diff --git a/crates/bashkit/Cargo.toml b/crates/bashkit/Cargo.toml
index cf21846d..a26c753d 100644
--- a/crates/bashkit/Cargo.toml
+++ b/crates/bashkit/Cargo.toml
@@ -61,7 +61,7 @@ base64 = { workspace = true, optional = true }
 tracing = { workspace = true, optional = true }
 
 # Embedded Python interpreter (optional)
-monty = { git = "https://github.com/pydantic/monty", tag = "v0.0.7", optional = true }
+monty = { git = "https://github.com/pydantic/monty", rev = "87f8f31", optional = true }
 
 [features]
 default = []
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 92f2d44e..c28f3a51 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -622,6 +622,10 @@ criteria = "safe-to-deploy"
 version = "0.11.0"
 criteria = "safe-to-run"
 
+[[exemptions.linux-raw-sys]]
+version = "0.12.1"
+criteria = "safe-to-run"
+
 [[exemptions.litemap]]
 version = "0.8.1"
 criteria = "safe-to-deploy"
@@ -974,6 +978,10 @@ criteria = "safe-to-deploy"
 version = "1.1.3"
 criteria = "safe-to-run"
 
+[[exemptions.rustix]]
+version = "1.1.4"
+criteria = "safe-to-run"
+
 [[exemptions.rustls]]
 version = "0.23.36"
 criteria = "safe-to-deploy"