diff --git a/Cargo.lock b/Cargo.lock
index 6a1fd2b62ec7d..3a08a66747363 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -707,9 +707,9 @@ dependencies = [
 
 [[package]]
 name = "aws-credential-types"
-version = "1.2.7"
+version = "1.2.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "799a1290207254984cb7c05245111bc77958b92a3c9bb449598044b36341cce6"
+checksum = "faf26925f4a5b59eb76722b63c2892b1d70d06fa053c72e4a100ec308c1d47bc"
 dependencies = [
  "aws-smithy-async",
  "aws-smithy-runtime-api",
@@ -719,15 +719,15 @@ dependencies = [
 
 [[package]]
 name = "aws-runtime"
-version = "1.5.11"
+version = "1.5.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e1ed337dabcf765ad5f2fb426f13af22d576328aaf09eac8f70953530798ec0"
+checksum = "bfa006bb32360ed90ac51203feafb9d02e3d21046e1fd3a450a404b90ea73e5d"
 dependencies = [
  "aws-credential-types",
  "aws-sigv4",
  "aws-smithy-async",
  "aws-smithy-eventstream",
- "aws-smithy-http 0.62.3",
+ "aws-smithy-http 0.62.4",
  "aws-smithy-runtime",
  "aws-smithy-runtime-api",
  "aws-smithy-types",
@@ -891,13 +891,13 @@ dependencies = [
 
 [[package]]
 name = "aws-sigv4"
-version = "1.3.4"
+version = "1.3.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "084c34162187d39e3740cb635acd73c4e3a551a36146ad6fe8883c929c9f876c"
+checksum = "bffc03068fbb9c8dd5ce1c6fb240678a5cffb86fb2b7b1985c999c4b83c8df68"
 dependencies = [
  "aws-credential-types",
  "aws-smithy-eventstream",
- "aws-smithy-http 0.62.3",
+ "aws-smithy-http 0.62.4",
  "aws-smithy-runtime-api",
  "aws-smithy-types",
  "bytes",
@@ -914,9 +914,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-async"
-version = "1.2.5"
+version = "1.2.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e190749ea56f8c42bf15dd76c65e14f8f765233e6df9b0506d9d934ebef867c"
+checksum = "127fcfad33b7dfc531141fda7e1c402ac65f88aca5511a4d31e2e3d2cd01ce9c"
 dependencies = [
  "futures-util",
  "pin-project-lite",
@@ -946,9 +946,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-eventstream"
-version = "0.60.11"
+version = "0.60.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "182b03393e8c677347fb5705a04a9392695d47d20ef0a2f8cfe28c8e6b9b9778"
+checksum = "9656b85088f8d9dc7ad40f9a6c7228e1e8447cdf4b046c87e152e0805dea02fa"
 dependencies = [
  "aws-smithy-types",
  "bytes",
@@ -978,9 +978,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-http"
-version = "0.62.3"
+version = "0.62.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c4dacf2d38996cf729f55e7a762b30918229917eca115de45dfa8dfb97796c9"
+checksum = "3feafd437c763db26aa04e0cc7591185d0961e64c61885bece0fb9d50ceac671"
 dependencies = [
  "aws-smithy-runtime-api",
  "aws-smithy-types",
@@ -998,9 +998,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-http-client"
-version = "1.1.2"
+version = "1.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "734b4282fbb7372923ac339cc2222530f8180d9d4745e582de19a18cee409fd8"
+checksum = "1053b5e587e6fa40ce5a79ea27957b04ba660baa02b28b7436f64850152234f1"
 dependencies = [
  "aws-smithy-async",
  "aws-smithy-runtime-api",
@@ -1026,9 +1026,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-observability"
-version = "0.1.3"
+version = "0.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9364d5989ac4dd918e5cc4c4bdcc61c9be17dcd2586ea7f69e348fc7c6cab393"
+checksum = "2d1881b1ea6d313f9890710d65c158bdab6fb08c91ea825f74c1c8c357baf4cc"
 dependencies = [
  "aws-smithy-runtime-api",
 ]
@@ -1045,12 +1045,12 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-runtime"
-version = "1.9.2"
+version = "1.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fa63ad37685ceb7762fa4d73d06f1d5493feb88e3f27259b9ed277f4c01b185"
+checksum = "40ab99739082da5347660c556689256438defae3bcefd66c52b095905730e404"
 dependencies = [
  "aws-smithy-async",
- "aws-smithy-http 0.62.3",
+ "aws-smithy-http 0.62.4",
  "aws-smithy-http-client",
  "aws-smithy-observability",
  "aws-smithy-runtime-api",
@@ -1069,9 +1069,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-runtime-api"
-version = "1.9.0"
+version = "1.9.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07f5e0fc8a6b3f2303f331b94504bbf754d85488f402d6f1dd7a6080f99afe56"
+checksum = "3683c5b152d2ad753607179ed71988e8cfd52964443b4f74fd8e552d0bbfeb46"
 dependencies = [
  "aws-smithy-async",
  "aws-smithy-types",
@@ -1086,9 +1086,9 @@ dependencies = [
 
 [[package]]
 name = "aws-smithy-types"
-version = "1.3.2"
+version = "1.3.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d498595448e43de7f4296b7b7a18a8a02c61ec9349128c80a368f7c3b4ab11a8"
+checksum = "9f5b3a7486f6690ba25952cabf1e7d75e34d69eaff5081904a47bc79074d6457"
 dependencies = [
  "base64-simd",
  "bytes",
@@ -1121,9 +1121,9 @@ dependencies = [
 
 [[package]]
 name = "aws-types"
-version = "1.3.8"
+version = "1.3.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b069d19bf01e46298eaedd7c6f283fe565a59263e53eebec945f3e6398f42390"
+checksum = "e2fd329bf0e901ff3f60425691410c69094dc2a1f34b331f37bfc4e9ac1565a1"
 dependencies = [
  "aws-credential-types",
  "aws-smithy-async",
@@ -1771,31 +1771,14 @@ dependencies = [
  "serde",
 ]
 
-[[package]]
-name = "cargo-util-schemas"
-version = "0.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7dc1a6f7b5651af85774ae5a34b4e8be397d9cf4bc063b7e6dbd99a841837830"
-dependencies = [
- "semver",
- "serde",
- "serde-untagged",
- "serde-value",
- "thiserror 2.0.17",
- "toml 0.8.22",
- "unicode-xid",
- "url",
-]
-
 [[package]]
 name = "cargo_metadata"
-version = "0.22.0"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c3f56c207c76c07652489840ff98687dcf213de178ac0974660d6fefeaf5ec6"
+checksum = "981a6f317983eec002839b90fae7411a85621410ae591a9cab2ecf5cb5744873"
 dependencies = [
  "camino",
  "cargo-platform",
- "cargo-util-schemas",
  "semver",
  "serde",
  "serde_json",
@@ -1820,9 +1803,9 @@ checksum = "37b2a672a2cb129a2e41c10b1224bb368f9f37a2b16b612598138befd7b37eb5"
 
 [[package]]
 name = "cc"
-version = "1.2.40"
+version = "1.2.41"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e1d05d92f4b1fd76aad469d46cdd858ca761576082cd37df81416691e50199fb"
+checksum = "ac9fe6cdbb24b6ade63616c0a0688e45bb56732262c158df3c0c4bea4ca47cb7"
 dependencies = [
  "find-msvc-tools",
  "jobserver",
@@ -1851,9 +1834,9 @@ dependencies = [
 
 [[package]]
 name = "cfg-if"
-version = "1.0.3"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2fd1289c04a9ea8cb22300a459a72a385d7c73d3259e2ed7dcb2af674838cfa9"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
 [[package]]
 name = "cfg_aliases"
@@ -2927,7 +2910,7 @@ version = "0.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b1c298552016db86f0d49e5de09818dd86c536f66095013cc415f4f85744033f"
 dependencies = [
- "erased-serde 0.3.26",
+ "erased-serde",
  "lazy_static",
  "regex",
  "serde",
@@ -3189,16 +3172,6 @@ dependencies = [
  "serde",
 ]
 
-[[package]]
-name = "erased-serde"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e004d887f51fcb9fef17317a2f3525c887d8aa3f4f50fed920816a688284a5b7"
-dependencies = [
- "serde",
- "typeid",
-]
-
 [[package]]
 name = "errno"
 version = "0.3.13"
@@ -3338,9 +3311,9 @@ dependencies = [
 
 [[package]]
 name = "find-msvc-tools"
-version = "0.1.3"
+version = "0.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0399f9d26e5191ce32c498bebd31e7a3ceabc2745f0ac54af3f335126c3f24b3"
+checksum = "52051878f80a721bb68ebfbc930e07b65ba72f2da88968ea5c06fd6ca3d3a127"
 
 [[package]]
 name = "findshlibs"
@@ -3700,9 +3673,9 @@ dependencies = [
 
 [[package]]
 name = "guppy"
-version = "0.17.21"
+version = "0.17.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "382d0681e5ca365cdee6c0c1bdcc92bca024322134e3793880c68d888540410b"
+checksum = "93383817a8d78167955d55ea78081f940df5469a02cf40eb4e26e56194fe11cb"
 dependencies = [
  "ahash 0.8.12",
  "camino",
@@ -4890,9 +4863,9 @@ checksum = "2c4a545a15244c7d945065b5d392b2d2d7f21526fba56ce51467b06ed445e8f7"
 
 [[package]]
 name = "libc"
-version = "0.2.176"
+version = "0.2.177"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "58f929b4d672ea937a23a1ab494143d968337a5f47e56d0815df1e0890ddf174"
+checksum = "2874a2af47a2325c2001a6e6fad9b16a53b802102b528163885171cf92b15976"
 
 [[package]]
 name = "libloading"
@@ -11068,17 +11041,6 @@ dependencies = [
  "serde_json",
 ]
 
-[[package]]
-name = "serde-untagged"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "299d9c19d7d466db4ab10addd5703e4c615dec2a5a16dbbafe191045e87ee66e"
-dependencies = [
- "erased-serde 0.4.6",
- "serde",
- "typeid",
-]
-
 [[package]]
 name = "serde-value"
 version = "0.7.0"
@@ -11814,9 +11776,9 @@ checksum = "e502f78cdbb8ba4718f566c418c52bc729126ffd16baee5baa718cf25dd5a69a"
 
 [[package]]
 name = "target-spec"
-version = "3.5.2"
+version = "3.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b44840fc121ca20db81dadbb66d27ac9133a0d4756d674caa7da088ce89cbf2d"
+checksum = "ca3da9f675d5be234979ba2352a72510ac5fcf4a99cc48b402cd7bba300ec764"
 dependencies = [
  "cfg-expr",
  "guppy-workspace-hack",
@@ -12870,12 +12832,6 @@ dependencies = [
  "syn 2.0.106",
 ]
 
-[[package]]
-name = "typeid"
-version = "1.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
-
 [[package]]
 name = "typenum"
 version = "1.15.0"
@@ -12975,12 +12931,6 @@ version = "0.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
 
-[[package]]
-name = "unicode-xid"
-version = "0.2.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
-
 [[package]]
 name = "unsafe-libyaml"
 version = "0.2.11"
@@ -13729,6 +13679,7 @@ dependencies = [
  "unicode-normalization",
  "url",
  "uuid",
+ "winnow 0.7.13",
  "zeroize",
  "zstd",
  "zstd-safe",
diff --git a/misc/bazel/cargo-gazelle/Cargo.toml b/misc/bazel/cargo-gazelle/Cargo.toml
index f9779a791a7cd..dcda8e3baac2c 100644
--- a/misc/bazel/cargo-gazelle/Cargo.toml
+++ b/misc/bazel/cargo-gazelle/Cargo.toml
@@ -18,7 +18,7 @@ camino = "1"
 cargo_toml = "0.22.3"
 clap = { version = "4.5.23", features = ["derive", "env"] }
 convert_case = "0.8"
-guppy = "0.17.21"
+guppy = "0.17.23"
 md-5 = "0.10.6"
 proc-macro2 = "1.0.95"
 protobuf-parse = "3.7.2"
diff --git a/src/aws-secrets-controller/Cargo.toml b/src/aws-secrets-controller/Cargo.toml
index a2a9afb400b4e..16d5b51c79740 100644
--- a/src/aws-secrets-controller/Cargo.toml
+++ b/src/aws-secrets-controller/Cargo.toml
@@ -16,9 +16,9 @@ workspace = true
 anyhow = "1.0.100"
 async-trait = "0.1.89"
 aws-config = { version = "1.2.0", default-features = false }
-aws-credential-types = { version = "1.2.7", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.8", features = ["hardcoded-credentials"] }
 aws-sdk-secretsmanager = { version = "1.45.0", default-features = false, features = ["rt-tokio"] }
-aws-types = "1.3.7"
+aws-types = "1.3.9"
 futures = { version = "0.3.31" }
 mz-aws-util = { path = "../aws-util", default-features = false }
 mz-secrets = { path = "../secrets", default-features = false }
diff --git a/src/aws-util/Cargo.toml b/src/aws-util/Cargo.toml
index eadc903391066..8d5fcd080b088 100644
--- a/src/aws-util/Cargo.toml
+++ b/src/aws-util/Cargo.toml
@@ -16,9 +16,9 @@ aws-sdk-s3 = { version = "1.48.0", default-features = false, features = [
     "rt-tokio",
 ], optional = true }
 aws-smithy-runtime-api = "1.8.3"
-aws-smithy-runtime = { version = "1.8.4", features = ["connector-hyper-0-14-x"] }
+aws-smithy-runtime = { version = "1.9.3", features = ["connector-hyper-0-14-x"] }
 aws-smithy-types = { version = "1.1.8", features = ["byte-stream-poll-next"] }
-aws-types = "1.3.7"
+aws-types = "1.3.9"
 bytes = "1.10.1"
 bytesize = "1.3.0"
 futures = "0.3.31"
diff --git a/src/build-tools/Cargo.toml b/src/build-tools/Cargo.toml
index 69871fe7a9f1e..f8d7a477d6963 100644
--- a/src/build-tools/Cargo.toml
+++ b/src/build-tools/Cargo.toml
@@ -7,7 +7,7 @@ rust-version.workspace = true
 publish = false
 
 [dependencies]
-cfg-if = "1.0.3"
+cfg-if = "1.0.4"
 protobuf-src = { version = "2.1.1", optional = true }
 which = "8"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index ae5566458c2f3..7e8f68d11f0be 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -36,7 +36,7 @@ include_dir = "0.7.4"
 ipnet = "2.11.0"
 itertools = "0.14.0"
 jsonwebtoken = "9.3.1"
-libc = "0.2.176"
+libc = "0.2.177"
 maplit = "1.0.2"
 mime = "0.3.16"
 mz-alloc = { path = "../alloc" }
@@ -164,7 +164,7 @@ tokio-postgres = { version = "0.7.8", features = ["with-chrono-0_4"] }
 
 [build-dependencies]
 anyhow = "1.0.100"
-cc = "1.2.40"
+cc = "1.2.41"
 mz-npm = { path = "../npm" }
 
 [features]
diff --git a/src/kafka-util/Cargo.toml b/src/kafka-util/Cargo.toml
index 754c1adf72754..0c064eb3f3a25 100644
--- a/src/kafka-util/Cargo.toml
+++ b/src/kafka-util/Cargo.toml
@@ -12,9 +12,9 @@ workspace = true
 [dependencies]
 anyhow = "1.0.100"
 aws-config = { version = "1.2.0", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.7" }
-aws-sigv4 = { version = "1.3.4" }
-aws-types = "1.3.7"
+aws-credential-types = { version = "1.2.8" }
+aws-sigv4 = { version = "1.3.5" }
+aws-types = "1.3.9"
 base64 = "0.22.1"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 clap = { version = "4.5.23", features = ["derive"] }
diff --git a/src/metrics/Cargo.toml b/src/metrics/Cargo.toml
index c4b8aed5f03e8..a6e8a9d259ae4 100644
--- a/src/metrics/Cargo.toml
+++ b/src/metrics/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 lgalloc = "0.6"
-libc = "0.2.176"
+libc = "0.2.177"
 mz-dyncfg = { path = "../dyncfg" }
 mz-ore = { path = "../ore", features = ["metrics"] }
 paste = "1.0"
diff --git a/src/mysql-util/Cargo.toml b/src/mysql-util/Cargo.toml
index 99e0e24447f7b..937cf99804cfb 100644
--- a/src/mysql-util/Cargo.toml
+++ b/src/mysql-util/Cargo.toml
@@ -12,9 +12,9 @@ workspace = true
 [dependencies]
 anyhow = "1.0.100"
 aws-config = { version = "1.2.0", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.7" }
-aws-sigv4 = { version = "1.3.4" }
-aws-types = "1.3.7"
+aws-credential-types = { version = "1.2.8" }
+aws-sigv4 = { version = "1.3.5" }
+aws-types = "1.3.9"
 chrono = { version = "0.4.39", default-features = false, features = ["std"] }
 indexmap = { version = "2.10.0", default-features = false, features = ["std"] }
 itertools = "0.14.0"
diff --git a/src/orchestrator-process/Cargo.toml b/src/orchestrator-process/Cargo.toml
index 558d26dcdb2ab..c0ae2a0edecdd 100644
--- a/src/orchestrator-process/Cargo.toml
+++ b/src/orchestrator-process/Cargo.toml
@@ -17,7 +17,7 @@ chrono = { version = "0.4.39", default-features = false, features = ["clock"] }
 futures = "0.3.31"
 hex = "0.4.3"
 itertools = "0.14.0"
-libc = "0.2.176"
+libc = "0.2.177"
 maplit = "1.0.2"
 mz-orchestrator = { path = "../orchestrator", default-features = false }
 mz-ore = { path = "../ore", default-features = false, features = ["async", "network"] }
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index 7600b821b2673..55f2a08bc4303 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -34,7 +34,7 @@ futures = { version = "0.3.31", optional = true }
 hibitset = { version = "0.6.4", optional = true }
 itertools = "0.14.0"
 lgalloc = { version = "0.6", optional = true }
-libc = { version = "0.2.176", optional = true }
+libc = { version = "0.2.177", optional = true }
 mz-ore-proc = { path = "../ore-proc", default-features = false }
 num = "0.4.3"
 num-traits = { version = "0.2", optional = true }
diff --git a/src/persist/Cargo.toml b/src/persist/Cargo.toml
index 79d447d10f1ce..4bc624808ed11 100644
--- a/src/persist/Cargo.toml
+++ b/src/persist/Cargo.toml
@@ -27,9 +27,9 @@ arrow = { version = "55.2.0", default-features = false }
 async-trait = "0.1.89"
 async-stream = "0.3.6"
 aws-config = { version = "1.2.0", default-features = false }
-aws-credential-types = { version = "1.2.7", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.8", features = ["hardcoded-credentials"] }
 aws-sdk-s3 = { version = "1.48.0", default-features = false, features = ["rt-tokio"] }
-aws-types = "1.3.7"
+aws-types = "1.3.9"
 azure_identity = { version = "0.21.0" }
 azure_storage = { version = "0.21.0" }
 azure_storage_blobs = { version = "0.21.0" }
diff --git a/src/prof-http/Cargo.toml b/src/prof-http/Cargo.toml
index e96a48e5d3052..138402142bbaa 100644
--- a/src/prof-http/Cargo.toml
+++ b/src/prof-http/Cargo.toml
@@ -14,7 +14,7 @@ askama = { version = "0.12.1", default-features = false, features = ["config", "
 axum = "0.7.5"
 axum-extra = { version = "0.9.3", features = ["typed-header"] }
 bytesize = "1.3.0"
-cfg-if = "1.0.3"
+cfg-if = "1.0.4"
 headers = "0.4.1"
 http = "1.2.0"
 include_dir = "0.7.4"
diff --git a/src/repr/Cargo.toml b/src/repr/Cargo.toml
index b47c2c6acc5d6..429ac097aa9a7 100644
--- a/src/repr/Cargo.toml
+++ b/src/repr/Cargo.toml
@@ -31,7 +31,7 @@ arrow = { version = "55.2.0", default-features = false }
 bitflags = "1.3.2"
 bytemuck = { version = "1.23.1", features = ["latest_stable_rust"] }
 bytes = "1.10.1"
-cfg-if = "1.0.3"
+cfg-if = "1.0.4"
 columnar = "0.10.2"
 columnation = "0.1.0"
 chrono = { version = "0.4.39", default-features = false, features = ["serde", "std"] }
diff --git a/src/storage-operators/Cargo.toml b/src/storage-operators/Cargo.toml
index d427f8fca32ca..2a49aa57c3bcb 100644
--- a/src/storage-operators/Cargo.toml
+++ b/src/storage-operators/Cargo.toml
@@ -14,7 +14,7 @@ anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 async-compression = { version = "0.4.27", features = ["bzip2-sys", "gzip", "tokio", "xz", "zstd"] }
 async-stream = "0.3.6"
-aws-types = "1.3.7"
+aws-types = "1.3.9"
 aws-smithy-types = "1.1.8"
 aws-sdk-s3 = { version = "1.48.0", default-features = false }
 bytes = "1.10.1"
diff --git a/src/storage-types/Cargo.toml b/src/storage-types/Cargo.toml
index 45dcc4b8ac9aa..98e6a643616fc 100644
--- a/src/storage-types/Cargo.toml
+++ b/src/storage-types/Cargo.toml
@@ -18,9 +18,9 @@ anyhow = "1.0.100"
 arrow = { version = "55.2.0", default-features = false }
 async-trait = "0.1.89"
 aws-config = { version = "1.2.0", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.7", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.8", features = ["hardcoded-credentials"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
-aws-types = "1.3.7"
+aws-types = "1.3.9"
 bytes = "1.10.1"
 columnation = "0.1.0"
 dec = "0.4.8"
diff --git a/src/testdrive/Cargo.toml b/src/testdrive/Cargo.toml
index 9be6b57767eb2..94fa48a401f2a 100644
--- a/src/testdrive/Cargo.toml
+++ b/src/testdrive/Cargo.toml
@@ -13,9 +13,9 @@ workspace = true
 anyhow = "1.0.100"
 async-compression = { version = "0.4.27", features = ["bzip2-sys", "gzip", "tokio", "xz", "zstd"] }
 async-trait = "0.1.89"
-aws-credential-types = { version = "1.2.7", features = ["hardcoded-credentials"] }
+aws-credential-types = { version = "1.2.8", features = ["hardcoded-credentials"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
-aws-types = "1.3.7"
+aws-types = "1.3.9"
 arrow = { version = "55.2.0", default-features = false }
 byteorder = "1.5"
 bytes = "1.10.1"
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index 634be3dfb58b1..1b235b021cc20 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -22,15 +22,15 @@ aho-corasick = { version = "1.1.3" }
 arrayvec = { version = "0.7.6" }
 async-compression = { git = "https://github.com/MaterializeInc/async-compression.git", rev = "fe7411eb6104a02a89e2c3a76ab326dd6594214d", default-features = false, features = ["brotli", "bzip2-sys", "gzip", "tokio", "xz", "zlib", "zstd"] }
 aws-config = { version = "1.2.1", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.7", default-features = false, features = ["hardcoded-credentials", "test-util"] }
-aws-runtime = { version = "1.5.11", default-features = false, features = ["event-stream", "http-02x"] }
+aws-credential-types = { version = "1.2.8", default-features = false, features = ["hardcoded-credentials", "test-util"] }
+aws-runtime = { version = "1.5.12", default-features = false, features = ["event-stream", "http-02x"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
-aws-sigv4 = { version = "1.3.4", features = ["http0-compat", "sign-eventstream"] }
-aws-smithy-async = { version = "1.2.5", default-features = false, features = ["rt-tokio"] }
+aws-sigv4 = { version = "1.3.5", features = ["http0-compat", "sign-eventstream"] }
+aws-smithy-async = { version = "1.2.6", default-features = false, features = ["rt-tokio"] }
 aws-smithy-http = { version = "0.60.12", default-features = false, features = ["event-stream"] }
-aws-smithy-runtime = { version = "1.9.2", default-features = false, features = ["client", "connector-hyper-0-14-x"] }
-aws-smithy-runtime-api = { version = "1.9.0", features = ["client", "http-02x", "http-auth", "test-util"] }
-aws-smithy-types = { version = "1.3.2", default-features = false, features = ["byte-stream-poll-next", "http-body-0-4-x", "http-body-1-x", "rt-tokio", "test-util"] }
+aws-smithy-runtime = { version = "1.9.3", default-features = false, features = ["client", "connector-hyper-0-14-x"] }
+aws-smithy-runtime-api = { version = "1.9.1", features = ["client", "http-02x", "http-auth", "test-util"] }
+aws-smithy-types = { version = "1.3.3", default-features = false, features = ["byte-stream-poll-next", "http-body-0-4-x", "http-body-1-x", "rt-tokio", "test-util"] }
 axum = { version = "0.7.9", features = ["ws"] }
 axum-core = { version = "0.4.5", default-features = false, features = ["tracing"] }
 base16ct = { version = "0.2.0", default-features = false, features = ["alloc"] }
@@ -78,7 +78,7 @@ hyper = { version = "0.14.27", features = ["client", "http1", "http2", "stream",
 hyper-util = { version = "0.1.17", features = ["client-legacy", "server-auto", "service", "tracing"] }
 insta = { version = "1.43.2", features = ["json"] }
 itertools = { version = "0.13.0" }
-libc = { version = "0.2.176", features = ["extra_traits", "use_std"] }
+libc = { version = "0.2.177", features = ["extra_traits", "use_std"] }
 libz-sys = { version = "1.1.22", features = ["static"] }
 lock_api = { version = "0.4.14", features = ["serde"] }
 log = { version = "0.4.28", default-features = false, features = ["std"] }
@@ -154,6 +154,7 @@ unicode-bidi = { version = "0.3.18" }
 unicode-normalization = { version = "0.1.24" }
 url = { version = "2.5.4", features = ["serde"] }
 uuid = { version = "1.18.1", features = ["serde", "v4", "v5", "v7"] }
+winnow = { version = "0.7.13" }
 zeroize = { version = "1.8.2", features = ["serde"] }
 zstd = { version = "0.13.3" }
 zstd-safe = { version = "7.2.4", default-features = false, features = ["arrays", "legacy", "std", "zdict_builder"] }
@@ -165,15 +166,15 @@ aho-corasick = { version = "1.1.3" }
 arrayvec = { version = "0.7.6" }
 async-compression = { git = "https://github.com/MaterializeInc/async-compression.git", rev = "fe7411eb6104a02a89e2c3a76ab326dd6594214d", default-features = false, features = ["brotli", "bzip2-sys", "gzip", "tokio", "xz", "zlib", "zstd"] }
 aws-config = { version = "1.2.1", default-features = false, features = ["sso"] }
-aws-credential-types = { version = "1.2.7", default-features = false, features = ["hardcoded-credentials", "test-util"] }
-aws-runtime = { version = "1.5.11", default-features = false, features = ["event-stream", "http-02x"] }
+aws-credential-types = { version = "1.2.8", default-features = false, features = ["hardcoded-credentials", "test-util"] }
+aws-runtime = { version = "1.5.12", default-features = false, features = ["event-stream", "http-02x"] }
 aws-sdk-sts = { version = "1.41.0", default-features = false, features = ["rt-tokio"] }
-aws-sigv4 = { version = "1.3.4", features = ["http0-compat", "sign-eventstream"] }
-aws-smithy-async = { version = "1.2.5", default-features = false, features = ["rt-tokio"] }
+aws-sigv4 = { version = "1.3.5", features = ["http0-compat", "sign-eventstream"] }
+aws-smithy-async = { version = "1.2.6", default-features = false, features = ["rt-tokio"] }
 aws-smithy-http = { version = "0.60.12", default-features = false, features = ["event-stream"] }
-aws-smithy-runtime = { version = "1.9.2", default-features = false, features = ["client", "connector-hyper-0-14-x"] }
-aws-smithy-runtime-api = { version = "1.9.0", features = ["client", "http-02x", "http-auth", "test-util"] }
-aws-smithy-types = { version = "1.3.2", default-features = false, features = ["byte-stream-poll-next", "http-body-0-4-x", "http-body-1-x", "rt-tokio", "test-util"] }
+aws-smithy-runtime = { version = "1.9.3", default-features = false, features = ["client", "connector-hyper-0-14-x"] }
+aws-smithy-runtime-api = { version = "1.9.1", features = ["client", "http-02x", "http-auth", "test-util"] }
+aws-smithy-types = { version = "1.3.3", default-features = false, features = ["byte-stream-poll-next", "http-body-0-4-x", "http-body-1-x", "rt-tokio", "test-util"] }
 axum = { version = "0.7.9", features = ["ws"] }
 axum-core = { version = "0.4.5", default-features = false, features = ["tracing"] }
 base16ct = { version = "0.2.0", default-features = false, features = ["alloc"] }
@@ -185,7 +186,7 @@ brotli = { version = "8.0.2" }
 bstr = { version = "1.12.0" }
 bytemuck = { version = "1.23.1", default-features = false, features = ["latest_stable_rust"] }
 bytes = { version = "1.10.1", features = ["serde"] }
-cc = { version = "1.2.40", default-features = false, features = ["parallel"] }
+cc = { version = "1.2.41", default-features = false, features = ["parallel"] }
 chrono = { version = "0.4.41", features = ["serde"] }
 clang-sys = { version = "1.3.0", default-features = false, features = ["clang_11_0", "runtime"] }
 clap = { version = "4.5.23", features = ["derive", "env", "string", "wrap_help"] }
@@ -224,7 +225,7 @@ hyper = { version = "0.14.27", features = ["client", "http1", "http2", "stream",
 hyper-util = { version = "0.1.17", features = ["client-legacy", "server-auto", "service", "tracing"] }
 insta = { version = "1.43.2", features = ["json"] }
 itertools = { version = "0.13.0" }
-libc = { version = "0.2.176", features = ["extra_traits", "use_std"] }
+libc = { version = "0.2.177", features = ["extra_traits", "use_std"] }
 libz-sys = { version = "1.1.22", features = ["static"] }
 lock_api = { version = "0.4.14", features = ["serde"] }
 log = { version = "0.4.28", default-features = false, features = ["std"] }
@@ -303,6 +304,7 @@ unicode-bidi = { version = "0.3.18" }
 unicode-normalization = { version = "0.1.24" }
 url = { version = "2.5.4", features = ["serde"] }
 uuid = { version = "1.18.1", features = ["serde", "v4", "v5", "v7"] }
+winnow = { version = "0.7.13" }
 zeroize = { version = "1.8.2", features = ["serde"] }
 zstd = { version = "0.13.3" }
 zstd-safe = { version = "7.2.4", default-features = false, features = ["arrays", "legacy", "std", "zdict_builder"] }