diff --git a/Cargo.lock b/Cargo.lock
index 0b908bf8..f60b4dcc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -161,9 +161,9 @@ checksum = "080e9890a082662b09c1ad45f567faeeb47f22b5fb23895fbe1e651e718e25ca"
 
 [[package]]
 name = "apalis-core"
-version = "0.4.7"
+version = "0.4.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5dbe998f2a77a65433e3e893f7ffba5b0c4835a9601ccab02aa868d1d3ed71eb"
+checksum = "1deb48475efcdece1f23a0553209ee842f264c2a5e9bcc4928bfa6a15a044cde"
 dependencies = [
  "async-stream",
  "async-trait",
@@ -184,9 +184,9 @@ dependencies = [
 
 [[package]]
 name = "apalis-cron"
-version = "0.4.7"
+version = "0.4.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9fc57450bd6a857d2370bb5504cf3d7f2a1fb85c7b68bdb7f92f50aac0e26aac"
+checksum = "43310b7e0132f9520b09224fb6faafb32eec82a672aa79c09e46b5b488ed505b"
 dependencies = [
  "apalis-core",
  "async-stream",
@@ -1086,18 +1086,18 @@ dependencies = [
 
 [[package]]
 name = "cranelift-bforest"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e7e56668d2263f92b691cb9e4a2fcb186ca0384941fe420484322fa559c3329"
+checksum = "d819feeda4c420a18f1e28236ca0ce1177b22bf7c8a44ddee92dfe40de15bcf0"
 dependencies = [
  "cranelift-entity",
 ]
 
 [[package]]
 name = "cranelift-codegen"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a9ff61938bf11615f55b80361288c68865318025632ea73c65c0b44fa16283c"
+checksum = "e9b8d03d5bdbca7e5f72b0e0a0f69933ed1f09e24be6c075aa6fe3f802b0cc0c"
 dependencies = [
  "bumpalo",
  "cranelift-bforest",
@@ -1116,33 +1116,33 @@ dependencies = [
 
 [[package]]
 name = "cranelift-codegen-meta"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "50656bf19e3d4a153b404ff835b8b59e924cfa3682ebe0d3df408994f37983f6"
+checksum = "a3fd3664e38e51649b17dc30cfdd561273fe2f590dcd013fb75d9eabc6272dfb"
 dependencies = [
  "cranelift-codegen-shared",
 ]
 
 [[package]]
 name = "cranelift-codegen-shared"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "388041deeb26109f1ea73c1812ea26bfd406c94cbce0bb5230aa44277e43b209"
+checksum = "4b031ec5e605828975952622b5a77d49126f20ffe88d33719a0af66b23a0fc36"
 
 [[package]]
 name = "cranelift-control"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39b7c512ffac527e5b5df9beae3d67ab85d07dca6d88942c16195439fedd1d3"
+checksum = "fada054d017cf2ed8f7ed2336e0517fc1b19e6825be1790de9eb00c94788362b"
 dependencies = [
  "arbitrary",
 ]
 
 [[package]]
 name = "cranelift-entity"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fdb25f573701284fe2bcf88209d405342125df00764b396c923e11eafc94d892"
+checksum = "177b6f94ae8de6348eb45bf977c79ab9e3c40fc3ac8cb7ed8109560ea39bee7d"
 dependencies = [
  "serde",
  "serde_derive",
@@ -1150,9 +1150,9 @@ dependencies = [
 
 [[package]]
 name = "cranelift-frontend"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e57374fd11d72cf9ffb85ff64506ed831440818318f58d09f45b4185e5e9c376"
+checksum = "ebebd23a69a23e3ddea78e98ff3a2de222e88c8e045d81ef4a72f042e0d79dbd"
 dependencies = [
  "cranelift-codegen",
  "log",
@@ -1162,15 +1162,15 @@ dependencies = [
 
 [[package]]
 name = "cranelift-isle"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae769b235f6ea2f86623a3ff157cc04a4ff131dc9fe782c2ebd35f272043581e"
+checksum = "1571bfc14df8966d12c6121b5325026591a4b4009e22fea0fe3765ab7cd33b96"
 
 [[package]]
 name = "cranelift-native"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3dc7bfb8f13a0526fe20db338711d9354729b861c336978380bb10f7f17dd207"
+checksum = "35a69c37e0c10b46fe5527f2397ac821046efbf5f7ec112c8b84df25712f465b"
 dependencies = [
  "cranelift-codegen",
  "libc",
@@ -1179,9 +1179,9 @@ dependencies = [
 
 [[package]]
 name = "cranelift-wasm"
-version = "0.102.1"
+version = "0.104.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2c5f41a4af931b756be05af0dd374ce200aae2d52cea16b0beb07e8b52732c35"
+checksum = "9b3fef8bbceb8cb56d3f1778b0418d75c5cf12ec571a35fc01eb41abb0227a25"
 dependencies = [
  "cranelift-codegen",
  "cranelift-entity",
@@ -3712,7 +3712,7 @@ checksum = "3fdb12b2476b595f9358c5161aa467c2438859caa136dec86c26fdd2efe17b92"
 [[package]]
 name = "opa-wasm"
 version = "0.1.0"
-source = "git+https://github.com/matrix-org/rust-opa-wasm.git#ba83f2d4391823b1b34de3e786d1454a0fc90efb"
+source = "git+https://github.com/matrix-org/rust-opa-wasm.git#3f577300ac712b585e03b54f0751080479ab4e12"
 dependencies = [
  "anyhow",
  "base64 0.21.7",
@@ -3725,6 +3725,7 @@ dependencies = [
  "form_urlencoded",
  "hex",
  "hmac",
+ "indexmap 2.2.2",
  "json-patch",
  "md-5",
  "parse-size",
@@ -5900,9 +5901,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.35.1"
+version = "1.36.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c89b4efa943be685f629b149f53829423f8f5531ea21249408e8e2f8671ec104"
+checksum = "61285f6515fa018fb2d1e46eb21223fff441ee8db5d0f1435e8ab4f5cdb80931"
 dependencies = [
  "backtrace",
  "bytes",
@@ -6507,18 +6508,18 @@ checksum = "4d91413b1c31d7539ba5ef2451af3f0b833a005eb27a631cec32bc0635a8602b"
 
 [[package]]
 name = "wasm-encoder"
-version = "0.36.2"
+version = "0.38.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "822b645bf4f2446b949776ffca47e2af60b167209ffb70814ef8779d299cd421"
+checksum = "0ad2b51884de9c7f4fe2fd1043fccb8dcad4b1e29558146ee57a144d15779f3f"
 dependencies = [
  "leb128",
 ]
 
 [[package]]
 name = "wasmparser"
-version = "0.116.1"
+version = "0.118.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a58e28b80dd8340cb07b8242ae654756161f6fc8d0038123d679b7b99964fa50"
+checksum = "95ee9723b928e735d53000dec9eae7b07a60e490c85ab54abb66659fc61bfcd9"
 dependencies = [
  "indexmap 2.2.2",
  "semver",
@@ -6526,9 +6527,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "642e12d108e800215263e3b95972977f473957923103029d7d617db701d67ba4"
+checksum = "910fabce77e660f0e0e41cfd5f69fc8bf020a025f059718846e918db7177f469"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6541,7 +6542,6 @@ dependencies = [
  "object",
  "once_cell",
  "paste",
- "psm",
  "serde",
  "serde_derive",
  "serde_json",
@@ -6554,23 +6554,23 @@ dependencies = [
  "wasmtime-fiber",
  "wasmtime-jit",
  "wasmtime-runtime",
- "windows-sys 0.48.0",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
 name = "wasmtime-asm-macros"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "beada8bb15df52503de0a4c58de4357bfd2f96d9a44a6e547bad11efdd988b47"
+checksum = "37288142e9b4a61655a3bcbdc7316c2e4bb9e776b10ce3dd758f8186b4469572"
 dependencies = [
  "cfg-if",
 ]
 
 [[package]]
 name = "wasmtime-cache"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aba5bf44d044d25892c03fb3534373936ee204141ff92bac8297787ac7f22318"
+checksum = "45cbd74a636f09d2108f9405c79857f061e19323e4abeed22e837cfe7b08a22b"
 dependencies = [
  "anyhow",
  "base64 0.21.7",
@@ -6582,15 +6582,15 @@ dependencies = [
  "serde_derive",
  "sha2",
  "toml",
- "windows-sys 0.48.0",
+ "windows-sys 0.52.0",
  "zstd",
 ]
 
 [[package]]
 name = "wasmtime-component-macro"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56ccba556991465cca68d5a54769684bcf489fb532059da55105f851642d52c1"
+checksum = "ad63de18eb42e586386b6091f787c82707cbd5ac5e9343216dba1976190cd03a"
 dependencies = [
  "anyhow",
  "proc-macro2",
@@ -6603,15 +6603,15 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-component-util"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05492a177a6006cb73f034d6e9a6fad6da55b23c4398835cb0012b5fa51ecf67"
+checksum = "7e0a160c0c44369aa4bee6d311a8e4366943bab1651040cc8b0fcec2c9eb8906"
 
 [[package]]
 name = "wasmtime-cranelift"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fe2e7532f1d6adbcc57e69bb6a7c503f0859076d07a9b4b6aabe8021ff8a05fd"
+checksum = "3734cc01b7cd37bc62fdbcd9529ca9547440052d4b3886cfdec3b8081a5d3647"
 dependencies = [
  "anyhow",
  "cfg-if",
@@ -6634,9 +6634,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-cranelift-shared"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8c98d5378a856cbf058d36278627dfabf0ed68a888142958c7ae8e6af507dafa"
+checksum = "e0eb33cd30c47844aa228d4d0030587e65c1108343f311fe9f7248b5bd9cb65c"
 dependencies = [
  "anyhow",
  "cranelift-codegen",
@@ -6650,9 +6650,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-environ"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6d33a9f421da810a070cd56add9bc51f852bd66afbb8b920489d6242f15b70e"
+checksum = "9a3a056b041fdea604f0972e2fae97958e7748d629a55180228348baefdfc217"
 dependencies = [
  "anyhow",
  "cranelift-entity",
@@ -6670,9 +6670,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-fiber"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "404741f4c6d7f4e043be2e8b466406a2aee289ccdba22bf9eba6399921121b97"
+checksum = "43987d0977c07f15c3608c2f255870c127ffd19e35eeedb1ac1dccedf9932a42"
 dependencies = [
  "anyhow",
  "cc",
@@ -6680,14 +6680,14 @@ dependencies = [
  "rustix 0.38.31",
  "wasmtime-asm-macros",
  "wasmtime-versioned-export-macros",
- "windows-sys 0.48.0",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
 name = "wasmtime-jit"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d0994a86d6dca5f7d9740d7f2bd0568be06d2014a550361dc1c397d289d81ef"
+checksum = "9b3e48395ac672b386ed588d97a9612aa13a345008f26466f0dfb2a91628aa9f"
 dependencies = [
  "anyhow",
  "bincode",
@@ -6702,35 +6702,25 @@ dependencies = [
  "wasmtime-environ",
  "wasmtime-jit-icache-coherence",
  "wasmtime-runtime",
- "windows-sys 0.48.0",
-]
-
-[[package]]
-name = "wasmtime-jit-debug"
-version = "15.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e0c4b74e606d1462d648631d5bc328e3d5b14e7f9d3ff93bc6db062fb8c5cd8"
-dependencies = [
- "once_cell",
- "wasmtime-versioned-export-macros",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
 name = "wasmtime-jit-icache-coherence"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3090a69ba1476979e090aa7ed4bc759178bafdb65b22f98b9ba24fc6e7e578d5"
+checksum = "bdc26415bb89e9ccd3bdc498fef63aabf665c4c0dd710c107691deb9694955da"
 dependencies = [
  "cfg-if",
  "libc",
- "windows-sys 0.48.0",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
 name = "wasmtime-runtime"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b993ac8380385ed67bf71b51b9553edcf1ab0801b78a805a067de581b9a3e88a"
+checksum = "0abddaf17912aabaf39be0802d5eba9a002e956e902d1ebd438a2fe1c88769a2"
 dependencies = [
  "anyhow",
  "cc",
@@ -6742,24 +6732,23 @@ dependencies = [
  "memfd",
  "memoffset",
  "paste",
- "rand 0.8.5",
+ "psm",
  "rustix 0.38.31",
  "sptr",
  "wasm-encoder",
  "wasmtime-asm-macros",
  "wasmtime-environ",
  "wasmtime-fiber",
- "wasmtime-jit-debug",
  "wasmtime-versioned-export-macros",
  "wasmtime-wmemcheck",
- "windows-sys 0.48.0",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
 name = "wasmtime-types"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b5778112fcab2dc3d4371f4203ab8facf0c453dd94312b0a88dd662955e64e0"
+checksum = "b35a95cdc1433729085beab42c0a5c742b431f25b17c40d7718e46df63d5ffc7"
 dependencies = [
  "cranelift-entity",
  "serde",
@@ -6770,9 +6759,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-versioned-export-macros"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f50f51f8d79bfd2aa8e9d9a0ae7c2d02b45fe412e62ff1b87c0c81b07c738231"
+checksum = "fad322733fe67e45743784d8b1df452bcb54f581572a4f1a646a4332deecbcc2"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6781,9 +6770,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-wit-bindgen"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b804dfd3d0c0d6d37aa21026fe7772ba1a769c89ee4f5c4f13b82d91d75216f"
+checksum = "41e5675998fdc74495afdd90ad2bd221206a258075b23048af0535a969b07893"
 dependencies = [
  "anyhow",
  "heck",
@@ -6793,9 +6782,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-wmemcheck"
-version = "15.0.1"
+version = "17.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b6060bc082cc32d9a45587c7640e29e3c7b89ada82677ac25d87850aaccb368"
+checksum = "b20a19e10d8cb50b45412fb21192982b7ce85c0122dc33bb71f1813e25dc6e52"
 
 [[package]]
 name = "web-sys"
diff --git a/Cargo.toml b/Cargo.toml
index 8ad1e0d6..072bffe9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -58,7 +58,7 @@ oauth2-types = { path = "./crates/oauth2-types/", version = "=0.7.0" }
 
 # High-level error handling
 [workspace.dependencies.anyhow]
-version = "1.0.75"
+version = "1.0.79"
 
 # UTF-8 paths
 [workspace.dependencies.camino]
@@ -66,13 +66,13 @@ version = "1.1.6"
 
 # Time utilities
 [workspace.dependencies.chrono]
-version = "0.4.31"
+version = "0.4.33"
 default-features = false
 features = ["serde", "clock"]
 
 # CLI argument parsing
 [workspace.dependencies.clap]
-version = "4.4.8"
+version = "4.4.18"
 features = ["derive"]
 
 # HTTP request/response
@@ -81,7 +81,7 @@ version = "0.2.11"
 
 # Templates
 [workspace.dependencies.minijinja]
-version = "1.0.10"
+version = "1.0.12"
 
 # Random values
 [workspace.dependencies.rand]
@@ -89,16 +89,16 @@ version = "0.8.5"
 
 # Serialization and deserialization
 [workspace.dependencies.serde]
-version = "1.0.193"
+version = "1.0.196"
 features = ["derive"] # Most of the time, if we need serde, we need derive
 
 # JSON serialization and deserialization
 [workspace.dependencies.serde_json]
-version = "1.0.108"
+version = "1.0.112"
 
 # Custom error types
 [workspace.dependencies.thiserror]
-version = "1.0.50"
+version = "1.0.56"
 
 # Logging and tracing
 [workspace.dependencies.tracing]
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index 899775f9..f64fa7ed 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -12,12 +12,12 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 axum = { version = "0.6.20", features = ["headers"] }
 axum-extra = { version = "0.8.0", features = ["cookie-private", "cookie-key-expansion"] }
 chrono.workspace = true
 data-encoding = "2.5.0"
-futures-util = "0.3.29"
+futures-util = "0.3.30"
 headers = "0.3.9"
 http.workspace = true
 http-body = "0.4.5"
@@ -26,11 +26,11 @@ mime = "0.3.17"
 rand.workspace = true
 sentry = { version = "0.31.8", default-features = false }
 serde.workspace = true
-serde_with = "3.4.0"
+serde_with = "3.5.1"
 serde_urlencoded = "0.7.1"
 serde_json.workspace = true
 thiserror.workspace = true
-tokio = "1.34.0"
+tokio = "1.35.1"
 tower = { version = "0.4.13", features = ["util"] }
 tracing.workspace = true
 url.workspace = true
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index af9b5713..b6a0eaa3 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -26,9 +26,9 @@ rand.workspace = true
 rand_chacha = "0.3.1"
 rustls = "0.22.2"
 serde_json.workspace = true
-serde_yaml = "0.9.27"
+serde_yaml = "0.9.30"
 sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }
-tokio = { version = "1.34.0", features = ["full"] }
+tokio = { version = "1.35.1", features = ["full"] }
 tower = "0.4.13"
 tower-http = { version = "0.4.4", features = ["fs"] }
 url.workspace = true
@@ -45,7 +45,7 @@ opentelemetry-otlp = { version = "0.14.0", features = ["trace", "metrics"] }
 opentelemetry-prometheus = "0.14.1"
 opentelemetry-semantic-conventions.workspace = true
 opentelemetry-stdout = { version = "0.2.0", features = ["trace", "metrics"] }
-opentelemetry_sdk = { version = "0.21.1", features = ["trace", "metrics", "rt-tokio"] }
+opentelemetry_sdk = { version = "0.21.2", features = ["trace", "metrics", "rt-tokio"] }
 opentelemetry-zipkin = { version = "0.19.0", default-features = false }
 prometheus = "0.13.3"
 sentry = { version = "0.31.8", default-features = false, features = ["backtrace", "contexts", "panic", "tower"] }
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index e8fabed3..0969e238 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -12,23 +12,23 @@ publish = false
 workspace = true
 
 [dependencies]
-tokio = { version = "1.34.0", features = ["fs", "rt"] }
+tokio = { version = "1.35.1", features = ["fs", "rt"] }
 tracing.workspace = true
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 
 thiserror.workspace = true
 anyhow.workspace = true
 
 camino = { workspace = true, features = ["serde1"] }
 chrono.workspace = true
-figment = { version = "0.10.12", features = ["env", "yaml", "test"] }
+figment = { version = "0.10.14", features = ["env", "yaml", "test"] }
 ipnetwork = { version = "0.20.0", features = ["serde", "schemars"] }
 schemars = { version = "0.8.16", features = ["url", "chrono"] }
 ulid.workspace = true
 url.workspace = true
 
 serde.workspace = true
-serde_with = { version = "3.4.0", features = ["hex", "chrono"] }
+serde_with = { version = "3.5.1", features = ["hex", "chrono"] }
 serde_json.workspace = true
 
 pem-rfc7468 = "0.7.0"
diff --git a/crates/email/Cargo.toml b/crates/email/Cargo.toml
index a7e4b63b..60fe34f9 100644
--- a/crates/email/Cargo.toml
+++ b/crates/email/Cargo.toml
@@ -12,7 +12,7 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 tracing.workspace = true
 thiserror.workspace = true
 headers = "0.3.9"
@@ -20,6 +20,6 @@ headers = "0.3.9"
 mas-templates.workspace = true
 
 [dependencies.lettre]
-version = "0.11.2"
+version = "0.11.4"
 default-features = false
 features = ["tokio1-rustls-tls", "hostname", "builder", "tracing", "pool", "smtp-transport", "sendmail-transport"]
diff --git a/crates/graphql/Cargo.toml b/crates/graphql/Cargo.toml
index a9a5cf46..1359b28e 100644
--- a/crates/graphql/Cargo.toml
+++ b/crates/graphql/Cargo.toml
@@ -14,12 +14,12 @@ workspace = true
 [dependencies]
 anyhow.workspace = true
 async-graphql = { version = "6.0.11", features = ["chrono", "url"] }
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 chrono.workspace = true
-lettre = { version = "0.11.2", default-features = false  }
+lettre = { version = "0.11.4", default-features = false  }
 serde.workspace = true
 thiserror.workspace = true
-tokio = { version = "1.34.0", features = ["sync"] }
+tokio = { version = "1.35.1", features = ["sync"] }
 tracing.workspace = true
 tower = { version = "0.4.13", features = ["util"] }
 ulid.workspace = true
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index f837416c..cb91baf4 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -13,8 +13,8 @@ workspace = true
 
 [dependencies]
 # Async runtime
-tokio = { version = "1.34.0", features = ["macros"] }
-futures-util = "0.3.29"
+tokio = { version = "1.35.1", features = ["macros"] }
+futures-util = "0.3.30"
 
 # Logging and tracing
 tracing.workspace = true
@@ -37,19 +37,19 @@ axum-extra = { version = "0.8.0", features = ["cookie-private"] }
 async-graphql = { version = "6.0.11", features = ["tracing", "apollo_tracing"] }
 
 # Emails
-lettre = { version = "0.11.2", default-features = false, features = ["builder"] }
+lettre = { version = "0.11.4", default-features = false, features = ["builder"] }
 
 # Database access
 sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }
 
 # Various structure (de)serialization
 serde.workspace = true
-serde_with = { version = "3.4.0", features = ["hex", "chrono"] }
+serde_with = { version = "3.5.1", features = ["hex", "chrono"] }
 serde_json.workspace = true
 serde_urlencoded = "0.7.1"
 
 # Password hashing
-argon2 = { version = "0.5.2", features = ["password-hash", "std"] }
+argon2 = { version = "0.5.3", features = ["password-hash", "std"] }
 bcrypt = "0.15.0"
 pbkdf2 = { version = "0.12.2", features = ["password-hash", "std", "simple", "parallel"] }
 zeroize = "1.7.0"
@@ -58,8 +58,8 @@ zeroize = "1.7.0"
 base64ct = "1.6.0"
 camino.workspace = true
 chrono.workspace = true
-psl = "2.1.12"
-time = "0.3.30"
+psl = "2.1.16"
+time = "0.3.31"
 url.workspace = true
 mime = "0.3.17"
 minijinja.workspace = true
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index 29b80b3a..4af8c898 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -14,13 +14,13 @@ workspace = true
 [dependencies]
 axum = { version = "0.6.20", optional = true }
 bytes = "1.5.0"
-futures-util = "0.3.29"
+futures-util = "0.3.30"
 headers = "0.3.9"
 http.workspace = true
 http-body = "0.4.5"
 hyper = "0.14.27"
 hyper-rustls = { version = "0.25.0", features = ["http1", "http2"], default-features = false, optional = true }
-once_cell = "1.18.0"
+once_cell = "1.19.0"
 opentelemetry.workspace = true
 rustls = { version = "0.22.2", optional = true }
 rustls-native-certs = { version = "0.7.0", optional = true }
@@ -28,7 +28,7 @@ serde.workspace = true
 serde_json.workspace = true
 serde_urlencoded = "0.7.1"
 thiserror.workspace = true
-tokio = { version = "1.34.0", features = ["sync", "parking_lot"], optional = true }
+tokio = { version = "1.35.1", features = ["sync", "parking_lot"], optional = true }
 tower = { version = "0.4.13", features = ["util"] }
 tower-http = { version = "0.4.4", features = ["cors"] }
 tracing.workspace = true
@@ -39,7 +39,7 @@ mas-tower.workspace = true
 
 [dev-dependencies]
 anyhow.workspace = true
-tokio = { version = "1.34.0", features = ["macros", "rt"] }
+tokio = { version = "1.35.1", features = ["macros", "rt"] }
 
 [features]
 axum = ["dep:axum"]
diff --git a/crates/i18n/Cargo.toml b/crates/i18n/Cargo.toml
index 8cc036b0..087b2ff7 100644
--- a/crates/i18n/Cargo.toml
+++ b/crates/i18n/Cargo.toml
@@ -20,8 +20,8 @@ icu_plurals = { version = "1.4.0", features = ["compiled_data", "std"] }
 icu_provider = { version = "1.4.0", features = ["std", "sync"] }
 icu_provider_adapters = { version = "1.4.0", features = ["std"] }
 pad = "0.1.6"
-pest = "2.7.5"
-pest_derive = "2.7.5"
+pest = "2.7.6"
+pest_derive = "2.7.6"
 serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true
diff --git a/crates/iana-codegen/Cargo.toml b/crates/iana-codegen/Cargo.toml
index 76a9b009..dd18549c 100644
--- a/crates/iana-codegen/Cargo.toml
+++ b/crates/iana-codegen/Cargo.toml
@@ -13,13 +13,13 @@ workspace = true
 
 [dependencies]
 anyhow.workspace = true
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 camino.workspace = true
 convert_case = "0.6.0"
 csv = "1.3.0"
-futures-util = "0.3.29"
+futures-util = "0.3.30"
 hyper = { version = "0.14.27", features = ["tcp", "client", "http1"] }
 serde.workspace = true
-tokio = { version = "1.34.0", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
+tokio = { version = "1.35.1", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
 tracing.workspace = true
 tracing-subscriber.workspace = true
diff --git a/crates/jose/Cargo.toml b/crates/jose/Cargo.toml
index 16c979e5..e2bb9d8d 100644
--- a/crates/jose/Cargo.toml
+++ b/crates/jose/Cargo.toml
@@ -19,16 +19,16 @@ ecdsa = { version = "0.16.9", features = ["signing", "verifying"] }
 elliptic-curve = "0.13.8"
 generic-array = "0.14.7"
 hmac = "0.12.1"
-k256 = { version = "0.13.2", features = ["ecdsa"] }
+k256 = { version = "0.13.3", features = ["ecdsa"] }
 p256 = { version = "0.13.2", features = ["ecdsa"] }
 p384 = { version = "0.13.0", features = ["ecdsa"] }
 rand.workspace = true
-rsa = "0.9.4"
+rsa = "0.9.6"
 schemars = "0.8.16"
 sec1 = "0.7.3"
 serde.workspace = true
 serde_json.workspace = true
-serde_with = "3.4.0"
+serde_with = "3.5.1"
 sha2 = { version = "0.10.8", features = ["oid"] }
 signature = "2.2.0"
 thiserror.workspace = true
diff --git a/crates/keystore/Cargo.toml b/crates/keystore/Cargo.toml
index d3ee64bd..5df0b9d0 100644
--- a/crates/keystore/Cargo.toml
+++ b/crates/keystore/Cargo.toml
@@ -13,20 +13,20 @@ workspace = true
 
 [dependencies]
 aead = { version = "0.5.2", features = ["std"] }
-const-oid = { version = "0.9.5", features = ["std"] }
+const-oid = { version = "0.9.6", features = ["std"] }
 der = { version = "0.7.8", features = ["std"] }
 ecdsa = { version = "0.16.9", features = ["std"] }
 elliptic-curve = { version = "0.13.8", features = ["std", "pem", "sec1"] }
-k256 = { version = "0.13.2", features = ["std"] }
+k256 = { version = "0.13.3", features = ["std"] }
 p256 = { version = "0.13.2", features = ["std"] }
 p384 = { version = "0.13.0", features = ["std"] }
 pem-rfc7468 = { version = "0.7.0", features = ["std"] }
 pkcs1 = { version = "0.7.5", features = ["std"] }
 pkcs8 = { version = "0.10.2", features = ["std", "pkcs5", "encryption"] }
 rand.workspace = true
-rsa = { version = "0.9.4", features = ["std", "pem"] }
+rsa = { version = "0.9.6", features = ["std", "pem"] }
 sec1 = { version = "0.7.3", features = ["std"] }
-spki = { version = "0.7.2", features = ["std"] }
+spki = { version = "0.7.3", features = ["std"] }
 thiserror.workspace = true
 generic-array = "0.14.7"
 chacha20poly1305 = { version = "0.10.1", features = ["std"] }
diff --git a/crates/listener/Cargo.toml b/crates/listener/Cargo.toml
index 6e35225d..9a168046 100644
--- a/crates/listener/Cargo.toml
+++ b/crates/listener/Cargo.toml
@@ -13,15 +13,15 @@ workspace = true
 
 [dependencies]
 bytes = "1.5.0"
-event-listener = "4.0.0"
-futures-util = "0.3.29"
+event-listener = "4.0.3"
+futures-util = "0.3.30"
 http-body = "0.4.5"
 hyper = { version = "0.14.27", features = ["server", "http1", "http2", "tcp"] }
-libc = "0.2.150"
+libc = "0.2.152"
 pin-project-lite = "0.2.13"
 socket2 = "0.5.5"
 thiserror.workspace = true
-tokio = { version = "1.34.0", features = ["net", "rt", "macros", "signal", "time"] }
+tokio = { version = "1.35.1", features = ["net", "rt", "macros", "signal", "time"] }
 tokio-rustls = "0.25.0"
 tower-http = { version = "0.4.4", features = ["add-extension"] }
 tower-service = "0.3.2"
@@ -30,7 +30,7 @@ tracing.workspace = true
 [dev-dependencies]
 anyhow.workspace = true
 rustls-pemfile = "2.0.0"
-tokio = { version = "1.34.0", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
+tokio = { version = "1.35.1", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
 tokio-test = "0.4.3"
 tracing-subscriber.workspace = true
 
diff --git a/crates/matrix-synapse/Cargo.toml b/crates/matrix-synapse/Cargo.toml
index c9607824..48e5f531 100644
--- a/crates/matrix-synapse/Cargo.toml
+++ b/crates/matrix-synapse/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 
 [dependencies]
 anyhow.workspace = true
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 http.workspace = true
 serde.workspace = true
 tower = { version = "0.4.13", features = ["util"] }
diff --git a/crates/matrix/Cargo.toml b/crates/matrix/Cargo.toml
index 36416c8a..29b65e3f 100644
--- a/crates/matrix/Cargo.toml
+++ b/crates/matrix/Cargo.toml
@@ -14,7 +14,7 @@ workspace = true
 [dependencies]
 anyhow.workspace = true
 serde.workspace = true
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 http.workspace = true
-tokio = { version = "1.34.0", features = ["sync", "macros", "rt"] }
+tokio = { version = "1.35.1", features = ["sync", "macros", "rt"] }
 url.workspace = true
diff --git a/crates/oauth2-types/Cargo.toml b/crates/oauth2-types/Cargo.toml
index 645c395f..e673bbeb 100644
--- a/crates/oauth2-types/Cargo.toml
+++ b/crates/oauth2-types/Cargo.toml
@@ -18,7 +18,7 @@ serde_json.workspace = true
 language-tags = { version = "0.3.2", features = ["serde"] }
 url.workspace = true
 parse-display = "0.8.2"
-serde_with = { version = "3.4.0", features = ["chrono"] }
+serde_with = { version = "3.5.1", features = ["chrono"] }
 chrono.workspace = true
 sha2 = "0.10.8"
 data-encoding = "2.5.0"
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index 15a54bf3..4d2139bf 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -28,19 +28,19 @@ base64ct = { version = "1.6.0", features = ["std"] }
 bytes = "1.5.0"
 chrono.workspace = true
 form_urlencoded = "1.2.1"
-futures-util = "0.3.29"
+futures-util = "0.3.30"
 headers = "0.3.9"
 http.workspace = true
 language-tags = "0.3.2"
-once_cell = "1.18.0"
+once_cell = "1.19.0"
 mime = "0.3.17"
 rand.workspace = true
 serde.workspace = true
 serde_json.workspace = true
 serde_urlencoded = "0.7.1"
-serde_with = "3.4.0"
+serde_with = "3.5.1"
 thiserror.workspace = true
-tokio = { version = "1.34.0", features = ["rt", "macros", "rt-multi-thread"] }
+tokio = { version = "1.35.1", features = ["rt", "macros", "rt-multi-thread"] }
 tower = { version = "0.4.13", features = ["full"] }
 tracing.workspace = true
 url.workspace = true
@@ -70,7 +70,7 @@ optional = true
 
 [dev-dependencies]
 assert_matches = "1.5.0"
-bitflags = "2.4.1"
+bitflags = "2.4.2"
 mas-keystore.workspace = true
 rand_chacha = "0.3.1"
-wiremock = "0.5.21"
+wiremock = "0.5.22"
diff --git a/crates/policy/Cargo.toml b/crates/policy/Cargo.toml
index 21fea1d7..32a257e9 100644
--- a/crates/policy/Cargo.toml
+++ b/crates/policy/Cargo.toml
@@ -18,15 +18,15 @@ serde.workspace = true
 serde_json.workspace = true
 schemars = {version = "0.8.16", optional = true }
 thiserror.workspace = true
-tokio = { version = "1.34.0", features = ["io-util", "rt"] }
+tokio = { version = "1.35.1", features = ["io-util", "rt"] }
 tracing.workspace = true
-wasmtime = { version = "15.0.0", default-features = false, features = ["async", "cranelift"] }
+wasmtime = { version = "17.0.0", default-features = false, features = ["async", "cranelift"] }
 
 mas-data-model.workspace = true
 oauth2-types.workspace = true
 
 [dev-dependencies]
-tokio = { version = "1.34.0", features = ["fs", "rt", "macros"] }
+tokio = { version = "1.35.1", features = ["fs", "rt", "macros"] }
 
 [features]
 cache = ["wasmtime/cache"]
diff --git a/crates/storage-pg/Cargo.toml b/crates/storage-pg/Cargo.toml
index db291dfb..8284792c 100644
--- a/crates/storage-pg/Cargo.toml
+++ b/crates/storage-pg/Cargo.toml
@@ -12,21 +12,21 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres", "migrate", "chrono", "json", "uuid", "ipnetwork"] }
-sea-query = { version = "0.30.3", features = ["derive", "attr", "with-uuid", "with-chrono", "postgres-array"] }
+sea-query = { version = "0.30.7", features = ["derive", "attr", "with-uuid", "with-chrono", "postgres-array"] }
 sea-query-binder = { version = "0.5.0", features = ["sqlx-postgres", "with-uuid", "with-chrono", "postgres-array"] }
 chrono.workspace = true
 serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
-futures-util = "0.3.29"
+futures-util = "0.3.30"
 
 rand.workspace = true
 rand_chacha = "0.3.1"
 url.workspace = true
-uuid = "1.6.1"
+uuid = "1.7.0"
 ulid = { workspace = true, features = ["uuid"] }
 
 oauth2-types.workspace = true
diff --git a/crates/storage/Cargo.toml b/crates/storage/Cargo.toml
index 103de669..3bead140 100644
--- a/crates/storage/Cargo.toml
+++ b/crates/storage/Cargo.toml
@@ -12,12 +12,12 @@ publish = false
 workspace = true
 
 [dependencies]
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 chrono.workspace = true
 thiserror.workspace = true
-futures-util = "0.3.29"
+futures-util = "0.3.30"
 
-apalis-core = { version = "0.4.7", features = ["tokio-comp"] }
+apalis-core = { version = "0.4.9", features = ["tokio-comp"] }
 opentelemetry.workspace = true
 rand_core = "0.6.4"
 serde.workspace = true
diff --git a/crates/tasks/Cargo.toml b/crates/tasks/Cargo.toml
index 0d636599..bd7b1d7f 100644
--- a/crates/tasks/Cargo.toml
+++ b/crates/tasks/Cargo.toml
@@ -13,18 +13,18 @@ workspace = true
 
 [dependencies]
 anyhow.workspace = true
-apalis-core = { version = "=0.4.7", features = ["extensions", "tokio-comp", "storage"] }
-apalis-cron = "=0.4.7"
+apalis-core = { version = "0.4.9", features = ["extensions", "tokio-comp", "storage"] }
+apalis-cron = "0.4.9"
 async-stream = "0.3.5"
-async-trait = "0.1.74"
+async-trait = "0.1.77"
 chrono.workspace = true
-event-listener = "4.0.0"
-futures-lite = "2.0.1"
+event-listener = "4.0.3"
+futures-lite = "2.2.0"
 rand.workspace = true
 rand_chacha = "0.3.1"
 sqlx = { version = "0.7.3", features = ["runtime-tokio-rustls", "postgres"] }
 thiserror.workspace = true
-tokio = { version = "1.34.0", features = ["rt"] }
+tokio = { version = "1.35.1", features = ["rt"] }
 tower = "0.4.13"
 tracing.workspace = true
 tracing-opentelemetry.workspace = true
diff --git a/crates/tasks/src/storage/postgres.rs b/crates/tasks/src/storage/postgres.rs
index 3d92cc60..dc61f2b3 100644
--- a/crates/tasks/src/storage/postgres.rs
+++ b/crates/tasks/src/storage/postgres.rs
@@ -230,7 +230,7 @@ where
             }
 
             // Worker not seen in 5 minutes yet has running jobs
-            StorageWorkerPulse::ReenqueueOrphaned { count } => {
+            StorageWorkerPulse::ReenqueueOrphaned { count, .. } => {
                 let job_type = T::NAME;
                 let mut conn = self
                     .pool
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index f68314e7..6076ec91 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -14,7 +14,7 @@ workspace = true
 [dependencies]
 arc-swap = "1.6.0"
 tracing.workspace = true
-tokio = { version = "1.34.0", features = ["macros", "rt", "fs"] }
+tokio = { version = "1.35.1", features = ["macros", "rt", "fs"] }
 walkdir = "2.4.0"
 
 anyhow.workspace = true
diff --git a/crates/tower/Cargo.toml b/crates/tower/Cargo.toml
index d6372934..34f227f2 100644
--- a/crates/tower/Cargo.toml
+++ b/crates/tower/Cargo.toml
@@ -16,7 +16,7 @@ http.workspace = true
 tracing.workspace = true
 tracing-opentelemetry.workspace = true
 tower = "0.4.13"
-tokio = { version = "1.34.0", features = ["time"] }
+tokio = { version = "1.35.1", features = ["time"] }
 opentelemetry.workspace = true
 opentelemetry-http = "0.10.0"
 opentelemetry-semantic-conventions.workspace = true