diff --git a/Cargo.lock b/Cargo.lock
index 598eb87c..d502f375 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3117,7 +3117,7 @@ dependencies = [
  "png",
  "pprof",
  "rand 0.10.1",
- "reqwest 0.13.3",
+ "reqwest 0.13.4",
  "rustls",
  "serde",
  "serde_json",
@@ -3347,7 +3347,7 @@ dependencies = [
  "futures-util",
  "mars-definition-source",
  "mars-definition-source-common",
- "reqwest 0.13.3",
+ "reqwest 0.13.4",
  "serde",
  "serde_json",
  "sha2 0.11.0",
@@ -3380,7 +3380,7 @@ dependencies = [
  "futures-util",
  "mars-definition-source",
  "mars-definition-source-common",
- "reqwest 0.13.3",
+ "reqwest 0.13.4",
  "serde",
  "serde_json",
  "sha2 0.11.0",
@@ -3927,7 +3927,7 @@ dependencies = [
  "bytes",
  "mars-source",
  "mars-types",
- "reqwest 0.13.3",
+ "reqwest 0.13.4",
  "thiserror 2.0.18",
  "tokio",
  "tracing",
@@ -4635,9 +4635,9 @@ checksum = "6ca2f98a0437b427b4b08f19f1caa3c44db885a202bc12cfea13d6c702243d68"
 
 [[package]]
 name = "opentelemetry_sdk"
-version = "0.32.0"
+version = "0.32.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "368afaed344110f40b179bb8fbe54bc52d98f9bd2b281799ef32487c2650c956"
+checksum = "9b59f80e1ac4d5ff7a2db8fb6c80badb7f0f3f858211fba08dd9aaec750894f9"
 dependencies = [
  "futures-channel",
  "futures-executor",
@@ -5637,9 +5637,9 @@ dependencies = [
 
 [[package]]
 name = "reqwest"
-version = "0.13.3"
+version = "0.13.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "62e0021ea2c22aed41653bc7e1419abb2c97e038ff2c33d0e1309e49a97deec0"
+checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
 dependencies = [
  "base64",
  "bytes",
@@ -5791,9 +5791,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-native-certs"
-version = "0.8.3"
+version = "0.8.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "612460d5f7bea540c490b2b6395d8e34a953e52b491accd6c86c8164c5932a63"
+checksum = "dab5152771c58876a2146916e53e35057e1a4dfa2b9df0f0305b07f611fdea4d"
 dependencies = [
  "openssl-probe 0.2.1",
  "rustls-pki-types",
@@ -7319,9 +7319,9 @@ dependencies = [
 
 [[package]]
 name = "uuid"
-version = "1.23.1"
+version = "1.23.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddd74a9687298c6858e9b88ec8935ec45d22e8fd5e6394fa1bd4e99a87789c76"
+checksum = "d258b83ceec21034727ecee8c382cfa6c3e133699b0742c64571814fb420c9f7"
 dependencies = [
  "js-sys",
  "serde_core",
@@ -7610,9 +7610,9 @@ dependencies = [
 
 [[package]]
 name = "wide"
-version = "1.4.0"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a7714cd0430a663154667c74da5d09325c2387695bee18b3f7f72825aa3693a"
+checksum = "dfdfe6a32973f2d1b268b8895845a8a96cac2f0191e72c27cc929036060dbf89"
 dependencies = [
  "bytemuck",
  "safe_arch",
diff --git a/Cargo.toml b/Cargo.toml
index 5645a0ca..fa7b2d7d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -243,9 +243,9 @@ proj-sys            = "0.27.0"
 quick-xml           = "0.40.1"
 rand                = "0.10.1"
 regex               = "1.12.3"
-reqwest             = { version = "0.13.3", default-features = false }
+reqwest             = { version = "0.13.4", default-features = false }
 rustls              = "0.23.40"
-rustls-native-certs = "0.8.3"
+rustls-native-certs = "0.8.4"
 rustybuzz           = "0.20.1"
 rstar               = "0.13.0"
 schemars            = "1.2.1"
@@ -263,7 +263,7 @@ thiserror           = "2.0.18"
 tiny-skia           = "0.12.0"
 # safe SIMD wrappers (portable, no nightly, no unsafe escape hatch). used by
 # mars-render for the demultiply path that feeds the png + webp encoders.
-wide                = "1.4.0"
+wide                = "1.5.0"
 tokio               = { version = "1.52.3", features = ["rt-multi-thread", "macros", "signal", "sync", "time", "fs", "net"] }
 tokio-stream        = "0.1.18"
 tokio-postgres      = { version = "0.7.17", features = ["with-uuid-1"] }
@@ -281,11 +281,11 @@ tracing-subscriber  = { version = "0.3.23", features = ["env-filter", "json", "f
 # floors track the latest opentelemetry release that tracing-opentelemetry
 # 0.33 compiles against (opentelemetry 0.32 family); bump in lockstep.
 opentelemetry       = { version = "0.32.0", default-features = false, features = ["trace"] }
-opentelemetry_sdk   = { version = "0.32.0", default-features = false }
+opentelemetry_sdk   = { version = "0.32.1", default-features = false }
 opentelemetry-otlp  = { version = "0.32.0", default-features = false }
 opentelemetry-semantic-conventions = { version = "0.32.0", default-features = false, features = ["semconv_experimental"] }
 tracing-opentelemetry = { version = "0.33.0", default-features = false, features = ["tracing-log"] }
-uuid                = { version = "1.23.1", features = ["serde"] }
+uuid                = { version = "1.23.2", features = ["serde"] }
 wiremock            = "0.6.5"
 # zip carrier for the shapefile decoder: one binding fetches a single archive
 # bundling .shp + .shx + .dbf (+ optional .prj). default features pull bzip2