diff --git a/Cargo.toml b/Cargo.toml
index c0e73ba..3e51b77 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -46,19 +46,19 @@ unexpected_cfgs = { level = "warn", check-cfg = ["cfg(kani)", "cfg(kani_slow)"]
 
 [dependencies]
 serde = { version = "1", optional = true, default-features = false, features = ["derive"] }
-num-bigint = { version = "0.4", optional = true }
+num-bigint = { version = "0.5", optional = true }
 num-traits = { version = "0.2", optional = true }
-sha2 = { version = "0.10", optional = true }
+sha2 = { version = "0.11", optional = true }
 
 [dev-dependencies]
 # fork/timeout (default features) pull in wait-timeout, which doesn't build
 # on wasm32 — and the fork runner isn't used here anyway.
 proptest = { version = "1", default-features = false, features = ["std", "bit-set"] }
-num-bigint = "0.4"
+num-bigint = "0.5"
 num-traits = "0.2"
 serde_json = "1"
-criterion = { version = "0.5", default-features = false }
-sha2 = "0.10.9"
+criterion = { version = "0.8", default-features = false }
+sha2 = "0.11.0"
 xsum = "0.1"
 
 [[example]]
diff --git a/bindings/python/Cargo.toml b/bindings/python/Cargo.toml
index 099f7a8..86aa8f2 100644
--- a/bindings/python/Cargo.toml
+++ b/bindings/python/Cargo.toml
@@ -16,4 +16,4 @@ crate-type = ["cdylib"]
 [dependencies]
 bitrep_core = { package = "bitrep", path = "../..", features = ["stats", "receipts"] }
 # abi3-py38: one forward-compatible wheel per platform (Python 3.8+), no per-version build.
-pyo3 = { version = "0.22", features = ["extension-module", "abi3-py38"] }
+pyo3 = { version = "0.29", features = ["extension-module", "abi3-py38"] }