diff --git a/Cargo.lock b/Cargo.lock
index 5f5eb9a..cb5e777 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -227,9 +227,9 @@ checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
 
 [[package]]
 name = "cached"
-version = "3.1.1"
+version = "4.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "133b6b7d6a828c24d5055ef51e67457002b4017ae5ea3d1b1552ca35a44b1119"
+checksum = "c5a6cf8262820194a1488ece477f5fb5ba9256ef25229d525470e71d6e9a5835"
 dependencies = [
  "hashbrown 0.17.1",
  "parking_lot",
diff --git a/Cargo.toml b/Cargo.toml
index 7f9af49..53dbce1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -43,7 +43,7 @@ unicode-width = "0.2"
 # darling and a second TOML parser into the build, and nothing here uses the
 # `#[cached]` attribute: `tui::data` drives `LruCache` directly. `time_stores`
 # is what would supply a TTL store, which TUI-72 notes the memo does not have.
-cached = { version = "3", default-features = false }
+cached = { version = "4", default-features = false }
 # `evolve`'s downloader/extractor/installer. ureq rather than the default reqwest:
 # nothing here is async, so reqwest would drag tokio into a synchronous CLI. rustls
 # keeps the static musl release builds free of a system OpenSSL. `github` is the only