diff --git a/Cargo.toml b/Cargo.toml
index fbaafe73..8a091438 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -28,17 +28,17 @@ http-interop = ["dep:http"]
 
 [dependencies]
 base64 = "0.21"
-cookie = { version = "0.16", default-features = false, optional = true}
+cookie = { version = "0.17", default-features = false, optional = true}
 once_cell = "1"
 url = "2"
 socks = { version = "0.3", optional = true }
 serde = { version = "1", optional = true }
 serde_json = { version = ">=1.0.97", optional = true }
 encoding_rs = { version = "0.8", optional = true }
-cookie_store = { version = "0.19", optional = true, default-features = false, features = ["preserve_order"] }
+cookie_store = { version = "0.20", optional = true, default-features = false, features = ["preserve_order"] }
 log = "0.4"
-webpki = { package = "rustls-webpki", version = "0.100", optional = true }
-webpki-roots = { version = "0.23", optional = true }
+webpki = { package = "rustls-webpki", version = "0.101", optional = true }
+webpki-roots = { version = "0.25", optional = true }
 rustls = { version = "0.21", optional = true }
 rustls-native-certs = { version = "0.6", optional = true }
 native-tls = { version = "0.2", optional = true }
diff --git a/examples/tls_config.rs b/examples/tls_config.rs
index a38b4476..7746f6d4 100644
--- a/examples/tls_config.rs
+++ b/examples/tls_config.rs
@@ -21,7 +21,7 @@ pub fn main() {
     // }
 
     // This adds webpki_roots certs.
-    root_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
+    root_store.add_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.iter().map(|ta| {
         rustls::OwnedTrustAnchor::from_subject_spki_name_constraints(
             ta.subject,
             ta.spki,
diff --git a/src/agent.rs b/src/agent.rs
index 1a76dcfc..cd080e16 100644
--- a/src/agent.rs
+++ b/src/agent.rs
@@ -572,7 +572,7 @@ impl AgentBuilder {
     /// # ureq::is_test(true);
     /// use std::sync::Arc;
     /// let mut root_store = rustls::RootCertStore::empty();
-    /// root_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
+    /// root_store.add_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.iter().map(|ta| {
     ///     rustls::OwnedTrustAnchor::from_subject_spki_name_constraints(
     ///         ta.subject,
     ///         ta.spki,
diff --git a/src/rtls.rs b/src/rtls.rs
index 2f149bbb..f18adee6 100644
--- a/src/rtls.rs
+++ b/src/rtls.rs
@@ -99,7 +99,7 @@ fn root_certs() -> rustls::RootCertStore {
 #[cfg(not(feature = "native-certs"))]
 fn root_certs() -> rustls::RootCertStore {
     let mut root_store = rustls::RootCertStore::empty();
-    root_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
+    root_store.add_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.iter().map(|ta| {
         rustls::OwnedTrustAnchor::from_subject_spki_name_constraints(
             ta.subject,
             ta.spki,
diff --git a/tests/https-agent.rs b/tests/https-agent.rs
index b5274cdd..6722bc54 100644
--- a/tests/https-agent.rs
+++ b/tests/https-agent.rs
@@ -104,7 +104,7 @@ m0Wqhhi8/24Sy934t5Txgkfoltg8ahkx934WjP6WWRnSAu+cf+vW
         .clone();
 
     let mut root_store = rustls::RootCertStore::empty();
-    root_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
+    root_store.add_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.iter().map(|ta| {
         rustls::OwnedTrustAnchor::from_subject_spki_name_constraints(
             ta.subject,
             ta.spki,
@@ -157,7 +157,7 @@ m0Wqhhi8/24Sy934t5Txgkfoltg8ahkx934WjP6WWRnSAu+cf+vW
 #[cfg(any(feature = "tls", feature = "tls-native"))]
 fn ipv6_addr_in_dns_name() {
     let mut root_store = rustls::RootCertStore::empty();
-    root_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
+    root_store.add_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.iter().map(|ta| {
         rustls::OwnedTrustAnchor::from_subject_spki_name_constraints(
             ta.subject,
             ta.spki,