diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index 679c94d..d2de10a 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -29,6 +29,6 @@ rustls-platform-verifier = { version = "0.3.3" }
 rustls-acme = { path = "../submodules/rustls-acme/", default-features = false, features = [
   "aws-lc-rs",
 ] }
-tokio = { version = "1.39.2", default-features = false }
+tokio = { version = "1.39.3", default-features = false }
 tokio-util = { version = "0.7.11", default-features = false }
 tokio-stream = { version = "0.1.15", default-features = false }
diff --git a/rpxy-bin/Cargo.toml b/rpxy-bin/Cargo.toml
index 91fe4d6..426f4f7 100644
--- a/rpxy-bin/Cargo.toml
+++ b/rpxy-bin/Cargo.toml
@@ -31,8 +31,8 @@ rpxy-lib = { path = "../rpxy-lib/", default-features = false, features = [
 mimalloc = { version = "*", default-features = false }
 anyhow = "1.0.86"
 rustc-hash = "2.0.0"
-serde = { version = "1.0.204", default-features = false, features = ["derive"] }
-tokio = { version = "1.39.2", default-features = false, features = [
+serde = { version = "1.0.208", default-features = false, features = ["derive"] }
+tokio = { version = "1.39.3", default-features = false, features = [
   "net",
   "rt-multi-thread",
   "time",
@@ -44,8 +44,8 @@ async-trait = "0.1.81"
 futures-util = { version = "0.3.30", default-features = false }
 
 # config
-clap = { version = "4.5.11", features = ["std", "cargo", "wrap_help"] }
-toml = { version = "0.8.17", default-features = false, features = ["parse"] }
+clap = { version = "4.5.16", features = ["std", "cargo", "wrap_help"] }
+toml = { version = "0.8.19", default-features = false, features = ["parse"] }
 hot_reload = "0.1.6"
 
 # logging
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 072450e..1df2ad8 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -25,7 +25,7 @@ rustls = { version = "0.23.12", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
-rustls-pemfile = { version = "2.1.2" }
+rustls-pemfile = { version = "2.1.3" }
 rustls-webpki = { version = "0.102.6", default-features = false, features = [
   "std",
   "aws_lc_rs",
@@ -33,7 +33,7 @@ rustls-webpki = { version = "0.102.6", default-features = false, features = [
 x509-parser = { version = "0.16.0" }
 
 [dev-dependencies]
-tokio = { version = "1.39.2", default-features = false, features = [
+tokio = { version = "1.39.3", default-features = false, features = [
   "rt-multi-thread",
   "macros",
 ] }
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index e8fef1a..35c1f86 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -32,10 +32,10 @@ acme = ["dep:rpxy-acme"]
 [dependencies]
 rand = "0.8.5"
 rustc-hash = "2.0.0"
-bytes = "1.7.0"
+bytes = "1.7.1"
 derive_builder = "0.20.0"
 futures = { version = "0.3.30", features = ["alloc", "async-await"] }
-tokio = { version = "1.39.2", default-features = false, features = [
+tokio = { version = "1.39.3", default-features = false, features = [
   "net",
   "rt-multi-thread",
   "time",
@@ -55,7 +55,7 @@ thiserror = "1.0.63"
 http = "1.1.0"
 http-body-util = "0.1.2"
 hyper = { version = "1.4.1", default-features = false }
-hyper-util = { version = "0.1.6", features = ["full"] }
+hyper-util = { version = "0.1.7", features = ["full"] }
 futures-util = { version = "0.3.30", default-features = false }
 futures-channel = { version = "0.3.30", default-features = false }
 
@@ -86,17 +86,17 @@ rpxy-acme = { path = "../rpxy-acme/", default-features = false, optional = true
 tracing = { version = "0.1.40" }
 
 # http/3
-quinn = { version = "0.11.2", optional = true }
+quinn = { version = "0.11.3", optional = true }
 h3 = { version = "0.0.6", features = ["tracing"], optional = true }
 h3-quinn = { version = "0.0.7", optional = true }
 s2n-quic-h3 = { path = "../submodules/s2n-quic-h3/", features = [
   "tracing",
 ], optional = true }
-s2n-quic = { version = "1.43.0", default-features = false, features = [
+s2n-quic = { version = "1.44.1", default-features = false, features = [
   "provider-tls-rustls",
 ], optional = true }
-s2n-quic-core = { version = "0.43.0", default-features = false, optional = true }
-s2n-quic-rustls = { version = "0.43.0", optional = true }
+s2n-quic-core = { version = "0.44.1", default-features = false, optional = true }
+s2n-quic-rustls = { version = "0.44.1", optional = true }
 ##########
 # for UDP socket wit SO_REUSEADDR when h3 with quinn
 socket2 = { version = "0.5.7", features = ["all"], optional = true }
diff --git a/submodules/s2n-quic-h3/Cargo.toml b/submodules/s2n-quic-h3/Cargo.toml
index b445924..7c27cc4 100644
--- a/submodules/s2n-quic-h3/Cargo.toml
+++ b/submodules/s2n-quic-h3/Cargo.toml
@@ -15,8 +15,8 @@ futures = { version = "0.3", default-features = false }
 h3 = { version = "0.0.6", features = ["tracing"] }
 # s2n-quic = { path = "../s2n-quic" }
 # s2n-quic-core = { path = "../s2n-quic-core" }
-s2n-quic = { version = "1.43.0" }
-s2n-quic-core = { version = "0.43.0" }
+s2n-quic = { version = "1.44.1" }
+s2n-quic-core = { version = "0.44.1" }
 tracing = { version = "0.1.40", optional = true }
 
 [features]