diff --git a/Cargo.lock b/Cargo.lock
index 9ce454688c384..b47a454cdbd80 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9134,28 +9134,6 @@ dependencies = [
  "which",
 ]
 
-[[package]]
-name = "prost-build"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8bdf592881d821b83d471f8af290226c8d51402259e9bb5be7f9f8bdebbb11ac"
-dependencies = [
- "bytes",
- "heck 0.4.1",
- "itertools 0.11.0",
- "log",
- "multimap 0.8.3",
- "once_cell",
- "petgraph",
- "prettyplease 0.2.15",
- "prost 0.12.6",
- "prost-types 0.12.6",
- "regex",
- "syn 2.0.66",
- "tempfile",
- "which",
-]
-
 [[package]]
 name = "prost-build"
 version = "0.13.1"
@@ -10697,7 +10675,7 @@ dependencies = [
  "madsim-tokio",
  "num-bigint",
  "prost 0.13.1",
- "prost-build 0.12.1",
+ "prost-build 0.13.1",
  "prost-reflect",
  "prost-types 0.13.1",
  "protox",
@@ -10898,7 +10876,7 @@ dependencies = [
  "sql-json-path",
  "thiserror",
  "thiserror-ext",
- "tonic 0.11.0",
+ "tonic 0.12.2",
  "tracing",
  "workspace-hack",
  "zstd 0.13.0",
diff --git a/src/connector/codec/Cargo.toml b/src/connector/codec/Cargo.toml
index bdb43ff0a9062..de5ce1dbae04a 100644
--- a/src/connector/codec/Cargo.toml
+++ b/src/connector/codec/Cargo.toml
@@ -46,7 +46,7 @@ hex = "0.4"
 tokio = { version = "0.2", package = "madsim-tokio" }
 
 [build-dependencies]
-prost-build = "0.12"
+prost-build = "0.13"
 
 [target.'cfg(not(madsim))'.dependencies]
 workspace-hack = { path = "../../workspace-hack" }
diff --git a/src/expr/impl/Cargo.toml b/src/expr/impl/Cargo.toml
index 25a1c21444b42..d905d49a5e6a7 100644
--- a/src/expr/impl/Cargo.toml
+++ b/src/expr/impl/Cargo.toml
@@ -70,7 +70,7 @@ thiserror-ext = { workspace = true }
 tokio = { version = "0.2", package = "madsim-tokio", features = ["time"] }
 # For arrow-udf-flight
 # TODO(http-bump): bump once arrow-udf switches to tonic 0.12
-tonic = { version = "0.11", optional = true }
+tonic = { version = "0.12", optional = true }
 tracing = "0.1"
 zstd = { version = "0.13", default-features = false, optional = true }