diff --git a/Cargo.lock b/Cargo.lock
index 0c869226..61c12f6f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3637,7 +3637,7 @@ dependencies = [
  "tokio-retry",
  "tokio-stream",
  "toml",
- "tough",
+ "tough 0.22.0",
  "tough-kms",
  "tough-ssm",
  "update-metadata",
@@ -4567,7 +4567,7 @@ version = "0.8.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c1c97747dbf44bb1ca44a561ece23508e99cb592e862f22222dcf42f51d1e451"
 dependencies = [
- "heck 0.4.1",
+ "heck 0.5.0",
  "proc-macro2",
  "quote",
  "syn 2.0.117",
@@ -5201,6 +5201,41 @@ dependencies = [
  "walkdir",
 ]
 
+[[package]]
+name = "tough"
+version = "0.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8031cff0872dd1c6312370515a6be8098f6ea5512f1bad725016046fc725f272"
+dependencies = [
+ "async-recursion",
+ "async-trait",
+ "aws-lc-rs",
+ "bytes",
+ "chrono",
+ "dyn-clone",
+ "futures",
+ "futures-core",
+ "globset",
+ "hex",
+ "log",
+ "olpc-cjson",
+ "pem",
+ "percent-encoding",
+ "reqwest",
+ "rustls 0.23.37",
+ "serde",
+ "serde_json",
+ "serde_plain",
+ "snafu",
+ "tempfile",
+ "tokio",
+ "tokio-util",
+ "typed-path",
+ "untrusted 0.7.1",
+ "url",
+ "walkdir",
+]
+
 [[package]]
 name = "tough-kms"
 version = "0.13.0"
@@ -5214,7 +5249,7 @@ dependencies = [
  "pem",
  "snafu",
  "tokio",
- "tough",
+ "tough 0.21.0",
 ]
 
 [[package]]
@@ -5228,7 +5263,7 @@ dependencies = [
  "aws-smithy-http-client",
  "snafu",
  "tokio",
- "tough",
+ "tough 0.21.0",
 ]
 
 [[package]]
@@ -5378,7 +5413,7 @@ dependencies = [
  "snafu",
  "tempfile",
  "tokio",
- "tough",
+ "tough 0.21.0",
  "tough-kms",
  "tough-ssm",
  "url",
diff --git a/Cargo.toml b/Cargo.toml
index cfb9a0e3..ead220cf 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -183,7 +183,7 @@ tokio = "1"
 tokio-stream = "0.1"
 tokio-retry = "0.3"
 toml = "0.9"
-tough = "0.21"
+tough = "0.22"
 tough-kms = "0.13"
 tough-ssm = "0.16"
 tracing = "0.1"