diff --git a/Cargo.lock b/Cargo.lock
index 8a081bfe5..3625d2e50 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -934,9 +934,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.27"
+version = "4.5.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "769b0145982b4b48713e01ec42d61614425f27b7058bda7180a3a41f30104796"
+checksum = "3e77c3243bd94243c03672cb5154667347c457ca271254724f9f393aee1c05ff"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -956,9 +956,9 @@ dependencies = [
 
 [[package]]
 name = "clap_derive"
-version = "4.5.24"
+version = "4.5.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "54b755194d6389280185988721fffba69495eed5ee9feeee9a599b53db80318c"
+checksum = "bf4ced95c6f4a675af3da73304b9ac4ed991640c36374e4b46795c49e17cf1ed"
 dependencies = [
  "heck 0.5.0",
  "proc-macro2",
diff --git a/bazelfe-bazel-wrapper/Cargo.toml b/bazelfe-bazel-wrapper/Cargo.toml
index c58cfb2a2..93c10b750 100644
--- a/bazelfe-bazel-wrapper/Cargo.toml
+++ b/bazelfe-bazel-wrapper/Cargo.toml
@@ -16,7 +16,7 @@ async-stream = "0.3.6"
 async-trait = "0.1.86"
 bytes = "1.9.0"
 ctrlc = "3.4.5"
-clap = { version = "4.5.27", features = ["derive", "env"] }
+clap = { version = "4.5.28", features = ["derive", "env"] }
 lazy_static = "1.5.0"
 log = "0.4.25"
 prost = "0.12.6"
diff --git a/bazelfe-core/Cargo.toml b/bazelfe-core/Cargo.toml
index be8f3aa64..e1d58b93f 100644
--- a/bazelfe-core/Cargo.toml
+++ b/bazelfe-core/Cargo.toml
@@ -49,7 +49,7 @@ async-stream = "0.3.6"
 async-trait = "0.1.86"
 byteorder = "1.5.0"
 bytes = "1.9.0"
-clap = { version = "4.5.27", features = ["derive", "env"] }
+clap = { version = "4.5.28", features = ["derive", "env"] }
 ctrlc = "3.4.5"
 exec = "0.3.1"
 lazy_static = "1.5.0"
diff --git a/bzl-remote-core/Cargo.toml b/bzl-remote-core/Cargo.toml
index 15f1d8699..f50b87dd0 100644
--- a/bzl-remote-core/Cargo.toml
+++ b/bzl-remote-core/Cargo.toml
@@ -21,7 +21,7 @@ async-stream = "0.3.6"
 async-trait = "0.1.86"
 byteorder = "1.5.0"
 bytes = "1.9.0"
-clap = { version = "4.5.27", features = ["derive", "env"] }
+clap = { version = "4.5.28", features = ["derive", "env"] }
 base64 = "0.22.1"
 lazy_static = "1.5.0"
 openssl = { version = "0.10.70", features = ["vendored"] }