diff --git a/Cargo.lock b/Cargo.lock
index 3022ca8649a2..d867932812c3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -516,9 +516,9 @@ checksum = "325918d6fe32f23b19878fe4b34794ae41fc19ddbe53b10571a4874d44ffd39b"
 
 [[package]]
 name = "bzip2"
-version = "0.4.4"
+version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bdb116a6ef3f6c3698828873ad02c3014b3c85cadb88496095628e3ef1e347f8"
+checksum = "bafdbf26611df8c14810e268ddceda071c297570a5fb360ceddf617fe417ef58"
 dependencies = [
  "bzip2-sys",
  "libc",
@@ -961,9 +961,9 @@ dependencies = [
 
 [[package]]
 name = "crossbeam-channel"
-version = "0.5.13"
+version = "0.5.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33480d6946193aa8033910124896ca395333cae7e2d1113d1fef6c3272217df2"
+checksum = "06ba6d68e24814cb8de6bb986db8222d3a027d15872cabc0d18817bc3c0e4471"
 dependencies = [
  "crossbeam-utils",
 ]
@@ -5460,9 +5460,9 @@ dependencies = [
 
 [[package]]
 name = "tracy-client"
-version = "0.17.5"
+version = "0.17.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "51e295eae54124872df35720dc3a5b1e827c7deee352b342ec7f7e626d0d0ef3"
+checksum = "73202d787346a5418f8222eddb5a00f29ea47caf3c7d38a8f2f69f8455fa7c7e"
 dependencies = [
  "loom",
  "once_cell",
@@ -6750,9 +6750,9 @@ checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
 
 [[package]]
 name = "zip"
-version = "2.2.1"
+version = "2.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "99d52293fc86ea7cf13971b3bb81eb21683636e7ae24c729cdaf1b7c4157a352"
+checksum = "ae9c1ea7b3a5e1f4b922ff856a129881167511563dc219869afe3787fc0c1a45"
 dependencies = [
  "arbitrary",
  "crc32fast",
diff --git a/core/Cargo.toml b/core/Cargo.toml
index 7312dc7903d8..cb765775e967 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -68,7 +68,7 @@ unic-segment = "0.9.0"
 id3 = "1.16.0"
 either = "1.13.0"
 chardetng = "0.1.17"
-tracy-client = { version = "0.17.5", optional = true, default-features = false }
+tracy-client = { version = "0.17.6", optional = true, default-features = false }
 
 [target.'cfg(not(target_family = "wasm"))'.dependencies.futures]
 workspace = true
diff --git a/frontend-utils/Cargo.toml b/frontend-utils/Cargo.toml
index de30120eae36..4c4a9a90a0b0 100644
--- a/frontend-utils/Cargo.toml
+++ b/frontend-utils/Cargo.toml
@@ -18,7 +18,7 @@ toml_edit = { version = "0.22.22", features = ["parse"] }
 url = { workspace = true }
 tracing = { workspace = true }
 thiserror = { workspace = true }
-zip = { version = "2.2.1", default-features = false, features = ["deflate"] }
+zip = { version = "2.2.2", default-features = false, features = ["deflate"] }
 urlencoding = "2.1.3"
 ruffle_core = { path = "../core", default-features = false }
 ruffle_render = { path = "../render", default-features = false }
diff --git a/video/external/Cargo.toml b/video/external/Cargo.toml
index f72df1774e47..8d04bd836e5d 100644
--- a/video/external/Cargo.toml
+++ b/video/external/Cargo.toml
@@ -20,7 +20,7 @@ thiserror = { workspace = true }
 libloading = { version = "0.8.6", optional = true }
 reqwest = { version = "0.12.9", default-features = false, features = ["blocking"], optional = true }
 hex = { version = "0.4.3", optional = true }
-bzip2 = { version = "0.4.4", features = ["static"], optional = true }
+bzip2 = { version = "0.5.0", features = ["static"], optional = true }
 tempfile = { version = "3.14.0", optional = true }
 sha2 = { version = "0.10.8", optional = true }
 
diff --git a/web/Cargo.toml b/web/Cargo.toml
index 831e2287ba56..69f31735307d 100644
--- a/web/Cargo.toml
+++ b/web/Cargo.toml
@@ -59,7 +59,7 @@ gloo-net =  { version = "0.6.0", default-features = false, features = ["websocke
 rfd = { workspace = true, features = ["file-handle-inner"] }
 wasm-streams = "0.4.2"
 futures = { workspace = true }
-zip = { version = "2.2.1", default-features = false}
+zip = { version = "2.2.2", default-features = false}
 
 [dependencies.ruffle_core]
 path = "../core"