diff --git a/Cargo.lock b/Cargo.lock
index 174106781910..9ea6bd914e0f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4375,9 +4375,9 @@ checksum = "6a02e4885ed3bc0f2de90ea6dd45ebcbb66dacffe03547fadbb0eeae2770887d"
 
 [[package]]
 name = "walkdir"
-version = "2.4.0"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71d857dc86794ca4c280d616f7da00d2dbfd8cd788846559a6813e6aa4b54ee"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
 dependencies = [
  "same-file",
  "winapi-util",
diff --git a/lutra/lutra/Cargo.toml b/lutra/lutra/Cargo.toml
index 56bd4ab4e707..d1e72fc7f1a1 100644
--- a/lutra/lutra/Cargo.toml
+++ b/lutra/lutra/Cargo.toml
@@ -27,7 +27,7 @@ itertools = {workspace = true}
 log = {workspace = true}
 prqlc = {path = "../../prqlc/prqlc", version = "0.11.5", default-features = false}
 rusqlite = {version = "0.30.0", features = ["bundled"]}
-walkdir = "2.4.0"
+walkdir = "2.5.0"
 
 [target.'cfg(not(target_family="wasm"))'.dev-dependencies]
 insta = {workspace = true}
diff --git a/prqlc/prqlc/Cargo.toml b/prqlc/prqlc/Cargo.toml
index abcf3069783f..8f419f9ced56 100644
--- a/prqlc/prqlc/Cargo.toml
+++ b/prqlc/prqlc/Cargo.toml
@@ -68,7 +68,7 @@ color-eyre = {version = "0.6.2", optional = true}
 colorchoice-clap = {version = "1.0.0", optional = true}
 env_logger = {version = "0.10.2", features = ["color"], optional = true}
 notify = {version = "6.1.1", optional = true}
-walkdir = {version = "2.4.0", optional = true}
+walkdir = {version = "2.5.0", optional = true}
 
 # Not direct dependencies, but pinning because of bugs in previous versions. Can
 # remove when dependencies no longer use it. (If CI passes, it can be removed.)
diff --git a/web/book/Cargo.toml b/web/book/Cargo.toml
index be0cbff692e1..ed06afa67fda 100644
--- a/web/book/Cargo.toml
+++ b/web/book/Cargo.toml
@@ -37,7 +37,7 @@ regex = "1.10.3"
 serde_json = "1.0.114"
 serde_yaml = "0.9.32"
 similar-asserts = "1.5.0"
-walkdir = "2.4.0"
+walkdir = "2.5.0"
 
 [package.metadata.release]
 tag-name = "{{version}}"