diff --git a/Cargo.lock b/Cargo.lock
index 8779f0d30..ade265a7d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -68,7 +68,7 @@ dependencies = [
  "flate2",
  "futures-core",
  "futures-util",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "indoc",
  "itertools 0.13.0",
  "log",
@@ -130,7 +130,7 @@ dependencies = [
  "criterion",
  "exhaust",
  "futures-core",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "itertools 0.13.0",
  "log",
  "macro_rules_attribute",
@@ -163,7 +163,7 @@ dependencies = [
  "futures-core",
  "gilrs",
  "gltf",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "indicatif",
  "itertools 0.13.0",
  "kira",
@@ -236,7 +236,7 @@ dependencies = [
  "flume",
  "futures-channel",
  "futures-util",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "indoc",
  "itertools 0.13.0",
  "log",
@@ -4431,9 +4431,9 @@ dependencies = [
 
 [[package]]
 name = "pollster"
-version = "0.3.0"
+version = "0.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22686f4785f02a4fcc856d3b3bb19bf6c8160d103f7a99cc258bddd0251dc7f2"
+checksum = "2f3a9f18d041e6d0e102a0a46750538147e5e8992d3b4873aaafee2520b00ce3"
 
 [[package]]
 name = "portable-atomic"
@@ -6131,9 +6131,9 @@ dependencies = [
 
 [[package]]
 name = "tower-http"
-version = "0.5.2"
+version = "0.6.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e9cd434a998747dd2c4276bc96ee2e0c7a2eadf3cae88e52be55a05fa9053f5"
+checksum = "403fa3b783d4b626a8ad51d766ab03cb6d2dbfc46b1c5d4448395e6628dc9697"
 dependencies = [
  "bitflags 2.6.0",
  "bytes",
diff --git a/Cargo.toml b/Cargo.toml
index 02b82a97d..3fac5859e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -101,7 +101,7 @@ futures-util = { version = "0.3.31", default-features = false, features = ["allo
 gilrs = { version = "0.10.4" }
 gloo-timers = { version = "0.3.0", default-features = false }
 half = { version = "2.3.1", default-features = false, features = ["bytemuck"] }
-hashbrown = { version = "0.14.0", default-features = false, features = ["ahash", "inline-more"] }
+hashbrown = { version = "0.15.2", default-features = false, features = ["default-hasher", "inline-more"] }
 image = { version = "0.25.1", default-features = false }
 imgref = { version = "1.10.1", default-features = false }
 indoc = { version = "2.0.1", default-features = false }
@@ -118,7 +118,7 @@ paste = {version = "1.0.15", default-features = false }
 petgraph = { version = "0.6.2", default-features = false, features = ["graphmap"] }
 png-decoder = { version = "0.1.1", default-features = false } # used by all-is-cubes for no_std-compatible reading pngs
 png = { version = "0.17.6", default-features = false } # used by all-is-cubes-desktop for writing pngs
-pollster = { version = "0.3.0", default-features = false }
+pollster = { version = "0.4.0", default-features = false }
 pretty_assertions = { version = "1.2.0" }
 rand = { version = "0.8.3", default-features = false }
 rand_xoshiro = { version = "0.6.0", default-features = false }
diff --git a/all-is-cubes-server/Cargo.toml b/all-is-cubes-server/Cargo.toml
index 01d76ba5f..481c97a97 100644
--- a/all-is-cubes-server/Cargo.toml
+++ b/all-is-cubes-server/Cargo.toml
@@ -40,7 +40,7 @@ include_dir = "0.7.2"
 mime_guess = "2.0.4" # also used indirectly by tower-http
 simplelog = { workspace = true }
 tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
-tower-http = { version = "0.5.0", features = ["fs"] }
+tower-http = { version = "0.6.2", features = ["fs"] }
 
 [dev-dependencies]
 async_fn_traits = { workspace = true }
diff --git a/all-is-cubes-wasm/Cargo.lock b/all-is-cubes-wasm/Cargo.lock
index cd3491859..593152a77 100644
--- a/all-is-cubes-wasm/Cargo.lock
+++ b/all-is-cubes-wasm/Cargo.lock
@@ -45,7 +45,7 @@ dependencies = [
  "exhaust",
  "flate2",
  "futures-core",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "indoc",
  "itertools",
  "log",
@@ -91,7 +91,7 @@ dependencies = [
  "all-is-cubes-ui",
  "exhaust",
  "futures-core",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "itertools",
  "log",
  "macro_rules_attribute",
@@ -145,7 +145,7 @@ dependencies = [
  "flume",
  "futures-channel",
  "futures-util",
- "hashbrown 0.14.5",
+ "hashbrown 0.15.2",
  "indoc",
  "itertools",
  "log",
@@ -633,6 +633,12 @@ dependencies = [
  "spin",
 ]
 
+[[package]]
+name = "foldhash"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f81ec6369c545a7d40e4589b5597581fa1c441fe1cce96dd1de43159910a36a2"
+
 [[package]]
 name = "foreign-types"
 version = "0.5.0"
@@ -875,6 +881,9 @@ name = "hashbrown"
 version = "0.15.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289"
+dependencies = [
+ "foldhash",
+]
 
 [[package]]
 name = "heck"
@@ -1328,9 +1337,9 @@ dependencies = [
 
 [[package]]
 name = "pollster"
-version = "0.3.0"
+version = "0.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22686f4785f02a4fcc856d3b3bb19bf6c8160d103f7a99cc258bddd0251dc7f2"
+checksum = "2f3a9f18d041e6d0e102a0a46750538147e5e8992d3b4873aaafee2520b00ce3"
 
 [[package]]
 name = "ppv-lite86"