diff --git a/Cargo.lock b/Cargo.lock
index 47033ba4b..77fcf4e66 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -201,7 +201,7 @@ dependencies = [
  "libc",
  "liboverdrop",
  "libsystemd",
- "nix",
+ "nix 0.28.0",
  "once_cell",
  "openssl",
  "ostree-ext",
@@ -320,6 +320,12 @@ version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 
+[[package]]
+name = "cfg_aliases"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd16c4719339c4530435d38e511904438d07cce7950afa3718a84ac36c10e89e"
+
 [[package]]
 name = "chrono"
 version = "0.4.34"
@@ -1087,7 +1093,7 @@ dependencies = [
  "hmac",
  "libc",
  "log",
- "nix",
+ "nix 0.27.1",
  "nom",
  "once_cell",
  "serde",
@@ -1197,6 +1203,18 @@ dependencies = [
  "memoffset",
 ]
 
+[[package]]
+name = "nix"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab2156c4fce2f8df6c499cc1c763e4394b7482525bf2a9701c9d79d215f519e4"
+dependencies = [
+ "bitflags 2.4.2",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
 [[package]]
 name = "nom"
 version = "7.1.3"
@@ -1906,9 +1924,9 @@ checksum = "69758bda2e78f098e4ccb393021a0963bb3442eac05f135c30f61b7370bbafae"
 
 [[package]]
 name = "tempfile"
-version = "3.10.0"
+version = "3.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a365e8cd18e44762ef95d87f284f4b5cd04107fec2ff3052bd6a3e6069669e67"
+checksum = "85b77fafb263dd9d05cbeac119526425676db3784113aa9295c88498cbf8bff1"
 dependencies = [
  "cfg-if",
  "fastrand",
diff --git a/lib/Cargo.toml b/lib/Cargo.toml
index bbe29e943..515a3b361 100644
--- a/lib/Cargo.toml
+++ b/lib/Cargo.toml
@@ -42,7 +42,7 @@ serde_with = ">= 3.6.1, < 4"
 tokio = { features = ["io-std", "time", "process", "rt", "net"], version = ">= 1.36.0" }
 tokio-util = { features = ["io-util"], version = "0.7" }
 tracing = "0.1"
-tempfile = "3.10.0"
+tempfile = "3.10.1"
 toml = "0.8.10"
 xshell = { version = "0.2", optional = true }
 uuid = { version = "1.7.0", features = ["v4"] }