diff --git a/Cargo.lock b/Cargo.lock
index 847df14f..d5701ce6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -261,9 +261,9 @@ checksum = "6e4de3bc4ea267985becf712dc6d9eed8b04c953b3fcfb339ebc87acd9804901"
 
 [[package]]
 name = "clap"
-version = "4.5.29"
+version = "4.5.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8acebd8ad879283633b343856142139f2da2317c96b05b4dd6181c61e2480184"
+checksum = "027bb0d98429ae334a8698531da7077bdf906419543a35a55c2cb1b66437d767"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -281,9 +281,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.29"
+version = "4.5.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f6ba32cbda51c7e1dfd49acc1457ba1a7dec5b64fe360e828acb13ca8dc9c2f9"
+checksum = "5589e0cba072e0f3d23791efac0fd8627b49c829c196a492e88168e6a669d863"
 dependencies = [
  "anstream",
  "anstyle",
@@ -619,9 +619,9 @@ dependencies = [
 
 [[package]]
 name = "either"
-version = "1.13.0"
+version = "1.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "60b1af1c220855b6ceac025d3f6ecdd2b7c4894bfe9cd9bda4fbb4bc7c0d4cf0"
+checksum = "b7914353092ddf589ad78f25c5c1c21b7f80b0ff8621e7c814c3485b5306da9d"
 
 [[package]]
 name = "encoding_rs"
@@ -685,9 +685,9 @@ dependencies = [
 
 [[package]]
 name = "equivalent"
-version = "1.0.1"
+version = "1.0.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5443807d6dff69373d433ab9ef5378ad8df50ca6298caf15de6e52e24aaf54d5"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
 
 [[package]]
 name = "errno"
@@ -816,9 +816,9 @@ checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2"
 
 [[package]]
 name = "globset"
-version = "0.4.15"
+version = "0.4.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "15f1ce686646e7f1e19bf7d5533fe443a45dbfb990e00629110797578b42fb19"
+checksum = "54a1028dfc5f5df5da8a56a73e6c153c9a9708ec57232470703592a3f18e49f5"
 dependencies = [
  "aho-corasick",
  "bstr",
@@ -1324,9 +1324,9 @@ dependencies = [
 
 [[package]]
 name = "litemap"
-version = "0.7.4"
+version = "0.7.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ee93343901ab17bd981295f2cf0026d4ad018c7c31ba84549a4ddbb47a45104"
+checksum = "23fb14cb19457329c82206317a5663005a4d404783dc74f4252769b0d5f42856"
 
 [[package]]
 name = "log"
@@ -1367,9 +1367,9 @@ dependencies = [
 
 [[package]]
 name = "miniz_oxide"
-version = "0.8.4"
+version = "0.8.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b3b1c9bd4fe1f0f8b387f6eb9eb3b4a1aa26185e5750efb9140301703f62cd1b"
+checksum = "8e3e04debbb59698c15bacbb6d93584a8c0ca9cc3213cb423d31f760d8843ce5"
 dependencies = [
  "adler2",
 ]
@@ -1685,9 +1685,9 @@ dependencies = [
 
 [[package]]
 name = "rss"
-version = "2.0.11"
+version = "2.0.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "531af70fce504d369cf42ac0a9645f5a62a8ea9265de71cfa25087e9f6080c7c"
+checksum = "b2107738f003660f0a91f56fd3e3bd3ab5d918b2ddaf1e1ec2136fb1c46f71bf"
 dependencies = [
  "atom_syndication",
  "derive_builder",
@@ -1765,18 +1765,18 @@ checksum = "c5160c54e9223d4c889c9f81179ddbfe046f895eb37a391107a8ec0aa302f7cc"
 
 [[package]]
 name = "serde"
-version = "1.0.217"
+version = "1.0.218"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02fc4265df13d6fa1d00ecff087228cc0a2b5f3c0e87e258d8b94a156e984c70"
+checksum = "e8dfc9d19bdbf6d17e22319da49161d5d0108e4188e8b680aef6299eed22df60"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.217"
+version = "1.0.218"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a9bf7cf98d04a2b28aead066b7496853d4779c9cc183c440dbac457641e19a0"
+checksum = "f09503e191f4e797cb8aac08e9a4a4695c5edf6a2e70e376d961ddd5c969f82b"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1785,9 +1785,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.138"
+version = "1.0.140"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d434192e7da787e94a6ea7e9670b26a036d0ca41e0b7efb2676dd32bae872949"
+checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373"
 dependencies = [
  "itoa",
  "memchr",
@@ -1854,9 +1854,9 @@ dependencies = [
 
 [[package]]
 name = "smallvec"
-version = "1.13.2"
+version = "1.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c5e1a9a646d36c3599cd173a41282daf47c44583ad367b8e6837255952e5c67"
+checksum = "7fcf8323ef1faaee30a44a340193b1ac6814fd9b7b4e88e9d4519a3e4abe1cfd"
 
 [[package]]
 name = "snapbox"
@@ -2112,9 +2112,9 @@ dependencies = [
 
 [[package]]
 name = "trycmd"
-version = "0.15.8"
+version = "0.15.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "656073a28690a4b8dfd578d1df087826cf8fa53c8161dbd90130d092570a21e1"
+checksum = "a8b5cf29388862aac065d6597ac9c8e842d1cc827cb50f7c32f11d29442eaae4"
 dependencies = [
  "anstream",
  "automod",
@@ -2130,9 +2130,9 @@ dependencies = [
 
 [[package]]
 name = "typenum"
-version = "1.17.0"
+version = "1.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42ff0bf0c66b8238c6f3b578df37d0b7848e55df8577b3f74f92a69acceeb825"
+checksum = "1dccffe3ce07af9386bfd29e80c0ab1a8205a2fc34e4bcd40364df902cfa8f3f"
 
 [[package]]
 name = "ucd-trie"
@@ -2201,9 +2201,9 @@ checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
 
 [[package]]
 name = "uuid"
-version = "1.13.1"
+version = "1.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ced87ca4be083373936a67f8de945faa23b6b42384bd5b64434850802c6dccd0"
+checksum = "8c1f41ffb7cf259f1ecc2876861a17e7142e63ead296f671f81f6ae85903e0d6"
 dependencies = [
  "getrandom",
 ]
@@ -2414,9 +2414,9 @@ checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
 [[package]]
 name = "winnow"
-version = "0.7.2"
+version = "0.7.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59690dea168f2198d1a3b0cac23b8063efcd11012f10ae4698f284808c8ef603"
+checksum = "0e7f4ea97f6f78012141bcdb6a216b2609f0979ada50b20ca5b52dde2eac2bb1"
 dependencies = [
  "memchr",
 ]
@@ -2483,18 +2483,18 @@ dependencies = [
 
 [[package]]
 name = "zerofrom"
-version = "0.1.5"
+version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cff3ee08c995dee1859d998dea82f7374f2826091dd9cd47def953cae446cd2e"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
 dependencies = [
  "zerofrom-derive",
 ]
 
 [[package]]
 name = "zerofrom-derive"
-version = "0.1.5"
+version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "595eed982f7d355beb85837f651fa22e90b3c044842dc7f2c2842c086f295808"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/Cargo.toml b/Cargo.toml
index 5d647f41..f65b4b22 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -137,52 +137,52 @@ doc = false
 [dependencies]
 cobalt-config = { version = "=0.19.5", path = "crates/config", features = ["unstable"] }
 cobalt-core = { version = "=0.19.5", path = "crates/core", features = ["unstable"] }
-clap = { version = "4.5", features = ["derive", "wrap_help"] }
-clap-verbosity-flag = "3.0"
-proc-exit = "2"
+clap = { version = "4.5.31", features = ["derive", "wrap_help"] }
+clap-verbosity-flag = "3.0.2"
+proc-exit = "2.0.2"
 colorchoice = "1.0.3"
 colorchoice-clap = "1.0.6"
-human-panic = "2"
-scrawl = "2.0"
-tempfile = "3.17"
-relative-path = { version = "1", features = ["serde"] }
-liquid = "0.26"
-liquid-core = "0.26"
-liquid-lib = { version = "0.26", features = ["jekyll", "shopify", "extra"] }
+human-panic = "2.0.2"
+scrawl = "2.0.0"
+tempfile = "3.17.1"
+relative-path = { version = "1.9.3", features = ["serde"] }
+liquid = "0.26.9"
+liquid-core = "0.26.9"
+liquid-lib = { version = "0.26.9", features = ["jekyll", "shopify", "extra"] }
 deunicode = "1.6.0"
-walkdir = "2.5"
-time = "0.3"
-log = "0.4"
-env_logger = "0.11"
-rss = "2.0"
-jsonfeed = "0.2"
-pulldown-cmark = {version="0.13", default-features = false, features = ["html"] }
-engarde = { version = "0.1", path = "crates/engarde" }
-regex = "1.11"
-itertools = "0.14"
-ignore = "0.4"
-serde = "1.0"
-serde_yaml = "0.9"
-serde_json = "1.0"
+walkdir = "2.5.0"
+time = "0.3.37"
+log = "0.4.26"
+env_logger = "0.11.6"
+rss = "2.0.12"
+jsonfeed = "0.2.0"
+pulldown-cmark = {version="0.13.0", default-features = false, features = ["html"] }
+engarde = { version = "0.1.0", path = "crates/engarde" }
+regex = "1.11.1"
+itertools = "0.14.0"
+ignore = "0.4.23"
+serde = "1.0.218"
+serde_yaml = "0.9.34"
+serde_json = "1.0.140"
 toml = "0.8.20"
 normalize-line-endings = "0.3.0"
-sitemap = "0.4"
-open = "5"
+sitemap = "0.4.1"
+open = "5.3.2"
 dunce = "1.0.5"
 
 file-serve = { version = "0.3.6", path = "crates/file-serve", optional = true }
-notify = { version = "8", optional = true, default-features = false, features = ["macos_fsevent"] }
+notify = { version = "8.0.0", optional = true, default-features = false, features = ["macos_fsevent"] }
 
-sass-rs = { version = "0.2", optional = true }
+sass-rs = { version = "0.2.2", optional = true }
 
-html-minifier = {version="5.0", optional = true }
+html-minifier = {version="5.0.0", optional = true }
 anyhow = "1.0.97"
 anstream = "0.6.18"
 chrono = "0.4.40"
 anstyle = "1.0.10"
 
 [dev-dependencies]
-trycmd = "0.15"
+trycmd = "0.15.9"
 snapbox = { version = "0.6.21", features = ["diff"] }
 
 [features]
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index 4aa5adac..5534cbc1 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -20,17 +20,17 @@ unstable = []
 preview_unstable = []
 
 [dependencies]
-liquid-core = "0.26"
-time = "0.3"
-log = "0.4"
-regex = "1.11"
-serde = "1.0"
-serde_yaml = "0.9"
-relative-path = { version = "1", features = ["serde"] }
-once_cell = "1.20"
+liquid-core = "0.26.9"
+time = "0.3.37"
+log = "0.4.26"
+regex = "1.11.1"
+serde = "1.0.218"
+serde_yaml = "0.9.34"
+relative-path = { version = "1.9.3", features = ["serde"] }
+once_cell = "1.20.3"
 status = { version = "0.0.10", features = ["send_sync"] }
-deunicode = "1.6"
-itertools = "0.14"
+deunicode = "1.6.0"
+itertools = "0.14.0"
 
 [lints]
 workspace = true
diff --git a/crates/core/Cargo.toml b/crates/core/Cargo.toml
index 15686821..b08d2afe 100644
--- a/crates/core/Cargo.toml
+++ b/crates/core/Cargo.toml
@@ -21,14 +21,14 @@ preview_unstable = []
 
 [dependencies]
 cobalt-config = { version = "=0.19.5", path = "..//config", features = ["unstable"] }
-ignore = "0.4"
-walkdir = "2.5"
-liquid-core = "0.26"
-log = "0.4"
-serde = "1.0"
-once_cell = "1.20"
+ignore = "0.4.23"
+walkdir = "2.5.0"
+liquid-core = "0.26.9"
+log = "0.4.26"
+serde = "1.0.218"
+once_cell = "1.20.3"
 status = { version = "0.0.10", features = ["send_sync"] }
-relative-path = { version = "1", features = ["serde"] }
+relative-path = { version = "1.9.3", features = ["serde"] }
 
 [lints]
 workspace = true
diff --git a/crates/file-serve/Cargo.toml b/crates/file-serve/Cargo.toml
index 268c2cb5..6dac2039 100644
--- a/crates/file-serve/Cargo.toml
+++ b/crates/file-serve/Cargo.toml
@@ -29,7 +29,7 @@ pre-release-replacements = [
 [dependencies]
 tiny_http = "0.12.0"
 mime_guess = "2.0.5"
-log = "0.4"
+log = "0.4.26"
 
 [target.'cfg(any())'.dependencies]
 mime = "0.3.17"  # HACK: bad minimal dep in mime_guess