diff --git a/Cargo.lock b/Cargo.lock
index 629104628..2bc37ef10 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3363,9 +3363,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-util"
-version = "0.7.17"
+version = "0.7.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2efa149fe76073d6e8fd97ef4f4eca7b67f599660115591483572e406e165594"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
 dependencies = [
  "bytes",
  "futures-core",
diff --git a/bazelfe-bazel-wrapper/Cargo.toml b/bazelfe-bazel-wrapper/Cargo.toml
index b21a5ddaf..e1f5b3962 100644
--- a/bazelfe-bazel-wrapper/Cargo.toml
+++ b/bazelfe-bazel-wrapper/Cargo.toml
@@ -30,7 +30,7 @@ libc = "0.2.178"
 crossbeam-channel = { version = "0.5.15", optional = true }
 notify = { version = "8.2.0", optional = true }
 tokio-serde = { version = "0.9.0", features = ["bincode"], optional = true }
-tokio-util = { version = "0.7.17", features = ["compat"] }
+tokio-util = { version = "0.7.18", features = ["compat"] }
 sha2 = "0.10.9"
 nix = { version = "0.30.1", features = ["signal"] }
 flume = { version = "0.11.1", optional = true }
diff --git a/bazelfe-core/Cargo.toml b/bazelfe-core/Cargo.toml
index 9eea422d7..472ba36fb 100644
--- a/bazelfe-core/Cargo.toml
+++ b/bazelfe-core/Cargo.toml
@@ -77,7 +77,7 @@ libc = "0.2.178"
 crossbeam-channel = { version = "0.5.15", optional = true }
 notify = { version = "8.2.0", optional = true }
 tokio-serde = { version = "0.9.0", features = ["bincode"], optional = true }
-tokio-util = { version = "0.7.17", features = ["compat"] }
+tokio-util = { version = "0.7.18", features = ["compat"] }
 sha2 = "0.10.9"
 flume = { version = "0.11.1", optional = true }
 trim-margin = { version = "0.1.0", optional = true }
diff --git a/bzl-remote-core/Cargo.toml b/bzl-remote-core/Cargo.toml
index 7eac42a99..78be3bef9 100644
--- a/bzl-remote-core/Cargo.toml
+++ b/bzl-remote-core/Cargo.toml
@@ -39,7 +39,7 @@ toml = "0.9.8"
 thiserror = "2.0.17"
 libc = "0.2.178"
 crossbeam-channel = { version = "0.5.15" }
-tokio-util = { version = "0.7.17", features = ["compat"] }
+tokio-util = { version = "0.7.18", features = ["compat"] }
 sha2 = "0.10.9"
 flume = { version = "0.11.1" }
 dashmap = { version = "6.1.0" }