diff --git a/Cargo.lock b/Cargo.lock
index 24a749d8d3fd..dae056096b80 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2219,7 +2219,7 @@ dependencies = [
  "bitflags 2.6.0",
  "cexpr",
  "clang-sys",
- "itertools 0.12.1",
+ "itertools 0.11.0",
  "lazy_static",
  "lazycell",
  "log",
@@ -9322,28 +9322,6 @@ dependencies = [
  "which",
 ]
 
-[[package]]
-name = "prost-build"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8bdf592881d821b83d471f8af290226c8d51402259e9bb5be7f9f8bdebbb11ac"
-dependencies = [
- "bytes",
- "heck 0.4.1",
- "itertools 0.11.0",
- "log",
- "multimap 0.8.3",
- "once_cell",
- "petgraph",
- "prettyplease 0.2.15",
- "prost 0.12.6",
- "prost-types 0.12.6",
- "regex",
- "syn 2.0.66",
- "tempfile",
- "which",
-]
-
 [[package]]
 name = "prost-build"
 version = "0.13.1"
@@ -9385,7 +9363,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "81bddcdb20abf9501610992b6759a4c888aef7d1a7247ef75e2404275ac24af1"
 dependencies = [
  "anyhow",
- "itertools 0.12.1",
+ "itertools 0.11.0",
  "proc-macro2",
  "quote",
  "syn 2.0.66",
@@ -9577,7 +9555,7 @@ dependencies = [
  "indoc",
  "libc",
  "memoffset",
- "parking_lot 0.12.1",
+ "parking_lot 0.11.2",
  "portable-atomic",
  "pyo3-build-config",
  "pyo3-ffi",
@@ -10889,7 +10867,7 @@ dependencies = [
  "madsim-tokio",
  "num-bigint",
  "prost 0.13.1",
- "prost-build 0.12.1",
+ "prost-build 0.13.1",
  "prost-reflect",
  "prost-types 0.13.1",
  "protox",
@@ -11090,7 +11068,7 @@ dependencies = [
  "sql-json-path",
  "thiserror",
  "thiserror-ext",
- "tonic 0.11.0",
+ "tonic 0.12.2",
  "tracing",
  "workspace-hack",
  "zstd 0.13.0",
diff --git a/src/connector/codec/Cargo.toml b/src/connector/codec/Cargo.toml
index bdb43ff0a906..de5ce1dbae04 100644
--- a/src/connector/codec/Cargo.toml
+++ b/src/connector/codec/Cargo.toml
@@ -46,7 +46,7 @@ hex = "0.4"
 tokio = { version = "0.2", package = "madsim-tokio" }
 
 [build-dependencies]
-prost-build = "0.12"
+prost-build = "0.13"
 
 [target.'cfg(not(madsim))'.dependencies]
 workspace-hack = { path = "../../workspace-hack" }
diff --git a/src/expr/impl/Cargo.toml b/src/expr/impl/Cargo.toml
index 25a1c21444b4..d905d49a5e6a 100644
--- a/src/expr/impl/Cargo.toml
+++ b/src/expr/impl/Cargo.toml
@@ -70,7 +70,7 @@ thiserror-ext = { workspace = true }
 tokio = { version = "0.2", package = "madsim-tokio", features = ["time"] }
 # For arrow-udf-flight
 # TODO(http-bump): bump once arrow-udf switches to tonic 0.12
-tonic = { version = "0.11", optional = true }
+tonic = { version = "0.12", optional = true }
 tracing = "0.1"
 zstd = { version = "0.13", default-features = false, optional = true }