diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index f1d31cf..e0c1146 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -20,7 +20,7 @@ thiserror = "2.0.11"
 tracing = "0.1.41"
 async-trait = "0.1.86"
 base64 = "0.22.1"
-aws-lc-rs = { version = "1.12.3", default-features = false, features = [
+aws-lc-rs = { version = "1.12.4", default-features = false, features = [
   "aws-lc-sys",
 ] }
 blocking = "1.6.1"
diff --git a/rpxy-bin/Cargo.toml b/rpxy-bin/Cargo.toml
index 1b4a343..e81376e 100644
--- a/rpxy-bin/Cargo.toml
+++ b/rpxy-bin/Cargo.toml
@@ -32,7 +32,7 @@ rpxy-lib = { path = "../rpxy-lib/", default-features = false, features = [
 mimalloc = { version = "*", default-features = false }
 anyhow = "1.0.96"
 ahash = "0.8.11"
-serde = { version = "1.0.217", default-features = false, features = ["derive"] }
+serde = { version = "1.0.218", default-features = false, features = ["derive"] }
 tokio = { version = "1.43.0", default-features = false, features = [
   "net",
   "rt-multi-thread",
@@ -45,7 +45,7 @@ async-trait = "0.1.86"
 futures-util = { version = "0.3.31", default-features = false }
 
 # config
-clap = { version = "4.5.30", features = ["std", "cargo", "wrap_help"] }
+clap = { version = "4.5.31", features = ["std", "cargo", "wrap_help"] }
 toml = { version = "0.8.20", default-features = false, features = ["parse"] }
 hot_reload = "0.1.8"
 serde_ignored = "0.1.10"
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index ad63a2c..e40125c 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -27,9 +27,9 @@ rustls = { version = "0.23.23", default-features = false, features = [
   "aws_lc_rs",
 ] }
 rustls-pemfile = { version = "2.2.0" }
-rustls-webpki = { version = "0.102.8", default-features = false, features = [
+rustls-webpki = { version = "0.103.0", default-features = false, features = [
   "std",
-  "aws_lc_rs",
+  "aws-lc-rs",
 ] }
 rustls-post-quantum = { version = "0.2.2", optional = true }
 x509-parser = { version = "0.17.0" }