diff --git a/deny.toml b/deny.toml
index c93a6498..c4312631 100644
--- a/deny.toml
+++ b/deny.toml
@@ -37,10 +37,6 @@ license-files = [
 multiple-versions = "deny"
 highlight = "all"
 skip-tree = [{ name = "tower", version = ">=0.3, <=0.4" }]
-skip = [
-    # pulled in by hyper, http, and serde_urlencoded
-    { name = "itoa", version = "=0.4.8" },
-]
 
 [sources]
 unknown-registry = "warn"
diff --git a/tower-http/Cargo.toml b/tower-http/Cargo.toml
index ed9e776f..7cfb493a 100644
--- a/tower-http/Cargo.toml
+++ b/tower-http/Cargo.toml
@@ -32,7 +32,7 @@ mime = { version = "0.3", optional = true, default_features = false }
 mime_guess = { version = "2", optional = true, default_features = false }
 percent-encoding = { version = "2.1.0", optional = true }
 tokio = { version = "1", optional = true, default_features = false }
-tokio-util = { version = "0.6.8", optional = true, default_features = false, features = ["io"] }
+tokio-util = { version = "0.7", optional = true, default_features = false, features = ["io"] }
 tower = { version = "0.4.1", optional = true }
 tracing = { version = "0.1", default_features = false, optional = true }
 httpdate = { version = "1.0", optional = true }