diff --git a/Cargo.lock b/Cargo.lock
index 62a07ffa9d6..6a1feec04e5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -66,7 +66,7 @@ dependencies = [
  "protoc-rust",
  "sgx-isa",
  "sgxs",
- "thiserror",
+ "thiserror 1.0.69",
  "unix_socket2",
  "winapi",
 ]
@@ -161,15 +161,15 @@ dependencies = [
 
 [[package]]
 name = "anyhow"
-version = "1.0.89"
+version = "1.0.94"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86fdf8605db99b54d3cd748a44c6d04df638eb5dafb219b135d0149bd0db01f6"
+checksum = "c1fd03a028ef38ba2276dce7e33fcd6369c158a1bca17946c4b1b701891c1ff7"
 
 [[package]]
 name = "arbitrary"
-version = "1.3.2"
+version = "1.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7d5a26814d8dcb93b0e5a0ff3c6d80a8843bafb21b39e8e18a6f05471870e110"
+checksum = "dde20b3d026af13f561bdd0f15edf01fc734f0dafcedbaf42bba506a9517f223"
 dependencies = [
  "derive_arbitrary",
 ]
@@ -192,7 +192,7 @@ dependencies = [
  "nom",
  "num-traits",
  "rusticata-macros",
- "thiserror",
+ "thiserror 1.0.69",
  "time",
 ]
 
@@ -208,7 +208,7 @@ dependencies = [
  "nom",
  "num-traits",
  "rusticata-macros",
- "thiserror",
+ "thiserror 1.0.69",
  "time",
 ]
 
@@ -232,7 +232,7 @@ checksum = "7378575ff571966e99a744addeff0bff98b8ada0dedf1956d59e634db95eaac1"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
  "synstructure 0.13.1",
 ]
 
@@ -255,7 +255,7 @@ checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -266,7 +266,7 @@ checksum = "721cae7de5c34fbb2acd27e21e6d2cf7b886dce0c27388d46c4e6c47ea4318dd"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -354,7 +354,7 @@ dependencies = [
  "regex",
  "rustc-hash",
  "shlex",
- "syn 2.0.72",
+ "syn 2.0.90",
  "which",
 ]
 
@@ -499,9 +499,9 @@ dependencies = [
 
 [[package]]
 name = "chrono"
-version = "0.4.38"
+version = "0.4.39"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a21f936df1771bf62b77f047b726c4625ff2e8aa607c01ec06e5a05bd8463401"
+checksum = "7e36cc9d416881d2e24f9a963be5fb1cd90966419ac844274161d10488b3e825"
 dependencies = [
  "android-tzdata",
  "iana-time-zone",
@@ -535,18 +535,18 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.20"
+version = "4.5.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b97f376d85a664d5837dbae44bf546e6477a679ff6610010f17276f686d867e8"
+checksum = "3135e7ec2ef7b10c6ed8950f0f792ed96ee093fa088608f1c76e569722700c84"
 dependencies = [
  "clap_builder",
 ]
 
 [[package]]
 name = "clap_builder"
-version = "4.5.20"
+version = "4.5.23"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "19bc80abd44e4bed93ca373a0704ccbd1b710dc5749406201bb018272808dc54"
+checksum = "30582fc632330df2bd26877bde0c1f4470d57c582bbc070376afcd04d8cb4838"
 dependencies = [
  "anstream",
  "anstyle",
@@ -556,9 +556,9 @@ dependencies = [
 
 [[package]]
 name = "clap_lex"
-version = "0.7.1"
+version = "0.7.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b82cf0babdbd58558212896d1a4272303a57bdb245c2bf1147185fb45640e70"
+checksum = "f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6"
 
 [[package]]
 name = "cmake"
@@ -725,7 +725,7 @@ checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -789,7 +789,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fab9d9a7e9ff7a4762c5c378deb4158d6aaeaeab86952ecf64221159dcd20809"
 dependencies = [
  "subtle",
- "thiserror",
+ "thiserror 1.0.69",
  "zeroize",
 ]
 
@@ -843,13 +843,13 @@ dependencies = [
 
 [[package]]
 name = "derive_arbitrary"
-version = "1.3.2"
+version = "1.4.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67e77553c4162a157adbf834ebae5b415acbecbeafc7a74b0e886657506a7611"
+checksum = "30542c1ad912e0e3d22a1935c290e12e8a29d704a420177a31faad4a601a0800"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -860,7 +860,7 @@ checksum = "5f33878137e4dafd7fa914ad4e259e18a4e8e532b9617a2d0150262bf53abfce"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -892,7 +892,7 @@ checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -994,7 +994,7 @@ dependencies = [
  "openssl",
  "sgx-isa",
  "sgxs",
- "thiserror",
+ "thiserror 1.0.69",
  "tokio",
 ]
 
@@ -1006,12 +1006,12 @@ checksum = "5443807d6dff69373d433ab9ef5378ad8df50ca6298caf15de6e52e24aaf54d5"
 
 [[package]]
 name = "errno"
-version = "0.3.9"
+version = "0.3.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "534c5cf6194dfab3db3242765c03bbe257cf92f22b38f6bc0c58d59108a820ba"
+checksum = "33d852cb9b869c2a9b3df2f71a3074817f01e1844f839a144f5fcef059a4eb5d"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -1149,7 +1149,7 @@ checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -1473,7 +1473,7 @@ checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -1505,13 +1505,13 @@ dependencies = [
 
 [[package]]
 name = "impl-trait-for-tuples"
-version = "0.2.2"
+version = "0.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "11d7a9f6330b71fea57921c9b61c47ee6e84f72d394754eff6163ae67e7395eb"
+checksum = "a0eb5a3343abf848c0984fe4604b2b105da9539376e24fc0a3b0007411ae4fd9"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 1.0.109",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -1627,9 +1627,9 @@ checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
 
 [[package]]
 name = "libc"
-version = "0.2.159"
+version = "0.2.168"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "561d97a539a36e26a9a5fad1ea11a3039a67714694aaa379433e580854bc3dc5"
+checksum = "5aaeb2981e0606ca11d79718f8bb01164f1d6ed75080182d3abf017e6d244b6d"
 
 [[package]]
 name = "libloading"
@@ -1713,6 +1713,25 @@ dependencies = [
  "yasna 0.2.2",
 ]
 
+[[package]]
+name = "mbedtls"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c1a79c64122e22312679a350d1c8e6b21605b3836ee5d8fe3722f1d0187a6f7"
+dependencies = [
+ "bitflags 1.3.2",
+ "byteorder",
+ "cc",
+ "cfg-if 1.0.0",
+ "mbedtls-platform-support",
+ "mbedtls-sys-auto",
+ "rs-libc",
+ "rustc_version",
+ "serde",
+ "serde_derive",
+ "yasna 0.2.2",
+]
+
 [[package]]
 name = "mbedtls-platform-support"
 version = "0.1.1"
@@ -1893,7 +1912,7 @@ checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -1955,7 +1974,7 @@ dependencies = [
  "oasis-cbor-derive",
  "oasis-cbor-value",
  "serde",
- "thiserror",
+ "thiserror 1.0.69",
 ]
 
 [[package]]
@@ -1998,7 +2017,7 @@ dependencies = [
  "secret-sharing",
  "sgx-isa",
  "sp800-185",
- "thiserror",
+ "thiserror 2.0.7",
  "tiny-keccak 2.0.2",
  "tokio",
  "x25519-dalek",
@@ -2034,7 +2053,7 @@ dependencies = [
  "libc",
  "log",
  "lru",
- "mbedtls",
+ "mbedtls 0.13.0",
  "nix 0.29.0",
  "num-bigint 0.4.6",
  "num-derive",
@@ -2061,7 +2080,7 @@ dependencies = [
  "tendermint-proto",
  "tendermint-rpc",
  "tendermint-testgen",
- "thiserror",
+ "thiserror 2.0.7",
  "tiny-keccak 2.0.2",
  "tokio",
  "tokio-retry",
@@ -2093,7 +2112,7 @@ dependencies = [
  "anyhow",
  "clap",
  "serde",
- "thiserror",
+ "thiserror 2.0.7",
  "toml",
 ]
 
@@ -2159,7 +2178,7 @@ checksum = "a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -2292,7 +2311,7 @@ checksum = "2f38a4412a78282e09a2cf38d195ea5420d15ba0602cb375210efbc877243965"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -2376,7 +2395,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5f12335488a2f3b0a83b14edad48dca9879ce89b2edd10e80237e4e852dd645e"
 dependencies = [
  "proc-macro2",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -2400,9 +2419,9 @@ dependencies = [
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.86"
+version = "1.0.92"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e719e8df665df0d1c8fbfd238015744736151d4445ec0836b8e628aae103b77"
+checksum = "37d3544b3f2748c54e147655edb5025752e2303145b5aefb3c3ea2c78b973bb0"
 dependencies = [
  "unicode-ident",
 ]
@@ -2427,7 +2446,7 @@ dependencies = [
  "itertools",
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -2469,9 +2488,9 @@ dependencies = [
 
 [[package]]
 name = "quote"
-version = "1.0.36"
+version = "1.0.37"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fa76aaf39101c457836aec0ce2316dbdc3ab723cdda1c6bd4e6ad4208acaca7"
+checksum = "b5b9d34b8991d19d98081b46eacdd8eb58c6f2b201139f7c5f643cc155a633af"
 dependencies = [
  "proc-macro2",
 ]
@@ -2581,9 +2600,9 @@ dependencies = [
 
 [[package]]
 name = "rsa"
-version = "0.9.6"
+version = "0.9.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d0e5124fcb30e76a7e79bfee683a2746db83784b86289f6251b54b7950a0dfc"
+checksum = "47c75d7c5c6b673e58bf54d8544a9f432e3a925b0e80f7cd3602ab5c50c55519"
 dependencies = [
  "const-oid",
  "digest 0.10.7",
@@ -2637,22 +2656,22 @@ dependencies = [
 
 [[package]]
 name = "rustix"
-version = "0.38.37"
+version = "0.38.42"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8acb788b847c24f28525660c4d7758620a7210875711f79e7f663cc152726811"
+checksum = "f93dc38ecbab2eb790ff964bb77fa94faf256fd3e73285fd7ba0903b76bedb85"
 dependencies = [
  "bitflags 2.6.0",
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.52.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
 name = "rustls"
-version = "0.23.18"
+version = "0.23.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c9cc1d47e243d655ace55ed38201c19ae02c148ae56412ab8750e8f0166ab7f"
+checksum = "5065c3f250cbd332cd894be57c40fa52387247659b14a2d6041d121547903b1b"
 dependencies = [
  "log",
  "once_cell",
@@ -2670,7 +2689,7 @@ checksum = "6841ca311a5a41f618eb7095aaa2d3ab8810a540c9e57ce6ce63b0e0431070bc"
 dependencies = [
  "bit-vec 0.6.3",
  "log",
- "mbedtls",
+ "mbedtls 0.12.3",
  "rustls",
  "rustls-mbedtls-provider-utils",
  "rustls-webpki",
@@ -2684,7 +2703,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5fa57cbb88f865fb47158e95a9326134d9726ed01201c28b00ed4a892792fce9"
 dependencies = [
  "chrono",
- "mbedtls",
+ "mbedtls 0.12.3",
  "rustls",
  "rustls-mbedtls-provider-utils",
  "x509-parser 0.15.1",
@@ -2696,7 +2715,7 @@ version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ec33e15661de795beee762ce87767de05aa01c7ca69dbd8275ae84e9ecab81dc"
 dependencies = [
- "mbedtls",
+ "mbedtls 0.12.3",
  "rustls",
 ]
 
@@ -2764,7 +2783,7 @@ dependencies = [
  "rand_core",
  "sha3",
  "subtle",
- "thiserror",
+ "thiserror 2.0.7",
  "zeroize",
 ]
 
@@ -2776,9 +2795,9 @@ checksum = "61697e0a1c7e512e84a621326239844a24d8207b4669b41bc18b32ea5cbf988b"
 
 [[package]]
 name = "serde"
-version = "1.0.210"
+version = "1.0.216"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8e3592472072e6e22e0a54d5904d9febf8508f65fb8552499a1abc7d1078c3a"
+checksum = "0b9781016e935a97e8beecf0c933758c97a5520d32930e460142b4cd80c6338e"
 dependencies = [
  "serde_derive",
 ]
@@ -2804,20 +2823,20 @@ dependencies = [
 
 [[package]]
 name = "serde_derive"
-version = "1.0.210"
+version = "1.0.216"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "243902eda00fad750862fc144cea25caca5e20d615af0a81bee94ca738f1df1f"
+checksum = "46f859dbbf73865c6627ed570e78961cd3ac92407a2d117204c49232485da55e"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
 name = "serde_json"
-version = "1.0.128"
+version = "1.0.133"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ff5456707a1de34e7e37f2a6fd3d3f808c318259cbd01ab6377795054b483d8"
+checksum = "c7fceb2473b9166b2294ef05efcb65a3db80803f0b03ef86a5fc88a2b85ee377"
 dependencies = [
  "itoa",
  "memchr",
@@ -2833,7 +2852,7 @@ checksum = "6c64451ba24fc7a6a2d60fc75dd9c83c90903b19028d4eff35e88fc1e86564e9"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -2866,7 +2885,7 @@ dependencies = [
  "openssl",
  "openssl-sys",
  "sgx-isa",
- "thiserror",
+ "thiserror 1.0.69",
  "time",
 ]
 
@@ -2882,7 +2901,7 @@ dependencies = [
  "nix 0.15.0",
  "sgx-isa",
  "sgxs",
- "thiserror",
+ "thiserror 1.0.69",
  "winapi",
 ]
 
@@ -2969,7 +2988,7 @@ dependencies = [
  "oasis-core-keymanager",
  "oasis-core-runtime",
  "simple-keymanager",
- "thiserror",
+ "thiserror 2.0.7",
  "tokio",
 ]
 
@@ -2979,7 +2998,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "async-trait",
- "mbedtls",
+ "mbedtls 0.13.0",
  "oasis-cbor",
  "oasis-core-keymanager",
  "oasis-core-runtime",
@@ -3155,9 +3174,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "2.0.72"
+version = "2.0.90"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc4b9b9bf2add8093d3f2c0204471e951b2285580335de42f9d2534f3ae7a8af"
+checksum = "919d3b74a5dd0ccd15aeb8f93e7006bd9e14c295087c9896a110f490752bcf31"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -3184,14 +3203,14 @@ checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
 name = "tempfile"
-version = "3.13.0"
+version = "3.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0f2c9fc62d0beef6951ccffd757e241266a2c833136efbe35af6cd2567dca5b"
+checksum = "28cce251fcbc87fac86a866eeb0d6c2d536fc16d06f184bb61aeae11aa4cee0c"
 dependencies = [
  "cfg-if 1.0.0",
  "fastrand",
@@ -3202,9 +3221,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f3afea7809ffaaf1e5d9c3c9997cb3a834df7e94fbfab2fad2bc4577f1cde41"
+checksum = "37d513ce7f9e41c67ab2dd3d554ef65f36fbcc61745af1e1f93eafdeefa1ce37"
 dependencies = [
  "bytes 1.6.1",
  "digest 0.10.7",
@@ -3230,9 +3249,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint-config"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d8add7b85b0282e5901521f78fe441956ac1e2752452f4e1f2c0ce7e1f10d485"
+checksum = "4de4e66e78c6bfb768993e69c4fc5333dbc863f6d54ebd7a5d08d91556768087"
 dependencies = [
  "flex-error",
  "serde",
@@ -3244,9 +3263,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint-light-client"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8595e8c4b202c41588930be1fdf13d7c9c39c621704e3ee6592e6f8064f50926"
+checksum = "3e88c08a112db05101396a79f71c017d7dbf548dc21614f82251f17ecbe5d5e8"
 dependencies = [
  "contracts",
  "crossbeam-channel",
@@ -3268,9 +3287,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint-light-client-verifier"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8c85693e8f7d65c19898292ae7ec90b565a73c5b4df15564987e0f0e895a451"
+checksum = "7affc5fffe9df158185e15bce3e47fc3a0c901e6708f3b7d33f0867d7aef8ce1"
 dependencies = [
  "derive_more",
  "flex-error",
@@ -3281,9 +3300,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint-proto"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf3abf34ecf33125621519e9952688e7a59a98232d51538037ba21fbe526a802"
+checksum = "c81ba1b023ec00763c3bc4f4376c67c0047f185cccf95c416c7a2f16272c4cbb"
 dependencies = [
  "bytes 1.6.1",
  "flex-error",
@@ -3296,9 +3315,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint-rpc"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9693f42544bf3b41be3cbbfa418650c86e137fb8f5a57981659a84b677721ecf"
+checksum = "4d3ec9d6a266cb079a44272189b5a033227d058ab28659722557c1f7fed6b83c"
 dependencies = [
  "async-trait",
  "bytes 1.6.1",
@@ -3316,7 +3335,7 @@ dependencies = [
  "tendermint",
  "tendermint-config",
  "tendermint-proto",
- "thiserror",
+ "thiserror 1.0.69",
  "time",
  "url",
  "uuid",
@@ -3325,9 +3344,9 @@ dependencies = [
 
 [[package]]
 name = "tendermint-testgen"
-version = "0.39.1"
+version = "0.40.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fc535d944d2584ee904aa0a2d0d0598e41e0966c23732c341d5a0cc199e5a2e"
+checksum = "7d97c36f54bf8754292166604e0c1a16cdbac3c7a2b59cb866f068b25fb0c811"
 dependencies = [
  "ed25519-consensus",
  "gumdrop",
@@ -3341,22 +3360,42 @@ dependencies = [
 
 [[package]]
 name = "thiserror"
-version = "1.0.64"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d50af8abc119fb8bb6dbabcfa89656f46f84aa0ac7688088608076ad2b459a84"
+checksum = "93605438cbd668185516ab499d589afb7ee1859ea3d5fc8f6b0755e1c7443767"
 dependencies = [
- "thiserror-impl",
+ "thiserror-impl 2.0.7",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.90",
 ]
 
 [[package]]
 name = "thiserror-impl"
-version = "1.0.64"
+version = "2.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08904e7672f5eb876eaaf87e0ce17857500934f4981c4a0ab2b4aa98baac7fc3"
+checksum = "e1d8749b4531af2117677a5fcd12b1348a3fe2b81e36e61ffeac5c4aa3273e36"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -3422,9 +3461,9 @@ dependencies = [
 
 [[package]]
 name = "tokio"
-version = "1.40.0"
+version = "1.42.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e2b070231665d27ad9ec9b8df639893f46727666c6767db40317fbe920a5d998"
+checksum = "5cec9b21b0450273377fc97bd4c33a8acffc8c996c987a7c5b319a0083707551"
 dependencies = [
  "backtrace",
  "bytes 1.6.1",
@@ -3457,7 +3496,7 @@ checksum = "693d596312e88961bc67d7f1f97af8a70227d9f90c31bba5806eec004978d752"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -3675,7 +3714,7 @@ dependencies = [
  "once_cell",
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
  "wasm-bindgen-shared",
 ]
 
@@ -3697,7 +3736,7 @@ checksum = "e94f17b526d0a461a191c78ea52bbce64071ed5c04c9ffe424dcb38f74171bb7"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
  "wasm-bindgen-backend",
  "wasm-bindgen-shared",
 ]
@@ -3897,7 +3936,7 @@ dependencies = [
  "nom",
  "oid-registry 0.6.1",
  "rusticata-macros",
- "thiserror",
+ "thiserror 1.0.69",
  "time",
 ]
 
@@ -3914,7 +3953,7 @@ dependencies = [
  "nom",
  "oid-registry 0.7.1",
  "rusticata-macros",
- "thiserror",
+ "thiserror 1.0.69",
  "time",
 ]
 
@@ -3966,7 +4005,7 @@ checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
  "synstructure 0.13.1",
 ]
 
@@ -3987,7 +4026,7 @@ checksum = "595eed982f7d355beb85837f651fa22e90b3c044842dc7f2c2842c086f295808"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
  "synstructure 0.13.1",
 ]
 
@@ -4008,7 +4047,7 @@ checksum = "ce36e65b0d2999d2aafac989fb249189a141aee1f53c612c1f37d72631959f69"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
 
 [[package]]
@@ -4030,5 +4069,5 @@ checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.72",
+ "syn 2.0.90",
 ]
diff --git a/keymanager/Cargo.toml b/keymanager/Cargo.toml
index c19749e623b..7ddb9affd68 100644
--- a/keymanager/Cargo.toml
+++ b/keymanager/Cargo.toml
@@ -20,10 +20,10 @@ rand = "0.8.5"
 rustc-hex = "2.0.1"
 sgx-isa = { version = "0.4.0", features = ["sgxstd"] }
 sp800-185 = "0.2.0"
-thiserror = "1.0"
+thiserror = "2.0"
 tiny-keccak = { version = "2.0.2", features = ["sha3"] }
 x25519-dalek = { version = "2.0.1", features = ["static_secrets"] }
-tokio = { version = "1.40", features = ["rt"] }
+tokio = { version = "1.42", features = ["rt"] }
 zeroize = "1.7"
 async-trait = "0.1.83"
 p384 = { version = "0.13.0" }
diff --git a/runtime-loader/Cargo.toml b/runtime-loader/Cargo.toml
index 7eb6ea103cb..f4fc6d5de25 100644
--- a/runtime-loader/Cargo.toml
+++ b/runtime-loader/Cargo.toml
@@ -5,10 +5,10 @@ authors = ["Oasis Protocol Foundation <info@oasisprotocol.org>"]
 edition = "2018"
 
 [dependencies]
-clap = "4.5.20"
+clap = "4.5.23"
 anyhow = "1.0"
 futures = { version = "0.3.31", features = ["compat", "io-compat"] }
-tokio = { version = "1.40", features = ["full"] }
+tokio = { version = "1.42", features = ["full"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
 aesm-client = { version = "0.6.0", features = ["sgxs"] }
diff --git a/runtime/Cargo.toml b/runtime/Cargo.toml
index a34f9009354..6c4eb60ddbd 100644
--- a/runtime/Cargo.toml
+++ b/runtime/Cargo.toml
@@ -13,31 +13,31 @@ slog = "2.7.0"
 slog-json = "2.6.0"
 slog-scope = "4.4.0"
 slog-stdlog = "4.1.0"
-serde = { version = "1.0.210", features = ["derive"] }
-serde_json = { version = "1.0.128", features = ["raw_value"] }
+serde = { version = "1.0.216", features = ["derive"] }
+serde_json = { version = "1.0.133", features = ["raw_value"] }
 lazy_static = "1.3.0"
 crossbeam = "0.8.4"
 byteorder = "1.4.3"
 anyhow = "1.0"
-thiserror = "1.0"
+thiserror = "2.0"
 sgx-isa = { version = "0.4.1", features = ["sgxstd"] }
-mbedtls = { version = "0.12.3", features = ["x509"] }
+mbedtls = { version = "0.13.0", features = ["x509"] }
 yasna = { version = "0.5.0", features = ["num-bigint"] }
 bincode = "1.3.3"
 bitflags = "2.6.0"
 snow = "0.9.6"
 percent-encoding = "2.2.0"
-chrono = "0.4.19"
+chrono = "0.4.39"
 base64 = "0.22.1"
 rustc-hex = "2.0.1"
 rand = "0.8.5"
 futures = "0.3.31"
-tokio = { version = "1.40", features = ["rt", "rt-multi-thread", "sync", "time"] }
+tokio = { version = "1.42", features = ["rt", "rt-multi-thread", "sync", "time"] }
 tokio-retry = "0.3.0"
-tendermint = "0.39.1"
-tendermint-proto = "0.39.1"
-tendermint-light-client = { version = "0.39.1", features = ["rust-crypto"], default-features = false }
-tendermint-rpc = { version = "0.39.1", default-features = false }
+tendermint = "0.40.0"
+tendermint-proto = "0.40.0"
+tendermint-light-client = { version = "0.40.0", features = ["rust-crypto"], default-features = false }
+tendermint-rpc = { version = "0.40.0", default-features = false }
 curve25519-dalek = { version = "4.1.3", features = ["legacy_compatibility"] }
 x25519-dalek = { version = "2.0.1", features = ["static_secrets"] }
 ed25519-dalek = { version = "2.0.0", features = ["rand_core", "digest"] }
@@ -49,34 +49,34 @@ intrusive-collections = "0.9.7"
 sha2 = { version = "0.10.7", features = ["oid"] }
 hmac = "0.12.1"
 honggfuzz = "0.5.55"
-arbitrary = { version = "1.2.0", features = ["derive"] }
+arbitrary = { version = "1.4.1", features = ["derive"] }
 num-bigint = "0.4"
 num-traits = "0.2.19"
 num-derive = "0.4.2"
 bech32 = "0.11.0"
-impl-trait-for-tuples = "0.2.1"
+impl-trait-for-tuples = "0.2.3"
 x509-parser = "0.16.0"
 oid-registry = "0.7.1"
-rsa = "0.9.6"
+rsa = "0.9.7"
 base64-serde = "0.8.0"
 lru = "0.12.5"
 async-trait = "0.1.83"
 cfg-if = "1.0"
 
 # TDX dependencies.
-libc = { version = "0.2.158", optional = true }
+libc = { version = "0.2.168", optional = true }
 nix = { version = "0.29.0", features = ["mount", "signal"], optional = true }
 vsock = { version = "0.5.1", optional = true }
 
 [target.'cfg(not(target_env = "sgx"))'.dependencies.tokio]
-version = "1.40.0"
+version = "1.42.0"
 features = ["full"]
 
 [dev-dependencies]
 # For storage interoperability tests only.
 jsonrpc = { version = "0.18.0", features = ["simple_uds"] }
-tempfile = "3.13.0"
-tendermint-testgen = "0.39.1"
+tempfile = "3.14.0"
+tendermint-testgen = "0.40.0"
 
 [features]
 default = []
diff --git a/secret-sharing/Cargo.toml b/secret-sharing/Cargo.toml
index ae6e24183c6..c04652fb85a 100644
--- a/secret-sharing/Cargo.toml
+++ b/secret-sharing/Cargo.toml
@@ -16,7 +16,7 @@ rand = { version = "0.8" }
 rand_core = { version = "0.6" }
 sha3 = { version = "0.10" }
 subtle = { version = "2.6", default-features = false }
-thiserror = { version = "1.0" }
+thiserror = { version = "2.0" }
 zeroize = { version = "1.7" }
 
 [[bin]]
diff --git a/tests/runtimes/simple-keyvalue/Cargo.toml b/tests/runtimes/simple-keyvalue/Cargo.toml
index 1038de3c6c6..dc6ee78d2be 100644
--- a/tests/runtimes/simple-keyvalue/Cargo.toml
+++ b/tests/runtimes/simple-keyvalue/Cargo.toml
@@ -27,9 +27,9 @@ simple-keymanager = { path = "../simple-keymanager" }
 
 # Third party.
 anyhow = "1.0"
-thiserror = "1.0"
+thiserror = "2.0"
 byteorder = "1.4.3"
-tokio = { version = "1.40.0", features = ["rt"] }
+tokio = { version = "1.42.0", features = ["rt"] }
 
 [features]
 debug-mock-sgx = [
diff --git a/tests/runtimes/simple-rofl/Cargo.toml b/tests/runtimes/simple-rofl/Cargo.toml
index 3cbf3ff9403..be2773b92f9 100644
--- a/tests/runtimes/simple-rofl/Cargo.toml
+++ b/tests/runtimes/simple-rofl/Cargo.toml
@@ -19,12 +19,12 @@ oasis-core-keymanager = { path = "../../../keymanager" }
 
 anyhow = "1.0"
 async-trait = "0.1.83"
-mbedtls = { version = "0.12.3", features = ["x509"] }
+mbedtls = { version = "0.13.0", features = ["x509"] }
 rand = "0.8.5"
-rustls = { version = "0.23.18", default-features = false }
+rustls = { version = "0.23.20", default-features = false }
 rustls-mbedcrypto-provider = { version = "0.1.0" }
 rustls-mbedpki-provider = { version = "0.2.0" }
-tokio = { version = "1.40.0", features = ["rt", "rt-multi-thread", "sync"] }
+tokio = { version = "1.42.0", features = ["rt", "rt-multi-thread", "sync"] }
 
 [features]
 debug-mock-sgx = [
diff --git a/tools/Cargo.toml b/tools/Cargo.toml
index 4db6b3a86b9..1772321178b 100644
--- a/tools/Cargo.toml
+++ b/tools/Cargo.toml
@@ -6,10 +6,10 @@ edition = "2018"
 
 [dependencies]
 anyhow = "1.0"
-thiserror = "1.0"
-serde = { version = "1.0.210", features = ["derive"] }
+thiserror = "2.0"
+serde = { version = "1.0.216", features = ["derive"] }
 toml = "0.8.19"
-clap = "4.5.20"
+clap = "4.5.23"
 ansi_term = "0.12.1"
 
 [[bin]]