diff --git a/Cargo.lock b/Cargo.lock
index ed86ed68..bc2aad74 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2234,9 +2234,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.147"
+version = "1.0.149"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6af14725505314343e673e9ecb7cd7e8a36aa9791eb936235a3567cc31447ae4"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
 dependencies = [
  "itoa",
  "memchr",
@@ -3396,6 +3396,6 @@ checksum = "c394b5bd0c6f669e7275d9c20aa90ae064cb22e75a1cad54e1b34088034b149f"
 
 [[package]]
 name = "zmij"
-version = "0.1.7"
+version = "1.0.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9e404bcd8afdaf006e529269d3e85a743f9480c3cef60034d77860d02964f3ba"
+checksum = "2fc5a66a20078bf1251bde995aa2fdcc4b800c70b5d92dd2c62abc5c60f679f8"
diff --git a/core/Cargo.toml b/core/Cargo.toml
index d37d0a24..ca0e13ba 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -25,7 +25,7 @@ hkdf = "^0.12.4"
 lazy_static = "^1.5"
 rand = "^0.8"
 serde = { version = "^1.0.203", features = ["derive"], optional = true }
-serde_json = { version = "^1.0.147", optional = true }
+serde_json = { version = "^1.0.149", optional = true }
 sha-1 = "^0.10.1"
 sha2 = "^0.10.9"
 subtle = "^2.4"
diff --git a/integration/gcpkms/Cargo.toml b/integration/gcpkms/Cargo.toml
index 70f7026d..3f9ed996 100644
--- a/integration/gcpkms/Cargo.toml
+++ b/integration/gcpkms/Cargo.toml
@@ -22,7 +22,7 @@ hyper-rustls = "^0.22.1"
 lazy_static = "^1.5"
 percent-encoding = "^2.3"
 serde = { version = "^1.0", features = ["derive"] }
-serde_json = "^1.0.147"
+serde_json = "^1.0.149"
 tink-core = "^0.3"
 tokio = "^1.48"
 yup-oauth2 = "^5.1"
diff --git a/tests/Cargo.toml b/tests/Cargo.toml
index 04c1b936..a59281be 100644
--- a/tests/Cargo.toml
+++ b/tests/Cargo.toml
@@ -19,7 +19,7 @@ p256 = { version = "^0.13.2", features = ["ecdsa", "pkcs8"] }
 rand = "^0.8"
 regex = "^1.12.2"
 serde = { version = "^1.0.203", features = ["derive"] }
-serde_json = "^1.0.147"
+serde_json = "^1.0.149"
 tink-core = { version = "^0.3", features = ["insecure", "json"] }
 tink-aead = "^0.3"
 tink-daead = "^0.3"