diff --git a/rpxy-acme/Cargo.toml b/rpxy-acme/Cargo.toml
index a86ca82..4a93685 100644
--- a/rpxy-acme/Cargo.toml
+++ b/rpxy-acme/Cargo.toml
@@ -24,7 +24,7 @@ aws-lc-rs = { version = "1.12.2", default-features = false, features = [
   "aws-lc-sys",
 ] }
 blocking = "1.6.1"
-rustls = { version = "0.23.22", default-features = false, features = [
+rustls = { version = "0.23.23", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-bin/Cargo.toml b/rpxy-bin/Cargo.toml
index 06df18a..e704dd0 100644
--- a/rpxy-bin/Cargo.toml
+++ b/rpxy-bin/Cargo.toml
@@ -45,8 +45,8 @@ async-trait = "0.1.86"
 futures-util = { version = "0.3.31", default-features = false }
 
 # config
-clap = { version = "4.5.27", features = ["std", "cargo", "wrap_help"] }
-toml = { version = "0.8.19", default-features = false, features = ["parse"] }
+clap = { version = "4.5.29", features = ["std", "cargo", "wrap_help"] }
+toml = { version = "0.8.20", default-features = false, features = ["parse"] }
 hot_reload = "0.1.8"
 serde_ignored = "0.1.10"
 
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 08cc274..ad63a2c 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -22,7 +22,7 @@ derive_builder = { version = "0.20.2" }
 thiserror = { version = "2.0.11" }
 hot_reload = { version = "0.1.8" }
 async-trait = { version = "0.1.86" }
-rustls = { version = "0.23.22", default-features = false, features = [
+rustls = { version = "0.23.23", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index 627d3f7..291db34 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -38,7 +38,7 @@ post-quantum = [
 [dependencies]
 rand = "0.9.0"
 ahash = "0.8.11"
-bytes = "1.9.0"
+bytes = "1.10.0"
 derive_builder = "0.20.2"
 futures = { version = "0.3.31", features = ["alloc", "async-await"] }
 tokio = { version = "1.43.0", default-features = false, features = [
@@ -80,7 +80,7 @@ hyper-rustls = { version = "0.27.5", default-features = false, features = [
 # tls and cert management for server
 rpxy-certs = { path = "../rpxy-certs/", default-features = false }
 hot_reload = "0.1.8"
-rustls = { version = "0.23.22", default-features = false }
+rustls = { version = "0.23.23", default-features = false }
 rustls-post-quantum = { version = "0.2.2", optional = true }
 tokio-rustls = { version = "0.26.1", features = ["early-data"] }