diff --git a/Cargo.lock b/Cargo.lock
index fcffdc81..3012fbd7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6002,9 +6002,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.27.0"
+version = "1.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0de47a4eecbe11f498978a9b29d792f0d2692d1dd003650c24c76510e3bc001"
+checksum = "c3c786bf8134e5a3a166db9b29ab8f48134739014a3eca7bc6bfa95d673b136f"
 dependencies = [
  "autocfg 1.1.0",
  "bytes 1.4.0",
@@ -6016,7 +6016,7 @@ dependencies = [
  "signal-hook-registry",
  "socket2",
  "tokio-macros",
- "windows-sys 0.45.0",
+ "windows-sys 0.48.0",
 ]
 
 [[package]]
@@ -6031,9 +6031,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-macros"
-version = "2.0.0"
+version = "2.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61a573bdc87985e9d6ddeed1b3d864e8a302c847e40d647746df2f1de209d1ce"
+checksum = "630bdcf245f78637c13ec01ffae6187cca34625e8c63150d424b59e55af2675e"
 dependencies = [
  "proc-macro2 1.0.56",
  "quote 1.0.26",
diff --git a/crates/axum-utils/Cargo.toml b/crates/axum-utils/Cargo.toml
index a2b80661..beb16be9 100644
--- a/crates/axum-utils/Cargo.toml
+++ b/crates/axum-utils/Cargo.toml
@@ -23,7 +23,7 @@ serde_with = "2.3.2"
 serde_urlencoded = "0.7.1"
 serde_json = "1.0.96"
 thiserror = "1.0.40"
-tokio = "1.27.0"
+tokio = "1.28.0"
 tower = { version = "0.4.13", features = ["util"] }
 tracing = "0.1.38"
 url = "2.3.1"
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index 9b059466..9af92300 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -22,7 +22,7 @@ rustls = "0.21.0"
 serde_json = "1.0.96"
 serde_yaml = "0.9.21"
 sqlx = { version = "0.6.3", features = ["runtime-tokio-rustls", "postgres"] }
-tokio = { version = "1.27.0", features = ["full"] }
+tokio = { version = "1.28.0", features = ["full"] }
 tower = { version = "0.4.13", features = ["full"] }
 tower-http = { version = "0.4.0", features = ["fs", "compression-full"] }
 url = "2.3.1"
diff --git a/crates/config/Cargo.toml b/crates/config/Cargo.toml
index 5de8fd7a..04f1f33b 100644
--- a/crates/config/Cargo.toml
+++ b/crates/config/Cargo.toml
@@ -6,7 +6,7 @@ edition = "2021"
 license = "Apache-2.0"
 
 [dependencies]
-tokio = { version = "1.27.0", features = ["fs", "rt"] }
+tokio = { version = "1.28.0", features = ["fs", "rt"] }
 tracing = { version = "0.1.38" }
 async-trait = "0.1.68"
 
diff --git a/crates/graphql/Cargo.toml b/crates/graphql/Cargo.toml
index c889cb4a..06b8c4e3 100644
--- a/crates/graphql/Cargo.toml
+++ b/crates/graphql/Cargo.toml
@@ -12,7 +12,7 @@ async-trait = "0.1.51"
 chrono = "0.4.24"
 serde = { version = "1.0.160", features = ["derive"] }
 thiserror = "1.0.40"
-tokio = { version = "1.27.0", features = ["sync"] }
+tokio = { version = "1.28.0", features = ["sync"] }
 tracing = "0.1.38"
 ulid = "1.0.0"
 url = "2.3.1"
diff --git a/crates/handlers/Cargo.toml b/crates/handlers/Cargo.toml
index 5f4a3b0c..798e64a8 100644
--- a/crates/handlers/Cargo.toml
+++ b/crates/handlers/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 # Async runtime
-tokio = { version = "1.27.0", features = ["macros"] }
+tokio = { version = "1.28.0", features = ["macros"] }
 futures-util = "0.3.28"
 
 # Logging and tracing
diff --git a/crates/http/Cargo.toml b/crates/http/Cargo.toml
index 211c6348..95e1a50d 100644
--- a/crates/http/Cargo.toml
+++ b/crates/http/Cargo.toml
@@ -24,7 +24,7 @@ serde = "1.0.160"
 serde_json = "1.0.96"
 serde_urlencoded = "0.7.1"
 thiserror = "1.0.40"
-tokio = { version = "1.27.0", features = ["sync", "parking_lot"], optional = true }
+tokio = { version = "1.28.0", features = ["sync", "parking_lot"], optional = true }
 tower = { version = "0.4.13", features = [] }
 tower-http = { version = "0.4.0", features = ["cors"] }
 tracing = "0.1.38"
@@ -37,7 +37,7 @@ mas-tower = { path = "../tower" }
 [dev-dependencies]
 anyhow = "1.0.70"
 serde = { version = "1.0.160", features = ["derive"] }
-tokio = { version = "1.27.0", features = ["macros", "rt"] }
+tokio = { version = "1.28.0", features = ["macros", "rt"] }
 tower = { version = "0.4.13", features = ["util"] }
 
 [features]
diff --git a/crates/iana-codegen/Cargo.toml b/crates/iana-codegen/Cargo.toml
index 6eb75992..786bf675 100644
--- a/crates/iana-codegen/Cargo.toml
+++ b/crates/iana-codegen/Cargo.toml
@@ -14,6 +14,6 @@ csv = "1.2.1"
 futures-util = "0.3.28"
 hyper = { version = "0.14.16", features = ["tcp", "client", "http1"] }
 serde = { version = "1.0.160", features = ["derive"] }
-tokio = { version = "1.27.0", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
+tokio = { version = "1.28.0", features = ["macros", "rt-multi-thread", "fs", "io-util"] }
 tracing = "0.1.38"
 tracing-subscriber = "0.3.17"
diff --git a/crates/listener/Cargo.toml b/crates/listener/Cargo.toml
index f320dfac..bda8dbd5 100644
--- a/crates/listener/Cargo.toml
+++ b/crates/listener/Cargo.toml
@@ -12,7 +12,7 @@ http-body = "0.4.5"
 hyper = { version = "0.14.26", features = ["server", "http1", "http2", "tcp"] }
 pin-project-lite = "0.2.9"
 thiserror = "1.0.40"
-tokio = { version = "1.27.0", features = ["net", "rt", "macros", "signal", "time"] }
+tokio = { version = "1.28.0", features = ["net", "rt", "macros", "signal", "time"] }
 tokio-rustls = "0.24.0"
 tower-http = { version = "0.4.0", features = ["add-extension"] }
 tower-service = "0.3.2"
@@ -22,7 +22,7 @@ libc = "0.2.142"
 [dev-dependencies]
 anyhow = "1.0.70"
 rustls-pemfile = "1.0.2"
-tokio = { version = "1.27.0", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
+tokio = { version = "1.28.0", features = ["net", "rt", "macros", "signal", "time", "rt-multi-thread"] }
 tokio-test = "0.4.2"
 tracing-subscriber = "0.3.17"
 
diff --git a/crates/oidc-client/Cargo.toml b/crates/oidc-client/Cargo.toml
index 6f211c8b..d815f83c 100644
--- a/crates/oidc-client/Cargo.toml
+++ b/crates/oidc-client/Cargo.toml
@@ -35,7 +35,7 @@ serde_json = "1.0.96"
 serde_urlencoded = "0.7.1"
 serde_with = "2.3.2"
 thiserror = "1.0.40"
-tokio = { version = "1.27.0", features = ["rt", "macros", "rt-multi-thread"] }
+tokio = { version = "1.28.0", features = ["rt", "macros", "rt-multi-thread"] }
 tower = { version = "0.4.13", features = ["full"] }
 tracing = "0.1.38"
 url = { version = "2.3.1", features = ["serde"] }
diff --git a/crates/policy/Cargo.toml b/crates/policy/Cargo.toml
index ce70aeb9..0d7d60dc 100644
--- a/crates/policy/Cargo.toml
+++ b/crates/policy/Cargo.toml
@@ -11,7 +11,7 @@ opa-wasm = { git = "https://github.com/matrix-org/rust-opa-wasm.git" }
 serde = { version = "1.0.160", features = ["derive"] }
 serde_json = "1.0.96"
 thiserror = "1.0.40"
-tokio = { version = "1.27.0", features = ["io-util"] }
+tokio = { version = "1.28.0", features = ["io-util"] }
 tracing = "0.1.38"
 wasmtime = { version = "7.0.0", default-features = false, features = ["async", "cranelift"] }
 
@@ -19,7 +19,7 @@ mas-data-model = { path = "../data-model" }
 oauth2-types = { path = "../oauth2-types" }
 
 [dev-dependencies]
-tokio = { version = "1.27.0", features = ["fs", "rt", "macros"] }
+tokio = { version = "1.28.0", features = ["fs", "rt", "macros"] }
 
 [features]
 cache = ["wasmtime/cache"]
diff --git a/crates/spa/Cargo.toml b/crates/spa/Cargo.toml
index 8f627706..47dd47fc 100644
--- a/crates/spa/Cargo.toml
+++ b/crates/spa/Cargo.toml
@@ -14,7 +14,7 @@ headers = "0.3.8"
 http = "0.2.9"
 tower-service = "0.3.2"
 tower-http = { version = "0.4.0", features = ["fs"] }
-tokio = { version = "1.27.0", features = ["fs"] }
+tokio = { version = "1.28.0", features = ["fs"] }
 
 [[bin]]
 name = "render"
diff --git a/crates/templates/Cargo.toml b/crates/templates/Cargo.toml
index 1fe65d9c..05f4ade8 100644
--- a/crates/templates/Cargo.toml
+++ b/crates/templates/Cargo.toml
@@ -7,7 +7,7 @@ license = "Apache-2.0"
 
 [dependencies]
 tracing = "0.1.38"
-tokio = { version = "1.27.0", features = ["macros", "rt"] }
+tokio = { version = "1.28.0", features = ["macros", "rt"] }
 
 anyhow = "1.0.70"
 thiserror = "1.0.40"
diff --git a/crates/tower/Cargo.toml b/crates/tower/Cargo.toml
index 844dcc69..059991f7 100644
--- a/crates/tower/Cargo.toml
+++ b/crates/tower/Cargo.toml
@@ -11,7 +11,7 @@ http = "0.2.9"
 tracing = "0.1.38"
 tracing-opentelemetry = "0.19.0"
 tower = "0.4.13"
-tokio = { version = "1.27.0", features = ["time"] }
+tokio = { version = "1.28.0", features = ["time"] }
 opentelemetry = { version = "0.19.0", features = ["metrics"] }
 opentelemetry-http = "0.8.0"
 pin-project-lite = "0.2.9"