diff --git a/Cargo.lock b/Cargo.lock
index d66e0543f21..afa8fec43fd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -211,9 +211,9 @@ dependencies = [
 
 [[package]]
 name = "async-compression"
-version = "0.4.22"
+version = "0.4.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59a194f9d963d8099596278594b3107448656ba73831c9d8c783e613ce86da64"
+checksum = "b37fc50485c4f3f736a4fb14199f6d5f5ba008d7f28fe710306c92780f004c07"
 dependencies = [
  "brotli",
  "flate2",
@@ -809,9 +809,9 @@ dependencies = [
 
 [[package]]
 name = "brotli"
-version = "7.0.0"
+version = "8.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc97b8f16f944bba54f0433f07e30be199b6dc2bd25937444bbad560bcea29bd"
+checksum = "cf19e729cdbd51af9a397fb9ef8ac8378007b797f8273cfbfdf45dcaa316167b"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
@@ -820,9 +820,9 @@ dependencies = [
 
 [[package]]
 name = "brotli-decompressor"
-version = "4.0.1"
+version = "5.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a45bd2e4095a8b518033b128020dd4a55aab1c0a381ba4404a472630f4bc362"
+checksum = "874bb8112abecc98cbd6d81ea4fa7e94fb9449648c93cc89aa40c81c24d7de03"
 dependencies = [
  "alloc-no-stdlib",
  "alloc-stdlib",
diff --git a/Cargo.toml b/Cargo.toml
index 5b122693c83..edb940415ad 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -49,7 +49,7 @@ doctest = true
 [dependencies]
 anyhow = "=1.0.98"
 astral-tokio-tar = "=0.5.2"
-async-compression = { version = "=0.4.22", default-features = false, features = ["gzip", "tokio"] }
+async-compression = { version = "=0.4.23", default-features = false, features = ["gzip", "tokio"] }
 async-trait = "=0.1.88"
 aws-credential-types = { version = "=1.2.2", features = ["hardcoded-credentials"] }
 aws-ip-ranges = "=0.1130.0"
diff --git a/crates/crates_io_cdn_logs/Cargo.toml b/crates/crates_io_cdn_logs/Cargo.toml
index b3876a16fc0..ef5f72187b4 100644
--- a/crates/crates_io_cdn_logs/Cargo.toml
+++ b/crates/crates_io_cdn_logs/Cargo.toml
@@ -9,7 +9,7 @@ workspace = true
 
 [dependencies]
 anyhow = "=1.0.98"
-async-compression = { version = "=0.4.22", features = ["gzip", "tokio", "zstd"] }
+async-compression = { version = "=0.4.23", features = ["gzip", "tokio", "zstd"] }
 chrono = { version = "=0.4.40", features = ["serde"] }
 derive_more = { version = "=2.0.1", features = ["deref"] }
 percent-encoding = "=2.3.1"
diff --git a/crates/crates_io_tarball/Cargo.toml b/crates/crates_io_tarball/Cargo.toml
index fea27a746d6..cba574b2db4 100644
--- a/crates/crates_io_tarball/Cargo.toml
+++ b/crates/crates_io_tarball/Cargo.toml
@@ -20,7 +20,7 @@ tar = { version = "=0.4.44", optional = true }
 thiserror = "=2.0.12"
 tracing = "=0.1.41"
 tokio = { version = "=1.44.2", features = ["io-util", "macros", "rt-multi-thread"] }
-async-compression = { version = "=0.4.22", default-features = false, features = ["gzip", "tokio"] }
+async-compression = { version = "=0.4.23", default-features = false, features = ["gzip", "tokio"] }
 futures-util = "=0.3.31"
 
 [dev-dependencies]