diff --git a/Cargo.lock b/Cargo.lock
index 2d04709b..d0b506e7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -282,9 +282,9 @@ checksum = "d77f7ec81a6d05a3abb01ab6eb7590f6083d08449fe5a1c8b1e620283546ccb7"
 
 [[package]]
 name = "indexmap"
-version = "2.1.0"
+version = "2.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d530e1a18b1cb4c484e6e34556a0d948706958449fca0cab753d649f2bce3d1f"
+checksum = "433de089bd45971eecf4668ee0ee8f4cec17db4f8bd8f7bc3197a6ce37aa7d9b"
 dependencies = [
  "equivalent",
  "hashbrown",
@@ -620,18 +620,18 @@ checksum = "836fa6a3e1e547f9a2c4040802ec865b5d85f4014efe00555d7090a3dcaa1090"
 
 [[package]]
 name = "serde"
-version = "1.0.195"
+version = "1.0.196"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63261df402c67811e9ac6def069e4786148c4563f4b50fd4bf30aa370d626b02"
+checksum = "870026e60fa08c69f064aa766c10f10b1d62db9ccd4d0abb206472bee0ce3b32"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.195"
+version = "1.0.196"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "46fe8f8603d81ba86327b23a2e9cdf49e1255fb94a4c5f297f6ee0547178ea2c"
+checksum = "33c85360c95e7d137454dc81d9a4ed2b8efd8fbe19cee57357b32b9771fccb67"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -640,9 +640,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.111"
+version = "1.0.112"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "176e46fa42316f18edd598015a5166857fc835ec732f5215eac6b7bdbf0a84f4"
+checksum = "4d1bd37ce2324cf3bf85e5a25f96eb4baf0d5aa6eba43e7ae8958870c4ec48ed"
 dependencies = [
  "indexmap",
  "itoa",
diff --git a/Cargo.toml b/Cargo.toml
index 9d580b4a..38dca221 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -75,12 +75,12 @@ name = "resolver"
 [dependencies]
 tracing = { version = "0.1" }
 dashmap = { version = "5.5.3" }
-serde = { version = "1.0.195", features = ["derive"] } # derive for Deserialize from package.json
-serde_json = { version = "1.0.111", features = [
+serde = { version = "1.0.196", features = ["derive"] } # derive for Deserialize from package.json
+serde_json = { version = "1.0.112", features = [
   "preserve_order",
 ] } # preserve_order: package_json.exports requires order such as `["require", "import", "default"]`
 rustc-hash = { version = "1.1.0", default-features = false, features = ["std"] }
-indexmap = { version = "2.1.0", features = ["serde"] } # serde for Deserialize from package.json
+indexmap = { version = "2.2.1", features = ["serde"] } # serde for Deserialize from package.json
 dunce = "1.0.4" # Normalize Windows paths to the most compatible format, avoiding UNC where possible
 once_cell = "1.19.0" # Use `std::sync::OnceLock::get_or_try_init` when it is stable.
 thiserror = { version = "1.0.56" }