diff --git a/Cargo.lock b/Cargo.lock
index 32a2056..e1899fa 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2245,9 +2245,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "toml"
-version = "1.1.4+spec-1.1.0"
+version = "1.1.5+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3aace63f4bbcdfc2c965b059de67119c89c4017a70d633be6c104910f67056f5"
+checksum = "12c0ba9680044b4ce98d391a62094047eada0d64860b80166c39f4a6b5640785"
 dependencies = [
  "indexmap",
  "serde_core",
@@ -2284,9 +2284,9 @@ checksum = "7d56353a2a665ad0f41a421187180aab746c8c325620617ad883a99a1cbe66d2"
 
 [[package]]
 name = "trash"
-version = "5.2.6"
+version = "5.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7602e0c7d66ec2d92a8c917219fbc7894039efa2063b9064260110828a356f46"
+checksum = "08676401d031c4a43b7022d90e1748ef4624fabb68ac2abf0cb5812f8c02d78e"
 dependencies = [
  "chrono",
  "libc",
diff --git a/Cargo.toml b/Cargo.toml
index b043aa4..2282d8d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -33,7 +33,7 @@ thiserror = "=2.0.20"
 # Config is ruled TOML (SPEC 10.1, D-N8): a real format needs a real parser,
 # and a hand-rolled one would re-create exactly the escaping/typing edge cases
 # this crate exists to refuse. Pinned exactly like every direct dependency.
-toml = "=1.1.4"
+toml = "=1.1.5"
 uuid = { version = "=1.26.0", features = ["v7", "serde"] }
 
 # specta derives the cross-boundary type descriptions. The `uuid` feature is
@@ -72,7 +72,7 @@ image = "=0.25.10"
 ignore = "=0.4.33"
 rayon = "=1.12.0"
 memchr = "=2.8.3"
-trash = "=5.2.6"
+trash = "=5.2.7"
 
 # The rules `docs/AGENTS.md` states for Rust, in the place the compiler reads.
 #