diff --git a/library/Cargo.toml b/library/Cargo.toml
index a45b6f0b..e932e483 100644
--- a/library/Cargo.toml
+++ b/library/Cargo.toml
@@ -27,7 +27,7 @@ dyn-clone = "1.0.16"
 # For decoding the hex-encoded hashes in Patch network responses.
 hex = "0.4.3"
 # Used to construct mock responses.
-http = "0.2.9"
+http = "1.1.0"
 libc = "0.2.98"
 # For error!(), info!(), etc macros. `print` will not show up on Android.
 log = "0.4.14"
@@ -37,7 +37,7 @@ once_cell = "1.17.1"
 # Pipe is a simple in-memory pipe implementation, there might be a std way too?
 pipe = "0.4.0"
 # Used for networking.
-reqwest = { version = "0.11", default-features = false, features = [
+reqwest = { version = "0.12", default-features = false, features = [
     "blocking",
     "json",
     "rustls-tls",
@@ -50,11 +50,11 @@ serde_yaml = "0.9.19"
 # For computing hashes of patch files for validation.
 sha2 = "0.10.6"
 # For decompressing .apk files.
-zip = { version = "0.6.4", default-features = false, features = ["deflate"] }
+zip = { version = "2.1.3", default-features = false, features = ["deflate"] }
 
 [target.'cfg(target_os = "android")'.dependencies]
 # For logging to Android logcat.
-android_logger = "0.13.0"
+android_logger = "0.14.0"
 # Send panics to log (instead of stderr), thus logcat on Android.
 log-panics = { version = "2", features = ["with-backtrace"] }
 
@@ -69,9 +69,9 @@ mockall = "0.12.1"
 mockito = "1.2.0"
 # Gives #[serial] attribute for locking all of our shorebird_init
 # tests to a single thread so they don't conflict with each other.
-serial_test = "2.0.0"
+serial_test = "3.1.1"
 tempdir = "0.3.7"
 
 # <https://github.com/eqrion/cbindgen/blob/master/docs.md#buildrs>
 [build-dependencies]
-cbindgen = "0.24.0"
+cbindgen = "0.26.0"