diff --git a/Cargo.lock b/Cargo.lock
index 141633e5a69..7ec8aba673b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -7,7 +7,7 @@ name = "acpi_tables"
 version = "0.1.0"
 dependencies = [
  "displaydoc",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "vm-memory",
  "zerocopy",
 ]
@@ -201,7 +201,7 @@ version = "0.69.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "271383c67ccabffb7381723dea0672a673f292304fcb45c01cc648c7a8d58088"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "cexpr",
  "clang-sys",
  "itertools 0.12.1",
@@ -226,9 +226,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
 
 [[package]]
 name = "bitflags"
-version = "2.9.2"
+version = "2.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a65b545ab31d687cff52899d4890855fec459eb6afe0da6417b8a18da87aa29"
+checksum = "34efbcccd345379ca2868b2b2c9d3782e9cc58ba87bc7d79d5b53d9c9ae6f25d"
 
 [[package]]
 name = "bumpalo"
@@ -260,9 +260,9 @@ checksum = "37b2a672a2cb129a2e41c10b1224bb368f9f37a2b16b612598138befd7b37eb5"
 
 [[package]]
 name = "cc"
-version = "1.2.33"
+version = "1.2.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ee0f8803222ba5a7e2777dd72ca451868909b1ac410621b676adf07280e9b5f"
+checksum = "42bc4aea80032b7bf409b0bc7ccad88853858911b7713a8062fdc0623867bedc"
 dependencies = [
  "jobserver",
  "libc",
@@ -280,9 +280,9 @@ dependencies = [
 
 [[package]]
 name = "cfg-if"
-version = "1.0.1"
+version = "1.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9555578bc9e57714c812a1f84e4fc5b4d21fcb063490c624de019f7464c91268"
+checksum = "2fd1289c04a9ea8cb22300a459a72a385d7c73d3259e2ed7dcb2af674838cfa9"
 
 [[package]]
 name = "ciborium"
@@ -419,7 +419,7 @@ dependencies = [
  "log-instrument",
  "serde",
  "serde_json",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "vmm",
  "vmm-sys-util",
 ]
@@ -609,7 +609,7 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "timerfd",
  "userfaultfd",
  "utils",
@@ -629,7 +629,7 @@ version = "0.7.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b686b198dfaa4109ebd0443d2841bc521e4b4b2915f1d84b3bb50332a8cdc1ae"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "cfg-if",
  "log",
  "managed",
@@ -718,9 +718,9 @@ dependencies = [
 
 [[package]]
 name = "indexmap"
-version = "2.10.0"
+version = "2.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fe4cd85333e22411419a0bcae1297d25e58c9443848b11dc6a86fefe8c78a661"
+checksum = "f2481980430f9f78649238835720ddccc57e52df14ffce1c6f37391d61b563e9"
 dependencies = [
  "equivalent",
  "hashbrown",
@@ -781,7 +781,7 @@ dependencies = [
  "libc",
  "log-instrument",
  "regex",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "utils",
  "vmm-sys-util",
 ]
@@ -812,9 +812,9 @@ dependencies = [
 
 [[package]]
 name = "jobserver"
-version = "0.1.33"
+version = "0.1.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38f262f097c174adebe41eb73d66ae9c06b2844fb0da69969647bbddd9b0538a"
+checksum = "9afb3de4395d6b3e67a780b6de64b51c978ecf11cb9a462c66be7d4ca9039d33"
 dependencies = [
  "getrandom",
  "libc",
@@ -847,7 +847,7 @@ version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0e00243d27a20feb05cf001ae52ddc79831ac70c020f215ba1153ff9270b650a"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "kvm-bindings",
  "libc",
  "vmm-sys-util",
@@ -965,7 +965,7 @@ version = "0.27.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2eb04e9c688eff1c89d72b407f168cf79bb9e867a9d3323ed6c01519eb9cc053"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "cfg-if",
  "libc",
 ]
@@ -1029,7 +1029,7 @@ dependencies = [
  "log",
  "serde",
  "serde_test",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "vm-allocator",
  "vm-device",
  "vm-memory",
@@ -1074,9 +1074,9 @@ dependencies = [
 
 [[package]]
 name = "prettyplease"
-version = "0.2.36"
+version = "0.2.37"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff24dfcda44452b9816fff4cd4227e1bb73ff5a2f1bc1105aa92fb8565ce44d2"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
 dependencies = [
  "proc-macro2",
  "syn",
@@ -1097,7 +1097,7 @@ version = "1.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6fcdab19deb5195a31cf7726a210015ff1496ba1464fd42cb4f537b8b01b471f"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "lazy_static",
  "num-traits",
  "rand",
@@ -1167,16 +1167,16 @@ dependencies = [
  "displaydoc",
  "libc",
  "log-instrument",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "utils",
  "vmm-sys-util",
 ]
 
 [[package]]
 name = "regex"
-version = "1.11.1"
+version = "1.11.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191"
+checksum = "23d7fd106d8c02486a8d64e778353d1cffe08ce79ac2e82f540c86d0facf6912"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -1186,9 +1186,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.4.9"
+version = "0.4.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908"
+checksum = "6b9458fa0bfeeac22b5ca447c63aaf45f28439a709ccd244698632f9aa6394d6"
 dependencies = [
  "aho-corasick",
  "memchr",
@@ -1197,9 +1197,9 @@ dependencies = [
 
 [[package]]
 name = "regex-syntax"
-version = "0.8.5"
+version = "0.8.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
+checksum = "caf4aa5b0f434c91fe5c7f1ecb6a5ece2130b02ad2a590589dda5146df959001"
 
 [[package]]
 name = "rustc-hash"
@@ -1213,7 +1213,7 @@ version = "0.38.44"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "errno",
  "libc",
  "linux-raw-sys",
@@ -1251,7 +1251,7 @@ dependencies = [
  "libc",
  "serde",
  "serde_json",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "zerocopy",
 ]
 
@@ -1286,9 +1286,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.142"
+version = "1.0.143"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "030fedb782600dcbd6f02d479bf0d817ac3bb40d644745b769d6a96bc3afc5a7"
+checksum = "d401abef1d108fbd9cbaebc3e46611f4b1021f714a0597a71f41ee463f5f4a5a"
 dependencies = [
  "itoa",
  "memchr",
@@ -1336,7 +1336,7 @@ dependencies = [
  "libc",
  "log-instrument",
  "semver",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "utils",
  "vmm",
  "vmm-sys-util",
@@ -1376,11 +1376,11 @@ dependencies = [
 
 [[package]]
 name = "thiserror"
-version = "2.0.15"
+version = "2.0.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "80d76d3f064b981389ecb4b6b7f45a0bf9fdac1d5b9204c7bd6714fecc302850"
+checksum = "3467d614147380f2e4e374161426ff399c91084acd2363eaf549172b3d5e60c0"
 dependencies = [
- "thiserror-impl 2.0.15",
+ "thiserror-impl 2.0.16",
 ]
 
 [[package]]
@@ -1396,9 +1396,9 @@ dependencies = [
 
 [[package]]
 name = "thiserror-impl"
-version = "2.0.15"
+version = "2.0.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "44d29feb33e986b6ea906bd9c3559a856983f92371b3eaa5e83782a351623de0"
+checksum = "6c5e1be1c48b9172ee610da68fd9cd2770e7a4056cb3fc98710ee6906f0c7960"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -1515,7 +1515,7 @@ version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5b3a8a0cb358f7d1b7ee9b6784be122b6f51248a6d9e214d555beb9b44c72aea"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "cfg-if",
  "libc",
  "nix",
@@ -1547,7 +1547,7 @@ dependencies = [
  "displaydoc",
  "libc",
  "log-instrument",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -1574,7 +1574,7 @@ version = "0.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2a4dcad85a129d97d5d4b2f3c47a4affdeedd76bdcd02094bcb5d9b76cac2d05"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "libc",
  "uuid",
  "vm-memory",
@@ -1595,7 +1595,7 @@ checksum = "040a65b0c29f298d71ca45dd52d02b0d0ddc15b9b97d95dfeebe67d6fdd42a28"
 dependencies = [
  "libc",
  "serde",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
 ]
 
 [[package]]
@@ -1640,7 +1640,7 @@ dependencies = [
  "aws-lc-rs",
  "base64",
  "bincode",
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
  "byteorder",
  "crc64",
  "criterion",
@@ -1665,7 +1665,7 @@ dependencies = [
  "serde",
  "serde_json",
  "slab",
- "thiserror 2.0.15",
+ "thiserror 2.0.16",
  "timerfd",
  "userfaultfd",
  "utils",
@@ -1799,11 +1799,11 @@ checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
 
 [[package]]
 name = "winapi-util"
-version = "0.1.9"
+version = "0.1.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb"
+checksum = "0978bf7171b3d90bac376700cb56d606feb40f251a475a5d6634613564460b22"
 dependencies = [
- "windows-sys 0.59.0",
+ "windows-sys 0.60.2",
 ]
 
 [[package]]
@@ -1960,9 +1960,9 @@ checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
 
 [[package]]
 name = "winnow"
-version = "0.7.12"
+version = "0.7.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f3edebf492c8125044983378ecb5766203ad3b4c2f7a922bd7dd207f6d443e95"
+checksum = "21a0236b59786fed61e2a80582dd500fe61f18b5dca67a4a067d0bc9039339cf"
 
 [[package]]
 name = "wit-bindgen-rt"
@@ -1970,7 +1970,7 @@ version = "0.39.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1"
 dependencies = [
- "bitflags 2.9.2",
+ "bitflags 2.9.3",
 ]
 
 [[package]]
diff --git a/src/acpi-tables/Cargo.toml b/src/acpi-tables/Cargo.toml
index f64e72c3dfd..e401cf810aa 100644
--- a/src/acpi-tables/Cargo.toml
+++ b/src/acpi-tables/Cargo.toml
@@ -14,7 +14,7 @@ bench = false
 
 [dependencies]
 displaydoc = "0.2.5"
-thiserror = "2.0.15"
+thiserror = "2.0.16"
 vm-memory = { version = "0.16.2", features = ["backend-mmap", "backend-bitmap"] }
 zerocopy = { version = "0.8.26", features = ["derive"] }
 
diff --git a/src/cpu-template-helper/Cargo.toml b/src/cpu-template-helper/Cargo.toml
index 2bc151a8b69..5168663d545 100644
--- a/src/cpu-template-helper/Cargo.toml
+++ b/src/cpu-template-helper/Cargo.toml
@@ -18,8 +18,8 @@ displaydoc = "0.2.5"
 libc = "0.2.175"
 log-instrument = { path = "../log-instrument", optional = true }
 serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.142"
-thiserror = "2.0.15"
+serde_json = "1.0.143"
+thiserror = "2.0.16"
 
 vmm = { path = "../vmm" }
 vmm-sys-util = "0.14.0"
diff --git a/src/firecracker/Cargo.toml b/src/firecracker/Cargo.toml
index 5fc709bceee..c83ea50266a 100644
--- a/src/firecracker/Cargo.toml
+++ b/src/firecracker/Cargo.toml
@@ -27,8 +27,8 @@ log-instrument = { path = "../log-instrument", optional = true }
 micro_http = { git = "https://github.com/firecracker-microvm/micro-http" }
 serde = { version = "1.0.219", features = ["derive"] }
 serde_derive = "1.0.136"
-serde_json = "1.0.142"
-thiserror = "2.0.15"
+serde_json = "1.0.143"
+thiserror = "2.0.16"
 timerfd = "1.6.0"
 utils = { path = "../utils" }
 vmm = { path = "../vmm" }
@@ -37,12 +37,12 @@ vmm-sys-util = { version = "0.14.0", features = ["with-serde"] }
 [build-dependencies]
 seccompiler = { path = "../seccompiler" }
 serde = { version = "1.0.219" }
-serde_json = "1.0.142"
+serde_json = "1.0.143"
 
 [dev-dependencies]
 cargo_toml = "0.22.3"
 libc = "0.2.175"
-regex = { version = "1.11.1", default-features = false, features = [
+regex = { version = "1.11.2", default-features = false, features = [
   "std",
   "unicode-perl",
 ] }
diff --git a/src/jailer/Cargo.toml b/src/jailer/Cargo.toml
index e009408fac0..8ff4eac8c5c 100644
--- a/src/jailer/Cargo.toml
+++ b/src/jailer/Cargo.toml
@@ -17,8 +17,8 @@ tracing = ["log-instrument", "utils/tracing"]
 [dependencies]
 libc = "0.2.175"
 log-instrument = { path = "../log-instrument", optional = true }
-regex = { version = "1.11.1", default-features = false, features = ["std"] }
-thiserror = "2.0.15"
+regex = { version = "1.11.2", default-features = false, features = ["std"] }
+thiserror = "2.0.16"
 vmm-sys-util = "0.14.0"
 
 utils = { path = "../utils" }
diff --git a/src/pci/Cargo.toml b/src/pci/Cargo.toml
index 2ade6884fde..f803fde87b1 100644
--- a/src/pci/Cargo.toml
+++ b/src/pci/Cargo.toml
@@ -17,7 +17,7 @@ displaydoc = "0.2.5"
 libc = "0.2.175"
 log = "0.4.27"
 serde = { version = "1.0.219", features = ["derive"] }
-thiserror = "2.0.15"
+thiserror = "2.0.16"
 vm-allocator = "0.1.3"
 vm-device = { path = "../vm-device" }
 vm-memory = { version = "0.16.1", features = [
diff --git a/src/rebase-snap/Cargo.toml b/src/rebase-snap/Cargo.toml
index bce0ec82ce1..4b4b753e7d8 100644
--- a/src/rebase-snap/Cargo.toml
+++ b/src/rebase-snap/Cargo.toml
@@ -16,7 +16,7 @@ tracing = ["log-instrument", "utils/tracing"]
 displaydoc = "0.2.5"
 libc = "0.2.175"
 log-instrument = { path = "../log-instrument", optional = true }
-thiserror = "2.0.15"
+thiserror = "2.0.16"
 vmm-sys-util = "0.14.0"
 
 utils = { path = "../utils" }
diff --git a/src/seccompiler/Cargo.toml b/src/seccompiler/Cargo.toml
index 29c37b4b7c8..e51094b9261 100644
--- a/src/seccompiler/Cargo.toml
+++ b/src/seccompiler/Cargo.toml
@@ -21,8 +21,8 @@ clap = { version = "4.5.45", features = ["derive", "string"] }
 displaydoc = "0.2.5"
 libc = "0.2.175"
 serde = { version = "1.0.219", features = ["derive"] }
-serde_json = "1.0.142"
-thiserror = "2.0.15"
+serde_json = "1.0.143"
+thiserror = "2.0.16"
 zerocopy = { version = "0.8.26" }
 
 [lints]
diff --git a/src/snapshot-editor/Cargo.toml b/src/snapshot-editor/Cargo.toml
index 847db6a6583..84bce49a413 100644
--- a/src/snapshot-editor/Cargo.toml
+++ b/src/snapshot-editor/Cargo.toml
@@ -20,7 +20,7 @@ fc_utils = { package = "utils", path = "../utils" }
 libc = "0.2.175"
 log-instrument = { path = "../log-instrument", optional = true }
 semver = "1.0.26"
-thiserror = "2.0.15"
+thiserror = "2.0.16"
 vmm = { path = "../vmm" }
 vmm-sys-util = "0.14.0"
 
diff --git a/src/utils/Cargo.toml b/src/utils/Cargo.toml
index 824bc3eeafa..80a4c1fa7c6 100644
--- a/src/utils/Cargo.toml
+++ b/src/utils/Cargo.toml
@@ -15,7 +15,7 @@ tracing = ["log-instrument"]
 displaydoc = "0.2.5"
 libc = "0.2.175"
 log-instrument = { path = "../log-instrument", optional = true }
-thiserror = "2.0.15"
+thiserror = "2.0.16"
 
 [lints]
 workspace = true
diff --git a/src/vmm/Cargo.toml b/src/vmm/Cargo.toml
index 25fe66c15b9..2588c52c1be 100644
--- a/src/vmm/Cargo.toml
+++ b/src/vmm/Cargo.toml
@@ -22,7 +22,7 @@ arrayvec = { version = "0.7.6", optional = true }
 aws-lc-rs = { version = "1.13.3", features = ["bindgen"] }
 base64 = "0.22.1"
 bincode = { version = "2.0.1", features = ["serde"] }
-bitflags = "2.9.2"
+bitflags = "2.9.3"
 byteorder = "1.5.0"
 crc64 = "2.0.0"
 derive_more = { version = "2.0.1", default-features = false, features = [
@@ -44,9 +44,9 @@ micro_http = { git = "https://github.com/firecracker-microvm/micro-http" }
 pci = { path = "../pci" }
 semver = { version = "1.0.26", features = ["serde"] }
 serde = { version = "1.0.219", features = ["derive", "rc"] }
-serde_json = "1.0.142"
+serde_json = "1.0.143"
 slab = "0.4.11"
-thiserror = "2.0.15"
+thiserror = "2.0.16"
 timerfd = "1.5.0"
 userfaultfd = "0.9.0"
 utils = { path = "../utils" }