diff --git a/Cargo.lock b/Cargo.lock
index c90b149c..738eb29b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6005,9 +6005,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.29.0"
+version = "1.29.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "374442f06ee49c3a28a8fc9f01a2596fed7559c6b99b31279c3261778e77d84f"
+checksum = "532826ff75199d5833b9d2c5fe410f29235e25704ee5f0ef599fb51c21f4a4da"
 dependencies = [
  "autocfg 1.1.0",
  "backtrace",
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 2a9624c6..8a4cee1a 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -23,7 +23,7 @@ serde_with = "3.0.0"
 serde_urlencoded = "0.7.1"
 serde_json = "1.0.99"
 thiserror = "1.0.40"
-tokio = "1.29.0"
+tokio = "1.29.1"
 tower = { version = "0.4.13", features = ["util"] }
 tracing = "0.1.37"
 url = "2.4.0"
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 55f7ca29..3888103b 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -23,7 +23,7 @@ rustls = "0.21.2"
 serde_json = "1.0.99"
 serde_yaml = "0.9.22"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
-tokio = { version = "1.29.0", features = ["full"] }
+tokio = { version = "1.29.1", features = ["full"] }
 tower = { version = "0.4.13", features = ["full"] }
 tower-http = { version = "0.4.1", features = ["fs", "compression-full"] }
 url = "2.4.0"
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index 100ec9c5..b7879a96 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -6,7 +6,7 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-tokio = { version = "1.29.0", features = ["fs", "rt"] }
+tokio = { version = "1.29.1", features = ["fs", "rt"] }
 tracing = "0.1.37"
 async-trait = "0.1.68"
 
diff --git a/crates/graphql/Cargo.toml b/crates/graphql/Cargo.toml
index ab616989..35cc8acd 100644
--- a/crates/graphql/Cargo.toml
+++ b/crates/graphql/Cargo.toml
@@ -13,7 +13,7 @@ chrono = "0.4.26"
 lettre = { version = "0.10.4", default-features = false  }
 serde = { version = "1.0.164", features = ["derive"] }
 thiserror = "1.0.40"
-tokio = { version = "1.29.0", features = ["sync"] }
+tokio = { version = "1.29.1", features = ["sync"] }
 tracing = "0.1.37"
 tower = { version = "0.4.13", features = ["util"] }
 ulid = "1.0.0"
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 79b92a2d..607be976 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 # Async runtime
-tokio = { version = "1.29.0", features = ["macros"] }
+tokio = { version = "1.29.1", features = ["macros"] }
 futures-util = "0.3.28"
 
 # Logging and tracing
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index 0d58ce40..0ce70810 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -24,7 +24,7 @@ serde = "1.0.164"
 serde_json = "1.0.99"
 serde_urlencoded = "0.7.1"
 thiserror = "1.0.40"
-tokio = { version = "1.29.0", features = ["sync", "parking_lot"], optional = true }
+tokio = { version = "1.29.1", features = ["sync", "parking_lot"], optional = true }
 tower = { version = "0.4.13", features = [] }
 tower-http = { version = "0.4.1", features = ["cors"] }
 tracing = "0.1.37"
@@ -37,7 +37,7 @@ mas-tower = { path = "../tower" }
 [dev-dependencies]
 anyhow = "1.0.71"
 serde = { version = "1.0.164", features = ["derive"] }
-tokio = { version = "1.29.0", features = ["macros", "rt"] }
+tokio = { version = "1.29.1", features = ["macros", "rt"] }
 tower = { version = "0.4.13", features = ["util"] }
 
 [features]
diff --git a/crates/iana-codegen/Cargo.toml b/crates/iana-codegen/Cargo.toml
index c6893c06..382dbae0 100644
--- a/crates/iana-codegen/Cargo.toml
+++ b/crates/iana-codegen/Cargo.toml
@@ -14,6 +14,6 @@ csv = "1.2.2"
 futures-util = "0.3.28"
 hyper = { version = "0.14.27", features = ["tcp", "client", "http1"] }
 serde = { version = "1.0.164", features = ["derive"] }
-tokio = { version = "1.29.0", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
+tokio = { version = "1.29.1", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
 tracing = "0.1.37"
 tracing-subscriber = "0.3.17"
diff --git a/crates/listener/Cargo.toml b/crates/listener/Cargo.toml
index b3427140..723581a0 100644
--- a/crates/listener/Cargo.toml
+++ b/crates/listener/Cargo.toml
@@ -12,7 +12,7 @@ http-body = "0.4.5"
 hyper = { version = "0.14.27", features = ["server", "http1", "http2", "tcp"] }
 pin-project-lite = "0.2.9"
 thiserror = "1.0.40"
-tokio = { version = "1.29.0", features = ["net", "rt", "macros", "signal", "time"] }
+tokio = { version = "1.29.1", features = ["net", "rt", "macros", "signal", "time"] }
 tokio-rustls = "0.24.1"
 tower-http = { version = "0.4.1", features = ["add-extension"] }
 tower-service = "0.3.2"
@@ -22,7 +22,7 @@ libc = "0.2.147"
 [dev-dependencies]
 anyhow = "1.0.71"
 rustls-pemfile = "1.0.3"
-tokio = { version = "1.29.0", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
+tokio = { version = "1.29.1", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
 tokio-test = "0.4.2"
 tracing-subscriber = "0.3.17"
 
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index 4d5820f7..67f9238a 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -35,7 +35,7 @@ serde_json = "1.0.99"
 serde_urlencoded = "0.7.1"
 serde_with = "3.0.0"
 thiserror = "1.0.40"
-tokio = { version = "1.29.0", features = ["rt", "macros", "rt-multi-thread"] }
+tokio = { version = "1.29.1", features = ["rt", "macros", "rt-multi-thread"] }
 tower = { version = "0.4.13", features = ["full"] }
 tracing = "0.1.37"
 url = { version = "2.4.0", features = ["serde"] }
diff --git a/crates/policy/Cargo.toml b/crates/policy/Cargo.toml
index e426093e..8e21a654 100644
--- a/crates/policy/Cargo.toml
+++ b/crates/policy/Cargo.toml
@@ -11,7 +11,7 @@ opa-wasm = { git = "https://github.com/matrix-org/rust-opa-wasm.git" }
 serde = { version = "1.0.164", features = ["derive"] }
 serde_json = "1.0.99"
 thiserror = "1.0.40"
-tokio = { version = "1.29.0", features = ["io-util"] }
+tokio = { version = "1.29.1", features = ["io-util"] }
 tracing = "0.1.37"
 wasmtime = { version = "9.0.4", default-features = false, features = ["async", "cranelift"] }
 
@@ -19,7 +19,7 @@ mas-data-model = { path = "../data-model" }
 oauth2-types = { path = "../oauth2-types" }
 
 [dev-dependencies]
-tokio = { version = "1.29.0", features = ["fs", "rt", "macros"] }
+tokio = { version = "1.29.1", features = ["fs", "rt", "macros"] }
 
 [features]
 cache = ["wasmtime/cache"]
diff --git a/crates/spa/Cargo.toml b/crates/spa/Cargo.toml
index 7efe79ff..f225e5e4 100644
--- a/crates/spa/Cargo.toml
+++ b/crates/spa/Cargo.toml
@@ -14,7 +14,7 @@ headers = "0.3.8"
 http = "0.2.9"
 tower-service = "0.3.2"
 tower-http = { version = "0.4.1", features = ["fs"] }
-tokio = { version = "1.29.0", features = ["fs"] }
+tokio = { version = "1.29.1", features = ["fs"] }
 
 [[bin]]
 name = "render"
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index f155f438..bc25c120 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 tracing = "0.1.37"
-tokio = { version = "1.29.0", features = ["macros", "rt"] }
+tokio = { version = "1.29.1", features = ["macros", "rt"] }
 
 anyhow = "1.0.71"
 thiserror = "1.0.40"
diff --git a/crates/tower/Cargo.toml b/crates/tower/Cargo.toml
index 3f0bc020..13c0a19a 100644
--- a/crates/tower/Cargo.toml
+++ b/crates/tower/Cargo.toml
@@ -11,7 +11,7 @@ http = "0.2.9"
 tracing = "0.1.37"
 tracing-opentelemetry = "0.19.0"
 tower = "0.4.13"
-tokio = { version = "1.29.0", features = ["time"] }
+tokio = { version = "1.29.1", features = ["time"] }
 opentelemetry = { version = "0.19.0", features = ["metrics"] }
 opentelemetry-http = "0.8.0"
 pin-project-lite = "0.2.9"