diff --git a/rpxy-bin/Cargo.toml b/rpxy-bin/Cargo.toml
index 6545eef..9ea1935 100644
--- a/rpxy-bin/Cargo.toml
+++ b/rpxy-bin/Cargo.toml
@@ -43,7 +43,7 @@ async-trait = "0.1.80"
 
 # config
 clap = { version = "4.5.4", features = ["std", "cargo", "wrap_help"] }
-toml = { version = "0.8.13", default-features = false, features = ["parse"] }
+toml = { version = "0.8.14", default-features = false, features = ["parse"] }
 hot_reload = "0.1.5"
 
 # logging
diff --git a/rpxy-certs/Cargo.toml b/rpxy-certs/Cargo.toml
index 61e1bf1..49a5cd4 100644
--- a/rpxy-certs/Cargo.toml
+++ b/rpxy-certs/Cargo.toml
@@ -21,7 +21,7 @@ derive_builder = { version = "0.20.0" }
 thiserror = { version = "1.0.61" }
 hot_reload = { version = "0.1.5" }
 async-trait = { version = "0.1.80" }
-rustls = { version = "0.23.8", default-features = false, features = [
+rustls = { version = "0.23.9", default-features = false, features = [
   "std",
   "aws_lc_rs",
 ] }
diff --git a/rpxy-lib/Cargo.toml b/rpxy-lib/Cargo.toml
index 696119c..f279a4e 100644
--- a/rpxy-lib/Cargo.toml
+++ b/rpxy-lib/Cargo.toml
@@ -74,7 +74,7 @@ hyper-rustls = { version = "0.27.2", default-features = false, features = [
 # tls and cert management for server
 rpxy-certs = { path = "../rpxy-certs/", default-features = false }
 hot_reload = "0.1.5"
-rustls = { version = "0.23.8", default-features = false }
+rustls = { version = "0.23.9", default-features = false }
 tokio-rustls = { version = "0.26.0", features = ["early-data"] }
 
 # logging
diff --git a/submodules/s2n-quic b/submodules/s2n-quic
index a3e8d34..d90729d 160000
--- a/submodules/s2n-quic
+++ b/submodules/s2n-quic
@@ -1 +1 @@
-Subproject commit a3e8d34d74aa653acb53eff53781796db2fd6e39
+Subproject commit d90729de3f6d1fdc76ddff734591cfc2d8e61e80