diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index 0a12ceb..e4eb2cb 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -16,7 +16,7 @@ post-quantum = ["rustls-post-quantum"]
 [dependencies]
 url = { version = "2.5.4" }
 ahash = "0.8.11"
-thiserror = "2.0.10"
+thiserror = "2.0.11"
 tracing = "0.1.41"
 async-trait = "0.1.85"
 base64 = "0.22.1"
@@ -24,7 +24,7 @@ aws-lc-rs = { version = "1.12.0", default-features = false, features = [
   "aws-lc-sys",
 ] }
 blocking = "1.6.1"
-rustls = { version = "0.23.20", default-features = false, features = [
+rustls = { version = "0.23.21", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 0bd9f94..370596e 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -19,10 +19,10 @@ http3 = []
 ahash = { version = "0.8.11" }
 tracing = { version = "0.1.41" }
 derive_builder = { version = "0.20.2" }
-thiserror = { version = "2.0.10" }
+thiserror = { version = "2.0.11" }
 hot_reload = { version = "0.1.8" }
 async-trait = { version = "0.1.85" }
-rustls = { version = "0.23.20", default-features = false, features = [
+rustls = { version = "0.23.21", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index e9b76b2..19ed17a 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -55,7 +55,7 @@ async-trait = "0.1.85"
 
 # Error handling
 anyhow = "1.0.95"
-thiserror = "2.0.10"
+thiserror = "2.0.11"
 
 # http for both server and client
 http = "1.2.0"
@@ -80,7 +80,7 @@ hyper-rustls = { version = "0.27.5", default-features = false, features = [
 # tls and cert management for server
 rpxy-certs = { path = "../rpxy-certs/", default-features = false }
 hot_reload = "0.1.8"
-rustls = { version = "0.23.20", default-features = false }
+rustls = { version = "0.23.21", default-features = false }
 rustls-post-quantum = { version = "0.2.1", optional = true }
 tokio-rustls = { version = "0.26.1", features = ["early-data"] }
 
diff --git a/submodules/rustls-acme b/submodules/rustls-acme
index af2d016..3261f45 160000
--- a/submodules/rustls-acme
+++ b/submodules/rustls-acme
@@ -1 +1 @@
-Subproject commit af2d016b6aa4e09586253a0459efc4af6635c79b
+Subproject commit 3261f4527baa1c83305b753a8f72c6fbc58a18d7
diff --git a/submodules/rusty-http-cache-semantics b/submodules/rusty-http-cache-semantics
index d5b5efd..2500716 160000
--- a/submodules/rusty-http-cache-semantics
+++ b/submodules/rusty-http-cache-semantics
@@ -1 +1 @@
-Subproject commit d5b5efd9de4dab3c958c50be5380652d801cc65f
+Subproject commit 2500716b70bd6e548cdf690188ded7afe6726330