-core/src/pack/verify.rs b/gitoxide-core/src/pack/verify.rs
index 0e6a5d3bdfd..837475aab63 100644
--- a/gitoxide-core/src/pack/verify.rs
+++ b/gitoxide-core/src/pack/verify.rs
@@ -236,10 +236,10 @@ fn print_statistics(out: &mut impl io::Write, stats: &index::traverse::Statistic
     #[rustfmt::skip]
     writeln!(
         out, "\t{:<width$}: {}\n\t{:<width$}: {}\n\t{:<width$}: {}\n\t{:<width$}: {}",
-        "compressed entries size", ByteSize(stats.total_compressed_entries_size),
-        "decompressed entries size", ByteSize(stats.total_decompressed_entries_size),
-        "total object size", ByteSize(stats.total_object_size),
-        "pack size", ByteSize(stats.pack_size),
+        "compressed entries size", ByteSize(stats.total_compressed_entries_size).display().si(),
+        "decompressed entries size", ByteSize(stats.total_decompressed_entries_size).display().si(),
+        "total object size", ByteSize(stats.total_object_size).display().si(),
+        "pack size", ByteSize(stats.pack_size).display().si(),
         width = width
     )?;
     #[rustfmt::skip]
diff --git a/gix-actor/Cargo.toml b/gix-actor/Cargo.toml
index 4a5b13fc2cb..56c0b1e388a 100644
--- a/gix-actor/Cargo.toml
+++ b/gix-actor/Cargo.toml
@@ -23,11 +23,11 @@ gix-date = { version = "^0.9.4", path = "../gix-date" }
 gix-utils = { version = "^0.2.0", path = "../gix-utils" }
 
 thiserror = "2.0.0"
-bstr = { version = "1.3.0", default-features = false, features = [
+bstr = { version = "1.12.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
-winnow = { version = "0.7.0", features = ["simd"] }
+winnow = { version = "0.7.6", features = ["simd"] }
 itoa = "1.0.1"
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",
diff --git a/gix-archive/Cargo.toml b/gix-archive/Cargo.toml
index b69f0310835..822dfe8385d 100644
--- a/gix-archive/Cargo.toml
+++ b/gix-archive/Cargo.toml
@@ -32,14 +32,14 @@ gix-object = { version = "^0.48.0", path = "../gix-object" }
 gix-path = { version = "^0.10.15", path = "../gix-path", optional = true }
 gix-date = { version = "^0.9.4", path = "../gix-date" }
 
-flate2 = { version = "1.0.33", optional = true }
-zip = { version = "2.3.0", optional = true, default-features = false, features = [
+flate2 = { version = "1.1.1", optional = true }
+zip = { version = "2.6.1", optional = true, default-features = false, features = [
     "deflate",
 ] }
-jiff = { version = "0.2.0", default-features = false, features = ["std"] }
+jiff = { version = "0.2.6", default-features = false, features = ["std"] }
 
 thiserror = "2.0.0"
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 tar = { version = "0.4.38", optional = true }
 
diff --git a/gix-attributes/Cargo.toml b/gix-attributes/Cargo.toml
index 3cce82c9d0b..f48c561e51c 100644
--- a/gix-attributes/Cargo.toml
+++ b/gix-attributes/Cargo.toml
@@ -24,8 +24,8 @@ gix-quote = { version = "^0.5.0", path = "../gix-quote" }
 gix-glob = { version = "^0.19.0", path = "../gix-glob" }
 gix-trace = { version = "^0.1.12", path = "../gix-trace" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"] }
-smallvec = "1.10.0"
+bstr = { version = "1.12.0", default-features = false, features = ["std", "unicode"] }
+smallvec = "1.15.0"
 kstring = "2.0.0"
 unicode-bom = { version = "2.0.3" }
 thiserror = "2.0.0"
diff --git a/gix-blame/Cargo.toml b/gix-blame/Cargo.toml
index 42392624009..604b439f216 100644
--- a/gix-blame/Cargo.toml
+++ b/gix-blame/Cargo.toml
@@ -24,7 +24,7 @@ gix-hash = { version = "^0.17.0", path = "../gix-hash" }
 gix-worktree = { version = "^0.40.0", path = "../gix-worktree", default-features = false, features = ["attributes"] }
 gix-traverse = { version = "^0.45.0", path = "../gix-traverse" }
 
-smallvec = "1.10.0"
+smallvec = "1.15.0"
 thiserror = "2.0.0"
 
 [dev-dependencies]
diff --git a/gix-command/Cargo.toml b/gix-command/Cargo.toml
index afb89fb8317..273f11cf13f 100644
--- a/gix-command/Cargo.toml
+++ b/gix-command/Cargo.toml
@@ -19,9 +19,9 @@ gix-trace = { version = "^0.1.12", path = "../gix-trace" }
 gix-path = { version = "^0.10.15", path = "../gix-path" }
 gix-quote = { version = "^0.5.0", path = "../gix-quote" }
 
-bstr = { version = "1.5.0", default-features = false, features = ["std", "unicode"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std", "unicode"] }
 shell-words = "1.0"
 
 [dev-dependencies]
 gix-testtools = { path = "../tests/tools" }
-once_cell = "1.17.1"
+once_cell = "1.21.3"
diff --git a/gix-commitgraph/Cargo.toml b/gix-commitgraph/Cargo.toml
index 548d83dc6d2..4c03402bd11 100644
--- a/gix-commitgraph/Cargo.toml
+++ b/gix-commitgraph/Cargo.toml
@@ -23,7 +23,7 @@ serde = ["dep:serde", "gix-hash/serde", "bstr/serde"]
 gix-hash = { version = "^0.17.0", path = "../gix-hash" }
 gix-chunk = { version = "^0.4.11", path = "../gix-chunk" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 memmap2 = "0.9.0"
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 thiserror = "2.0.0"
diff --git a/gix-config-value/Cargo.toml b/gix-config-value/Cargo.toml
index a864833cdb3..d9cc20755d2 100644
--- a/gix-config-value/Cargo.toml
+++ b/gix-config-value/Cargo.toml
@@ -22,7 +22,7 @@ serde = ["dep:serde", "bstr/serde"]
 gix-path = { version = "^0.10.15", path = "../gix-path" }
 
 thiserror = "2.0.0"
-bstr = { version = "1.0.1", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 bitflags = "2"
 
diff --git a/gix-config/Cargo.toml b/gix-config/Cargo.toml
index 07a20a66fa6..5f177ced615 100644
--- a/gix-config/Cargo.toml
+++ b/gix-config/Cargo.toml
@@ -26,14 +26,14 @@ gix-sec = { version = "^0.10.12", path = "../gix-sec" }
 gix-ref = { version = "^0.51.0", path = "../gix-ref" }
 gix-glob = { version = "^0.19.0", path = "../gix-glob" }
 
-winnow = { version = "0.7.0", features = ["simd"] }
+winnow = { version = "0.7.6", features = ["simd"] }
 memchr = "2"
 thiserror = "2.0.0"
 unicode-bom = { version = "2.0.3" }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
-smallvec = "1.9.0"
-once_cell = "1.14.0"
+smallvec = "1.15.0"
+once_cell = "1.21.3"
 
 document-features = { version = "0.2.0", optional = true }
 
diff --git a/gix-config/tests/Cargo.toml b/gix-config/tests/Cargo.toml
index 59a59cb9e89..c07492bd4b3 100644
--- a/gix-config/tests/Cargo.toml
+++ b/gix-config/tests/Cargo.toml
@@ -27,7 +27,7 @@ gix-ref = { path = "../../gix-ref" }
 gix-path = { path = "../../gix-path" }
 gix-sec = { path = "../../gix-sec" }
 serial_test = { version = "3.1.0", default-features = false }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 
-bytesize = "1.3.0"
+bytesize = "2.0.1"
 cap = { version = "0.1.2", features = ["stats"] }
diff --git a/gix-credentials/Cargo.toml b/gix-credentials/Cargo.toml
index dc43bb99ddc..20f6aefbd72 100644
--- a/gix-credentials/Cargo.toml
+++ b/gix-credentials/Cargo.toml
@@ -29,7 +29,7 @@ gix-trace = { version = "^0.1.12", path = "../gix-trace" }
 
 thiserror = "2.0.0"
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 
 
 
@@ -38,7 +38,7 @@ document-features = { version = "0.2.1", optional = true }
 [dev-dependencies]
 gix-testtools = { path = "../tests/tools" }
 gix-sec = { path = "../gix-sec" }
-once_cell = "1.19.0"
+once_cell = "1.21.3"
 
 [package.metadata.docs.rs]
 all-features = true
diff --git a/gix-date/Cargo.toml b/gix-date/Cargo.toml
index ebf8642903d..22eaa94ff4c 100644
--- a/gix-date/Cargo.toml
+++ b/gix-date/Cargo.toml
@@ -19,10 +19,10 @@ doctest = false
 serde = ["dep:serde", "bstr/serde"]
 
 [dependencies]
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 itoa = "1.0.1"
-jiff = "0.2.0"
+jiff = "0.2.6"
 thiserror = "2.0.0"
 
 document-features = { version = "0.2.0", optional = true }
@@ -30,7 +30,7 @@ document-features = { version = "0.2.0", optional = true }
 [dev-dependencies]
 gix-hash = { path = "../gix-hash" }
 gix-testtools = { path = "../tests/tools" }
-once_cell = "1.12.0"
+once_cell = "1.21.3"
 pretty_assertions = "1.4.1"
 
 [package.metadata.docs.rs]
diff --git a/gix-diff/Cargo.toml b/gix-diff/Cargo.toml
index 7ed05496650..718be7459ba 100644
--- a/gix-diff/Cargo.toml
+++ b/gix-diff/Cargo.toml
@@ -45,7 +45,7 @@ thiserror = "2.0.0"
 imara-diff = { version = "0.1.7", optional = true }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 getrandom = { version = "0.2.8", optional = true, default-features = false, features = ["js"] }
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 document-features = { version = "0.2.0", optional = true }
 
diff --git a/gix-dir/Cargo.toml b/gix-dir/Cargo.toml
index 80a888965fa..a98e1f4c799 100644
--- a/gix-dir/Cargo.toml
+++ b/gix-dir/Cargo.toml
@@ -26,7 +26,7 @@ gix-object = { version = "^0.48.0", path = "../gix-object" }
 gix-ignore = { version = "^0.14.0", path = "../gix-ignore" }
 gix-utils = { version = "^0.2.0", path = "../gix-utils", features = ["bstr"] }
 
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 thiserror = "2.0.0"
 
 [dev-dependencies]
diff --git a/gix-discover/Cargo.toml b/gix-discover/Cargo.toml
index 993cf007c3e..c11ba8b5f57 100644
--- a/gix-discover/Cargo.toml
+++ b/gix-discover/Cargo.toml
@@ -21,7 +21,7 @@ gix-ref = { version = "^0.51.0", path = "../gix-ref" }
 gix-hash = { version = "^0.17.0", path = "../gix-hash" }
 gix-fs = { version = "^0.14.0", path = "../gix-fs" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std", "unicode"] }
 thiserror = "2.0.0"
 
 [target.'cfg(windows)'.dependencies]
@@ -36,4 +36,4 @@ is_ci = "1.1.1"
 defer = "0.2.1"
 
 [target.'cfg(any(unix, windows))'.dev-dependencies]
-tempfile = "3.2.0"
+tempfile = "3.19.1"
diff --git a/gix-features/Cargo.toml b/gix-features/Cargo.toml
index aec82d7e8ea..4c94df39d81 100644
--- a/gix-features/Cargo.toml
+++ b/gix-features/Cargo.toml
@@ -120,16 +120,16 @@ crc32fast = { version = "1.2.1", optional = true }
 
 # progress
 prodash = { version = "29.0.1", optional = true }
-bytesize = { version = "1.0.1", optional = true }
+bytesize = { version = "2.0.1", optional = true }
 
 # pipe
 bytes = { version = "1.0.0", optional = true }
 
 # zlib module
-flate2 = { version = "1.1.0", optional = true, default-features = false }
+flate2 = { version = "1.1.1", optional = true, default-features = false }
 thiserror = { version = "2.0.0", optional = true }
 
-once_cell = { version = "1.13.0", optional = true }
+once_cell = { version = "1.21.3", optional = true }
 
 document-features = { version = "0.2.0", optional = true }
 
@@ -137,7 +137,7 @@ document-features = { version = "0.2.0", optional = true }
 libc = { version = "0.2.119" }
 
 [dev-dependencies]
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 [package.metadata.docs.rs]
 all-features = true
diff --git a/gix-filter/Cargo.toml b/gix-filter/Cargo.toml
index f7b3de607f6..4da9dc273e2 100644
--- a/gix-filter/Cargo.toml
+++ b/gix-filter/Cargo.toml
@@ -26,9 +26,9 @@ gix-packetline-blocking = { version = "^0.18.3", path = "../gix-packetline-block
 gix-attributes = { version = "^0.25.0", path = "../gix-attributes" }
 
 encoding_rs = "0.8.32"
-bstr = { version = "1.5.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 thiserror = "2.0.0"
-smallvec = "1.10.0"
+smallvec = "1.15.0"
 
 
 [dev-dependencies]
diff --git a/gix-fs/Cargo.toml b/gix-fs/Cargo.toml
index 8c195ced6ab..94226708d7a 100644
--- a/gix-fs/Cargo.toml
+++ b/gix-fs/Cargo.toml
@@ -19,7 +19,7 @@ doctest = false
 serde = ["dep:serde"]
 
 [dependencies]
-bstr = "1.5.0"
+bstr = "1.12.0"
 gix-path = { version = "^0.10.15", path = "../gix-path" }
 gix-features = { version = "^0.41.1", path = "../gix-features", features = ["fs-read-dir"] }
 gix-utils = { version = "^0.2.0", path = "../gix-utils" }
@@ -32,4 +32,4 @@ fastrand = { version = "2.1.0", default-features = false, features = ["std"] }
 [dev-dependencies]
 crossbeam-channel = "0.5.15"
 is_ci = "1.1.1"
-tempfile = "3.5.0"
+tempfile = "3.19.1"
diff --git a/gix-glob/Cargo.toml b/gix-glob/Cargo.toml
index 94009462e12..5a9156c7407 100644
--- a/gix-glob/Cargo.toml
+++ b/gix-glob/Cargo.toml
@@ -21,7 +21,7 @@ serde = ["dep:serde", "bstr/serde", "bitflags/serde"]
 [dependencies]
 gix-path = { version = "^0.10.15", path = "../gix-path" }
 gix-features = { version = "^0.41.1", path = "../gix-features" }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 bitflags = "2"
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
diff --git a/gix-hash/Cargo.toml b/gix-hash/Cargo.toml
index 89e06071865..d193c664852 100644
--- a/gix-hash/Cargo.toml
+++ b/gix-hash/Cargo.toml
@@ -23,7 +23,7 @@ serde = ["dep:serde"]
 gix-features = { version = "^0.41.1", path = "../gix-features", features = ["progress"] }
 
 thiserror = "2.0.0"
-faster-hex = { version = "0.9.0" }
+faster-hex = { version = "0.10.0" }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 sha1-checked = { version = "0.10.0", default-features = false }
 
diff --git a/gix-ignore/Cargo.toml b/gix-ignore/Cargo.toml
index 88f737efd2e..41a1de8b7eb 100644
--- a/gix-ignore/Cargo.toml
+++ b/gix-ignore/Cargo.toml
@@ -23,7 +23,7 @@ gix-glob = { version = "^0.19.0", path = "../gix-glob" }
 gix-path = { version = "^0.10.15", path = "../gix-path" }
 gix-trace = { version = "^0.1.12", path = "../gix-trace" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std", "unicode"] }
 unicode-bom = { version = "2.0.3" }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
diff --git a/gix-index/Cargo.toml b/gix-index/Cargo.toml
index e860d4d4dcf..fbe2be3f1b6 100644
--- a/gix-index/Cargo.toml
+++ b/gix-index/Cargo.toml
@@ -39,19 +39,19 @@ fnv = "1.0.7"
 thiserror = "2.0.0"
 memmap2 = "0.9.0"
 filetime = "0.2.15"
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",
 ] }
-smallvec = "1.7.0"
+smallvec = "1.15.0"
 itoa = "1.0.3"
 bitflags = "2"
 
 document-features = { version = "0.2.0", optional = true }
 
 [target.'cfg(not(windows))'.dependencies]
-rustix = { version = "0.38.20", default-features = false, features = [
+rustix = { version = "1.0.3", default-features = false, features = [
     "std",
     "fs",
 ] }
diff --git a/gix-index/tests/Cargo.toml b/gix-index/tests/Cargo.toml
index 85356da7dd2..519ecd41df4 100644
--- a/gix-index/tests/Cargo.toml
+++ b/gix-index/tests/Cargo.toml
@@ -26,4 +26,4 @@ gix-odb = { path = "../../gix-odb" }
 gix-object = { path = "../../gix-object" }
 gix-hash = { path = "../../gix-hash" }
 filetime = "0.2.15"
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
diff --git a/gix-lock/Cargo.toml b/gix-lock/Cargo.toml
index 9f389f44f34..c31fdd7f06a 100644
--- a/gix-lock/Cargo.toml
+++ b/gix-lock/Cargo.toml
@@ -21,4 +21,4 @@ gix-tempfile = { version = "^17.0.0", default-features = false, path = "../gix-t
 thiserror = "2.0.0"
 
 [dev-dependencies]
-tempfile = "3.2.0"
+tempfile = "3.19.1"
diff --git a/gix-mailmap/Cargo.toml b/gix-mailmap/Cargo.toml
index 7bf17adaacd..0725d516495 100644
--- a/gix-mailmap/Cargo.toml
+++ b/gix-mailmap/Cargo.toml
@@ -21,7 +21,7 @@ serde = ["dep:serde", "bstr/serde", "gix-actor/serde"]
 [dependencies]
 gix-actor = { version = "^0.34.0", path = "../gix-actor" }
 gix-date = { version = "^0.9.4", path = "../gix-date" }
-bstr = { version = "1.3.0", default-features = false, features = ["std", "unicode"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std", "unicode"] }
 thiserror = "2.0.0"
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
diff --git a/gix-merge/Cargo.toml b/gix-merge/Cargo.toml
index 82cff992af2..4ec991faaa4 100644
--- a/gix-merge/Cargo.toml
+++ b/gix-merge/Cargo.toml
@@ -36,7 +36,7 @@ gix-index = { version = "^0.39.0", path = "../gix-index" }
 
 thiserror = "2.0.0"
 imara-diff = { version = "0.1.7" }
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
 document-features = { version = "0.2.0", optional = true }
diff --git a/gix-negotiate/Cargo.toml b/gix-negotiate/Cargo.toml
index 1b44731bbc1..4eac876da89 100644
--- a/gix-negotiate/Cargo.toml
+++ b/gix-negotiate/Cargo.toml
@@ -22,7 +22,7 @@ gix-date = { version = "^0.9.4", path = "../gix-date" }
 gix-commitgraph = { version = "^0.27.0", path = "../gix-commitgraph" }
 gix-revwalk = { version = "^0.19.0", path = "../gix-revwalk" }
 thiserror = "2.0.0"
-smallvec = "1.10.0"
+smallvec = "1.15.0"
 bitflags = "2"
 
 [dev-dependencies]
diff --git a/gix-object/Cargo.toml b/gix-object/Cargo.toml
index cdb28c16028..f8b68d5e45f 100644
--- a/gix-object/Cargo.toml
+++ b/gix-object/Cargo.toml
@@ -54,12 +54,12 @@ gix-utils = { version = "^0.2.0", path = "../gix-utils" }
 
 itoa = "1.0.1"
 thiserror = "2.0.0"
-bstr = { version = "1.3.0", default-features = false, features = [
+bstr = { version = "1.12.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
-winnow = { version = "0.7.0", features = ["simd"] }
-smallvec = { version = "1.4.0", features = ["write"] }
+winnow = { version = "0.7.6", features = ["simd"] }
+smallvec = { version = "1.15.0", features = ["write"] }
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",
 ] }
diff --git a/gix-odb/Cargo.toml b/gix-odb/Cargo.toml
index 69e82121e83..5fb72b6f61b 100644
--- a/gix-odb/Cargo.toml
+++ b/gix-odb/Cargo.toml
@@ -31,7 +31,7 @@ gix-pack = { version = "^0.58.0", path = "../gix-pack", default-features = false
 gix-fs = { version = "^0.14.0", path = "../gix-fs" }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
-tempfile = "3.10.0"
+tempfile = "3.19.1"
 thiserror = "2.0.0"
 parking_lot = { version = "0.12.0" }
 arc-swap = "1.5.0"
diff --git a/gix-pack/Cargo.toml b/gix-pack/Cargo.toml
index 9a1a80e64f0..c3573c3e492 100644
--- a/gix-pack/Cargo.toml
+++ b/gix-pack/Cargo.toml
@@ -46,7 +46,7 @@ gix-traverse = { version = "^0.45.0", path = "../gix-traverse", optional = true
 gix-diff = { version = "^0.51.0", path = "../gix-diff", default-features = false, optional = true }
 
 memmap2 = "0.9.0"
-smallvec = "1.3.0"
+smallvec = "1.15.0"
 parking_lot = { version = "0.12.0", default-features = false, optional = true }
 thiserror = "2.0.0"
 
diff --git a/gix-pack/tests/Cargo.toml b/gix-pack/tests/Cargo.toml
index ef9920cdfcd..1738aa50500 100644
--- a/gix-pack/tests/Cargo.toml
+++ b/gix-pack/tests/Cargo.toml
@@ -23,7 +23,7 @@ gix-pack = { path = "..", features = ["generate", "streaming-input"] }
 gix-features = { path = "../../gix-features" }
 gix-testtools = { path = "../../tests/tools" }
 gix-odb = { path = "../../gix-odb" }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 maplit = "1.0.2"
 gix-object = { path = "../../gix-object" }
 gix-traverse = { path = "../../gix-traverse" }
diff --git a/gix-packetline-blocking/Cargo.toml b/gix-packetline-blocking/Cargo.toml
index 70fa873821b..ac0477aa3e8 100644
--- a/gix-packetline-blocking/Cargo.toml
+++ b/gix-packetline-blocking/Cargo.toml
@@ -33,8 +33,8 @@ gix-trace = { version = "^0.1.12", path = "../gix-trace" }
 
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["std", "derive"] }
 thiserror = "2.0.0"
-faster-hex = { version = "0.9.0" }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+faster-hex = { version = "0.10.0" }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 
 document-features = { version = "0.2.0", optional = true }
 
diff --git a/gix-packetline/Cargo.toml b/gix-packetline/Cargo.toml
index 35929a31b99..f684dd388b6 100644
--- a/gix-packetline/Cargo.toml
+++ b/gix-packetline/Cargo.toml
@@ -46,8 +46,8 @@ gix-trace = { version = "^0.1.12", path = "../gix-trace" }
 
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["std", "derive"] }
 thiserror = "2.0.0"
-faster-hex = { version = "0.9.0" }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+faster-hex = { version = "0.10.0" }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 # async support
 futures-io = { version = "0.3.16", optional = true }
 futures-lite = { version = "2.1.0", optional = true }
diff --git a/gix-path/Cargo.toml b/gix-path/Cargo.toml
index 5cdf8c74b8d..ee4be88d33f 100644
--- a/gix-path/Cargo.toml
+++ b/gix-path/Cargo.toml
@@ -16,9 +16,9 @@ doctest = false
 
 [dependencies]
 gix-trace = { version = "^0.1.12", path = "../gix-trace" }
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 thiserror = "2.0.0"
-once_cell = "1.17.1"
+once_cell = "1.21.3"
 
 [target.'cfg(not(target_family = "wasm"))'.dependencies]
 home = "0.5.5"
@@ -29,5 +29,5 @@ serial_test = { version = "3.1.0", default-features = false }
 
 [target.'cfg(windows)'.dev-dependencies]
 known-folders = "1.1.0"
-windows = { version = "0.58.0", features = ["Win32_System_Threading"] }
-winreg = "0.52.0"
+windows = { version = "0.61.1", features = ["Win32_System_Threading"] }
+winreg = "0.55.0"
diff --git a/gix-path/src/env/git/tests.rs b/gix-path/src/env/git/tests.rs
index 0964be27d41..99f3377fd3a 100644
--- a/gix-path/src/env/git/tests.rs
+++ b/gix-path/src/env/git/tests.rs
@@ -7,8 +7,7 @@ mod locations {
     use std::path::{Path, PathBuf};
 
     use known_folders::{get_known_folder_path, KnownFolder};
-    use windows::core::Result as WindowsResult;
-    use windows::Win32::Foundation::BOOL;
+    use windows::core::{Result as WindowsResult, BOOL};
     use windows::Win32::System::Threading::{GetCurrentProcess, IsWow64Process};
     use winreg::enums::{HKEY_LOCAL_MACHINE, KEY_QUERY_VALUE};
     use winreg::RegKey;
diff --git a/gix-pathspec/Cargo.toml b/gix-pathspec/Cargo.toml
index 07021be519b..01c4b49fab9 100644
--- a/gix-pathspec/Cargo.toml
+++ b/gix-pathspec/Cargo.toml
@@ -20,11 +20,11 @@ gix-path = { version = "^0.10.15", path = "../gix-path" }
 gix-attributes = { version = "^0.25.0", path = "../gix-attributes" }
 gix-config-value = { version = "^0.14.12", path = "../gix-config-value" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 bitflags = "2"
 thiserror = "2.0.0"
 
 [dev-dependencies]
 gix-testtools = { path = "../tests/tools" }
-once_cell = "1.12.0"
+once_cell = "1.21.3"
 serial_test = "3.1.1"
diff --git a/gix-prompt/Cargo.toml b/gix-prompt/Cargo.toml
index a131e69adf8..b19be03bd46 100644
--- a/gix-prompt/Cargo.toml
+++ b/gix-prompt/Cargo.toml
@@ -21,7 +21,7 @@ gix-config-value = { version = "^0.14.12", path = "../gix-config-value" }
 thiserror = "2.0.0"
 
 [target.'cfg(unix)'.dependencies]
-rustix = { version = "0.38.4", features = ["termios"] }
+rustix = { version = "1.0.3", features = ["termios"] }
 parking_lot = "0.12.1"
 
 [dev-dependencies]
diff --git a/gix-protocol/Cargo.toml b/gix-protocol/Cargo.toml
index b820147a0e0..5d52c67636a 100644
--- a/gix-protocol/Cargo.toml
+++ b/gix-protocol/Cargo.toml
@@ -90,11 +90,11 @@ thiserror = "2.0.0"
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",
 ] }
-bstr = { version = "1.3.0", default-features = false, features = [
+bstr = { version = "1.12.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
-winnow = { version = "0.7.0", features = ["simd"] }
+winnow = { version = "0.7.6", features = ["simd"] }
 
 # for async-client
 async-trait = { version = "0.1.51", optional = true }
diff --git a/gix-quote/Cargo.toml b/gix-quote/Cargo.toml
index a472598f167..cdccfd3ca34 100644
--- a/gix-quote/Cargo.toml
+++ b/gix-quote/Cargo.toml
@@ -17,5 +17,5 @@ doctest = false
 [dependencies]
 gix-utils = { version = "^0.2.0", path = "../gix-utils" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 thiserror = "2.0.0"
diff --git a/gix-ref/Cargo.toml b/gix-ref/Cargo.toml
index e76a8e2a480..c368479a399 100644
--- a/gix-ref/Cargo.toml
+++ b/gix-ref/Cargo.toml
@@ -33,7 +33,7 @@ gix-lock = { version = "^17.0.0", path = "../gix-lock" }
 gix-tempfile = { version = "^17.0.0", default-features = false, path = "../gix-tempfile" }
 
 thiserror = "2.0.0"
-winnow = { version = "0.7.0", features = ["simd"] }
+winnow = { version = "0.7.6", features = ["simd"] }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
 
 # packed refs
diff --git a/gix-refspec/Cargo.toml b/gix-refspec/Cargo.toml
index 4dd4c75178a..b308faa9e00 100644
--- a/gix-refspec/Cargo.toml
+++ b/gix-refspec/Cargo.toml
@@ -19,9 +19,9 @@ gix-revision = { version = "^0.33.0", path = "../gix-revision", default-features
 gix-validate = { version = "^0.9.4", path = "../gix-validate" }
 gix-hash = { version = "^0.17.0", path = "../gix-hash" }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 thiserror = "2.0.0"
-smallvec = "1.9.0"
+smallvec = "1.15.0"
 
 [dev-dependencies]
 gix-testtools = { path = "../tests/tools" }
diff --git a/gix-revision/Cargo.toml b/gix-revision/Cargo.toml
index 8265d2c77e8..93913299b8d 100644
--- a/gix-revision/Cargo.toml
+++ b/gix-revision/Cargo.toml
@@ -35,7 +35,7 @@ gix-revwalk = { version = "^0.19.0", path = "../gix-revwalk" }
 gix-commitgraph = { version = "^0.27.0", path = "../gix-commitgraph" }
 gix-trace = { version = "^0.1.12", path = "../gix-trace", optional = true }
 
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 bitflags = { version = "2", optional = true }
 thiserror = "2.0.0"
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
diff --git a/gix-revwalk/Cargo.toml b/gix-revwalk/Cargo.toml
index d6692eb150d..5168935ccbd 100644
--- a/gix-revwalk/Cargo.toml
+++ b/gix-revwalk/Cargo.toml
@@ -22,7 +22,7 @@ gix-hashtable = { version = "^0.8.0", path = "../gix-hashtable" }
 gix-commitgraph = { version = "^0.27.0", path = "../gix-commitgraph" }
 
 thiserror = "2.0.0"
-smallvec = "1.10.0"
+smallvec = "1.15.0"
 
 [dev-dependencies]
 gix-testtools = { path = "../tests/tools" }
diff --git a/gix-sec/Cargo.toml b/gix-sec/Cargo.toml
index f0b5b28affd..684a4653ca6 100644
--- a/gix-sec/Cargo.toml
+++ b/gix-sec/Cargo.toml
@@ -32,7 +32,7 @@ libc = "0.2.123"
 
 [target.'cfg(windows)'.dependencies]
 gix-path = { version = "^0.10.15", path = "../gix-path" }
-windows-sys = { version = "0.52.0", features = [
+windows-sys = { version = "0.59.0", features = [
     "Win32_Foundation",
     "Win32_Security_Authorization",
     "Win32_Storage_FileSystem",
@@ -41,7 +41,7 @@ windows-sys = { version = "0.52.0", features = [
 ] }
 
 [dev-dependencies]
-tempfile = "3.3.0"
+tempfile = "3.19.1"
 
 [package.metadata.docs.rs]
 all-features = true
diff --git a/gix-sec/src/identity.rs b/gix-sec/src/identity.rs
index 9fcdc2cb84d..06cecae2924 100644
--- a/gix-sec/src/identity.rs
+++ b/gix-sec/src/identity.rs
@@ -200,7 +200,7 @@ mod impl_ {
             }
 
             let mut is_member = 0;
-            if CheckTokenMembership(0, token_owner, &mut is_member) == 0 {
+            if CheckTokenMembership(std::ptr::null_mut(), token_owner, &mut is_member) == 0 {
                 error!("Couldn't check if user is an administrator");
             }
 
diff --git a/gix-shallow/Cargo.toml b/gix-shallow/Cargo.toml
index b0a040b048c..d348e1e8dde 100644
--- a/gix-shallow/Cargo.toml
+++ b/gix-shallow/Cargo.toml
@@ -24,5 +24,5 @@ gix-hash = { version = "^0.17.0", path = "../gix-hash" }
 gix-lock = { version = "^17.0.0", path = "../gix-lock" }
 
 thiserror = "2.0.0"
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["std", "derive"] }
diff --git a/gix-status/Cargo.toml b/gix-status/Cargo.toml
index 1d61ae95d09..d22d4006d06 100644
--- a/gix-status/Cargo.toml
+++ b/gix-status/Cargo.toml
@@ -35,7 +35,7 @@ gix-diff = { version = "^0.51.0", path = "../gix-diff", default-features = false
 
 thiserror = "2.0.0"
 filetime = "0.2.15"
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 document-features = { version = "0.2.0", optional = true }
 
diff --git a/gix-status/tests/Cargo.toml b/gix-status/tests/Cargo.toml
index 86142741025..c7e06202f6c 100644
--- a/gix-status/tests/Cargo.toml
+++ b/gix-status/tests/Cargo.toml
@@ -34,5 +34,5 @@ gix-features = { path = "../../gix-features", features = ["parallel"] }
 gix-pathspec = { path = "../../gix-pathspec" }
 gix-worktree = { path = "../../gix-worktree" }
 filetime = "0.2.15"
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 pretty_assertions = "1.4.0"
diff --git a/gix-submodule/Cargo.toml b/gix-submodule/Cargo.toml
index 3653977c44d..d11304e345d 100644
--- a/gix-submodule/Cargo.toml
+++ b/gix-submodule/Cargo.toml
@@ -21,7 +21,7 @@ gix-config = { version = "^0.44.0", path = "../gix-config" }
 gix-path = { version = "^0.10.15", path = "../gix-path" }
 gix-url = { version = "^0.30.0", path = "../gix-url" }
 
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 thiserror = "2.0.0"
 
 [dev-dependencies]
diff --git a/gix-tempfile/Cargo.toml b/gix-tempfile/Cargo.toml
index 40dc1da5d67..25a4c7940c5 100644
--- a/gix-tempfile/Cargo.toml
+++ b/gix-tempfile/Cargo.toml
@@ -34,8 +34,8 @@ test = true
 gix-fs = { version = "^0.14.0", path = "../gix-fs" }
 parking_lot = "0.12.1"
 dashmap = { version = "6.0.1", optional = true }
-once_cell = { version = "1.8.0", default-features = false, features = ["race", "std"] }
-tempfile = "3.10.0"
+once_cell = { version = "1.21.3", default-features = false, features = ["race", "std"] }
+tempfile = "3.19.1"
 
 signal-hook = { version = "0.3.9", default-features = false, optional = true }
 signal-hook-registry = { version = "1.4.0", optional = true }
diff --git a/gix-transport/Cargo.toml b/gix-transport/Cargo.toml
index 0851ea0fffe..7a21d63734f 100644
--- a/gix-transport/Cargo.toml
+++ b/gix-transport/Cargo.toml
@@ -93,7 +93,7 @@ serde = { version = "1.0.114", optional = true, default-features = false, featur
     "std",
     "derive",
 ] }
-bstr = { version = "1.3.0", default-features = false, features = [
+bstr = { version = "1.12.0", default-features = false, features = [
     "std",
     "unicode",
 ] }
diff --git a/gix-traverse/Cargo.toml b/gix-traverse/Cargo.toml
index df7efa2f045..fbdca6f9a25 100644
--- a/gix-traverse/Cargo.toml
+++ b/gix-traverse/Cargo.toml
@@ -22,6 +22,6 @@ gix-date = { version = "^0.9.4", path = "../gix-date" }
 gix-hashtable = { version = "^0.8.0", path = "../gix-hashtable" }
 gix-revwalk = { version = "^0.19.0", path = "../gix-revwalk" }
 gix-commitgraph = { version = "^0.27.0", path = "../gix-commitgraph" }
-smallvec = "1.10.0"
+smallvec = "1.15.0"
 thiserror = "2.0.0"
 bitflags = "2"
diff --git a/gix-url/Cargo.toml b/gix-url/Cargo.toml
index 6bb03e9690b..5abf17feea6 100644
--- a/gix-url/Cargo.toml
+++ b/gix-url/Cargo.toml
@@ -25,7 +25,7 @@ gix-path = { version = "^0.10.15", path = "../gix-path" }
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["std", "derive"] }
 thiserror = "2.0.0"
 url = "2.5.2"
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 percent-encoding = "2.3.1"
 
 document-features = { version = "0.2.0", optional = true }
diff --git a/gix-utils/Cargo.toml b/gix-utils/Cargo.toml
index b58722a0d51..a6acefe3931 100644
--- a/gix-utils/Cargo.toml
+++ b/gix-utils/Cargo.toml
@@ -19,5 +19,5 @@ bstr = ["dep:bstr"]
 
 [dependencies]
 fastrand = "2.0.0"
-bstr = { version = "1.5.0", default-features = false, features = ["std"], optional = true }
+bstr = { version = "1.12.0", default-features = false, features = ["std"], optional = true }
 unicode-normalization = { version = "0.1.19", default-features = false }
diff --git a/gix-validate/Cargo.toml b/gix-validate/Cargo.toml
index 6d70ded8903..1128fdfcf8b 100644
--- a/gix-validate/Cargo.toml
+++ b/gix-validate/Cargo.toml
@@ -17,7 +17,7 @@ test = true
 
 [dependencies]
 thiserror = "2.0.0"
-bstr = { version = "1.3.0", default-features = false, features = ["std"] }
+bstr = { version = "1.12.0", default-features = false, features = ["std"] }
 
 [dev-dependencies]
 gix-testtools = { path = "../tests/tools" }
diff --git a/gix-worktree-state/Cargo.toml b/gix-worktree-state/Cargo.toml
index ca8acedae47..154f3afef9d 100644
--- a/gix-worktree-state/Cargo.toml
+++ b/gix-worktree-state/Cargo.toml
@@ -28,4 +28,4 @@ gix-filter = { version = "^0.18.0", path = "../gix-filter" }
 
 io-close = "0.3.7"
 thiserror = "2.0.0"
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
diff --git a/gix-worktree-state/tests/Cargo.toml b/gix-worktree-state/tests/Cargo.toml
index cbf979e2b20..7f41c26467b 100644
--- a/gix-worktree-state/tests/Cargo.toml
+++ b/gix-worktree-state/tests/Cargo.toml
@@ -30,6 +30,6 @@ gix-features = { path = "../../gix-features" }
 gix-testtools = { path = "../../tests/tools" }
 gix-odb = { path = "../../gix-odb" }
 symlink = "0.1.0"
-once_cell = "1.18.0"
+once_cell = "1.21.3"
 
 walkdir = "2.3.2"
diff --git a/gix-worktree/Cargo.toml b/gix-worktree/Cargo.toml
index 9e9ae3a62f9..dbdeb333d28 100644
--- a/gix-worktree/Cargo.toml
+++ b/gix-worktree/Cargo.toml
@@ -35,7 +35,7 @@ gix-ignore = { version = "^0.14.0", path = "../gix-ignore" }
 gix-features = { version = "^0.41.1", path = "../gix-features" }
 
 serde = { version = "1.0.114", optional = true, default-features = false, features = ["derive"] }
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 document-features = { version = "0.2.0", optional = true }
 
diff --git a/gix-worktree/tests/Cargo.toml b/gix-worktree/tests/Cargo.toml
index 7ff00c91c49..2028cc98d8c 100644
--- a/gix-worktree/tests/Cargo.toml
+++ b/gix-worktree/tests/Cargo.toml
@@ -31,7 +31,7 @@ gix-ignore = { path = "../../gix-ignore" }
 gix-features = { path = "../../gix-features" }
 gix-discover = { path = "../../gix-discover" }
 
-bstr = { version = "1.3.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 
 gix-testtools = { path = "../../tests/tools" }
 gix-odb = { path = "../../gix-odb" }
diff --git a/gix/Cargo.toml b/gix/Cargo.toml
index ee8a57b048e..f85a161ade7 100644
--- a/gix/Cargo.toml
+++ b/gix/Cargo.toml
@@ -377,13 +377,13 @@ gix-transport = { version = "^0.46.0", path = "../gix-transport", optional = tru
 
 # Just to get the progress-tree feature
 prodash = { version = "29.0.1", optional = true, features = ["progress-tree"] }
-once_cell = "1.14.0"
+once_cell = "1.21.3"
 signal-hook = { version = "0.3.9", default-features = false, optional = true }
 thiserror = "2.0.0"
 serde = { version = "1.0.114", optional = true, default-features = false, features = [
     "derive",
 ] }
-smallvec = "1.9.0"
+smallvec = "1.15.0"
 async-std = { version = "1.12.0", optional = true }
 
 ## For use in rev-parse, which provides searching commits by running a regex on their message.
diff --git a/tests/it/Cargo.toml b/tests/it/Cargo.toml
index 892e3b748ba..42c86a18836 100644
--- a/tests/it/Cargo.toml
+++ b/tests/it/Cargo.toml
@@ -16,7 +16,7 @@ path = "src/main.rs"
 
 [dependencies]
 anyhow = "1.0.86"
-clap = { version = "4.5.16", features = ["derive"] }
+clap = { version = "4.5.35", features = ["derive"] }
 gix = { version = "^0.71.0", path = "../../gix", default-features = false, features = ["attributes", "revision"] }
-once_cell = "1.20.2"
+once_cell = "1.21.3"
 regex = { version = "1.11.1", default-features = false, features = ["std"] }
diff --git a/tests/snapshots/plumbing/no-repo/pack/verify/index-with-statistics-success b/tests/snapshots/plumbing/no-repo/pack/verify/index-with-statistics-success
index 420f9ce588d..fad42f18d9c 100644
--- a/tests/snapshots/plumbing/no-repo/pack/verify/index-with-statistics-success
+++ b/tests/snapshots/plumbing/no-repo/pack/verify/index-with-statistics-success
@@ -15,10 +15,10 @@ averages
 	decompressed object size [B]:  9621;
 
 compression
-	compressed entries size       : 51.8 KB
-	decompressed entries size     : 103.7 KB
-	total object size             : 288.7 KB
-	pack size                     : 51.9 KB
+	compressed entries size       : 51.8 kB
+	decompressed entries size     : 103.7 kB
+	total object size             : 288.7 kB
+	pack size                     : 51.9 kB
 
 	num trees                     : 15
 	num blobs                     : 5
diff --git a/tests/snapshots/plumbing/no-repo/pack/verify/multi-index/index-with-statistics-success b/tests/snapshots/plumbing/no-repo/pack/verify/multi-index/index-with-statistics-success
index d393afe0c84..e099657c2fe 100644
--- a/tests/snapshots/plumbing/no-repo/pack/verify/multi-index/index-with-statistics-success
+++ b/tests/snapshots/plumbing/no-repo/pack/verify/multi-index/index-with-statistics-success
@@ -16,10 +16,10 @@ averages
 	decompressed object size [B]:  9621;
 
 compression
-	compressed entries size       : 51.8 KB
-	decompressed entries size     : 103.7 KB
-	total object size             : 288.7 KB
-	pack size                     : 51.9 KB
+	compressed entries size       : 51.8 kB
+	decompressed entries size     : 103.7 kB
+	total object size             : 288.7 kB
+	pack size                     : 51.9 kB
 
 	num trees                     : 15
 	num blobs                     : 5
@@ -43,10 +43,10 @@ averages
 	decompressed object size [B]:  2093;
 
 compression
-	compressed entries size       : 48.9 KB
-	decompressed entries size     : 132.8 KB
-	total object size             : 140.2 KB
-	pack size                     : 49.1 KB
+	compressed entries size       : 48.9 kB
+	decompressed entries size     : 132.8 kB
+	total object size             : 140.2 kB
+	pack size                     : 49.1 kB
 
 	num trees                     : 2
 	num blobs                     : 63
diff --git a/tests/tools/Cargo.toml b/tests/tools/Cargo.toml
index 43435b11b23..0938eedf57d 100644
--- a/tests/tools/Cargo.toml
+++ b/tests/tools/Cargo.toml
@@ -31,12 +31,12 @@ gix-worktree = "0.34.0"
 gix-fs = "0.11"
 gix-tempfile = { version = "^14.0.0", default-features = false, features = ["signals"] }
 
-winnow = { version = "0.7.0", features = ["simd"] }
+winnow = { version = "0.7.6", features = ["simd"] }
 fastrand = "2.0.0"
-bstr = { version = "1.5.0", default-features = false }
+bstr = { version = "1.12.0", default-features = false }
 crc = "3.0.0"
-once_cell = "1.8.0"
-tempfile = "3.2.0"
+once_cell = "1.21.3"
+tempfile = "3.19.1"
 fs_extra = "1.2.0"
 parking_lot = { version = "0.12.0" }
 is_ci = "1.1.1"