diff --git a/Cargo.lock b/Cargo.lock
index aa0337e1903e4..6463ac265b5e6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1160,7 +1160,7 @@ dependencies = [
  "sync_wrapper",
  "tokio",
  "tokio-tungstenite 0.24.0",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-layer",
  "tower-service",
  "tracing",
@@ -1206,7 +1206,7 @@ dependencies = [
  "multer",
  "pin-project-lite",
  "serde",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-layer",
  "tower-service",
 ]
@@ -4643,7 +4643,7 @@ dependencies = [
  "tokio",
  "tokio-tungstenite 0.27.0",
  "tokio-util",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-http",
  "tracing",
 ]
@@ -5641,7 +5641,7 @@ dependencies = [
  "tokio-openssl",
  "tokio-postgres",
  "tokio-util",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tracing",
  "tracing-subscriber",
  "uuid",
@@ -5932,7 +5932,7 @@ dependencies = [
  "num_cpus",
  "serde",
  "tokio",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tracing",
  "workspace-hack",
 ]
@@ -6315,7 +6315,7 @@ dependencies = [
  "tokio-metrics",
  "tokio-postgres",
  "tokio-stream",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-http",
  "tower-sessions",
  "tower-sessions-memory-store",
@@ -6571,7 +6571,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tokio",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-http",
  "tracing",
  "tracing-subscriber",
@@ -10402,7 +10402,7 @@ dependencies = [
  "tokio",
  "tokio-native-tls",
  "tokio-util",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-http",
  "tower-service",
  "url",
@@ -12051,9 +12051,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-metrics"
-version = "0.4.6"
+version = "0.4.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a34e87dd30650518a4e041bca77c931f3f5a19621eecdcd794f5c1813bca9e98"
+checksum = "f4c2ca6283a34abc77cb58ea83d4a3c40e0162b0095d7a674172a2eed5415197"
 dependencies = [
  "futures-util",
  "pin-project-lite",
@@ -12299,9 +12299,9 @@ dependencies = [
 
 [[package]]
 name = "tower"
-version = "0.5.2"
+version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
 dependencies = [
  "futures-core",
  "futures-util",
@@ -12353,7 +12353,7 @@ dependencies = [
  "pin-project-lite",
  "tokio",
  "tokio-util",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-layer",
  "tower-service",
  "tracing",
@@ -13528,7 +13528,7 @@ dependencies = [
  "toml_datetime",
  "toml_edit 0.22.26",
  "tonic",
- "tower 0.5.2",
+ "tower 0.5.3",
  "tower-http",
  "tracing",
  "tracing-core",
diff --git a/src/balancerd/Cargo.toml b/src/balancerd/Cargo.toml
index 8957407b3a0bb..f9975214af727 100644
--- a/src/balancerd/Cargo.toml
+++ b/src/balancerd/Cargo.toml
@@ -47,8 +47,8 @@ tokio = { version = "1.48.0", default-features = false }
 tokio-openssl = "0.6.5"
 tokio-postgres = { version = "0.7.15" }
 tokio-util = { version = "0.7.18", features = ["codec"] }
-tokio-metrics = "0.4.6"
-tower = "0.5.2"
+tokio-metrics = "0.4.7"
+tower = "0.5.3"
 tracing = "0.1.44"
 tracing-subscriber = "0.3.22"
 uuid = "1.19.0"
diff --git a/src/clusterd/Cargo.toml b/src/clusterd/Cargo.toml
index b14018bede54b..25379634adf61 100644
--- a/src/clusterd/Cargo.toml
+++ b/src/clusterd/Cargo.toml
@@ -42,7 +42,7 @@ nix = { version = "0.30.1", features = ["fs"] }
 num_cpus = "1.17.0"
 serde = { version = "1.0.219", features = ["derive"] }
 tokio = { version = "1.48.0", features = ["fs", "rt", "sync", "test-util"] }
-tower = "0.5.2"
+tower = "0.5.3"
 tracing = "0.1.44"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index 6854d917b3328..0af3bbe4a4c7d 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -110,8 +110,8 @@ thiserror = "2.0.17"
 tokio = { version = "1.48.0", features = ["sync"] }
 tokio-postgres = { version = "0.7.15" }
 tokio-stream = { version = "0.1.18", features = ["net"] }
-tokio-metrics = "0.4.6"
-tower = { version = "0.5.2", features = ["buffer", "limit", "load-shed"] }
+tokio-metrics = "0.4.7"
+tower = { version = "0.5.3", features = ["buffer", "limit", "load-shed"] }
 tower-http = { version = "0.6.7", features = [
     "cors",
     "decompression-br",
diff --git a/src/http-util/Cargo.toml b/src/http-util/Cargo.toml
index af717cd140a06..a0c8bdc94572a 100644
--- a/src/http-util/Cargo.toml
+++ b/src/http-util/Cargo.toml
@@ -23,7 +23,7 @@ prometheus = { version = "0.14.0", default-features = false }
 serde = "1.0.219"
 serde_json = { version = "1.0.149" }
 tokio = { version = "1.48.0", features = ["macros", "rt-multi-thread"] }
-tower = { version = "0.5.2", features = ["balance", "buffer", "filter", "limit", "retry", "timeout", "util"] }
+tower = { version = "0.5.3", features = ["balance", "buffer", "filter", "limit", "retry", "timeout", "util"] }
 tower-http = { version = "0.6.7", features = ["auth", "cors", "map-response-body", "trace", "util"] }
 tracing = "0.1.44"
 tracing-subscriber = "0.3.22"
diff --git a/src/persist-client/Cargo.toml b/src/persist-client/Cargo.toml
index 384833eeed762..eb952809eaac8 100644
--- a/src/persist-client/Cargo.toml
+++ b/src/persist-client/Cargo.toml
@@ -59,7 +59,7 @@ serde = { version = "1.0.219", features = ["derive", "rc"] }
 serde_json = "1.0.149"
 timely = "0.25.1"
 tokio = { version = "1.48.0", default-features = false, features = ["macros", "sync", "rt", "rt-multi-thread", "time"] }
-tokio-metrics = "0.4.6"
+tokio-metrics = "0.4.7"
 tokio-stream = "0.1.18"
 tonic = "0.12.1"
 tracing = "0.1.44"
diff --git a/src/pgwire/Cargo.toml b/src/pgwire/Cargo.toml
index 05190e3b19606..e66ffa2306664 100644
--- a/src/pgwire/Cargo.toml
+++ b/src/pgwire/Cargo.toml
@@ -37,7 +37,7 @@ tokio = "1.48.0"
 tokio-stream = "0.1.18"
 tokio-openssl = "0.6.5"
 tokio-util = { version = "0.7.18", features = ["codec"] }
-tokio-metrics = "0.4.6"
+tokio-metrics = "0.4.7"
 tracing = "0.1.44"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 uuid = { version = "1.19.0", features = ["v4"] }
diff --git a/src/server-core/Cargo.toml b/src/server-core/Cargo.toml
index 197c6a541e4b1..c5ba081b1fe32 100644
--- a/src/server-core/Cargo.toml
+++ b/src/server-core/Cargo.toml
@@ -26,7 +26,7 @@ futures = "0.3.31"
 mz-dyncfg = { path = "../dyncfg", default-features = false }
 mz-ore = { path = "../ore", default-features = false, features = ["async", "network", "test"] }
 tokio = "1.48.0"
-tokio-metrics = "0.4.6"
+tokio-metrics = "0.4.7"
 workspace-hack = { version = "0.0.0", path = "../workspace-hack", optional = true }
 uuid = { version = "1.19.0", features = ["v4"] }
 
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index 3adbb03ebf1d8..2c7673e306aef 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -142,7 +142,7 @@ tokio-util = { version = "0.7.18", features = ["codec", "compat", "io", "time"]
 toml_datetime = { version = "0.6.11", default-features = false, features = ["serde"] }
 toml_edit = { version = "0.22.26", features = ["serde"] }
 tonic = { version = "0.12.3", features = ["gzip"] }
-tower = { version = "0.5.2", default-features = false, features = ["balance", "buffer", "filter", "limit", "load-shed", "log", "retry", "timeout"] }
+tower = { version = "0.5.3", default-features = false, features = ["balance", "buffer", "filter", "limit", "load-shed", "log", "retry", "timeout"] }
 tower-http = { version = "0.6.8", features = ["auth", "cors", "decompression-br", "decompression-deflate", "decompression-gzip", "decompression-zstd", "map-response-body", "trace", "util"] }
 tracing = { version = "0.1.44", features = ["log"] }
 tracing-core = { version = "0.1.36" }
@@ -292,7 +292,7 @@ tokio-util = { version = "0.7.18", features = ["codec", "compat", "io", "time"]
 toml_datetime = { version = "0.6.11", default-features = false, features = ["serde"] }
 toml_edit = { version = "0.22.26", features = ["serde"] }
 tonic = { version = "0.12.3", features = ["gzip"] }
-tower = { version = "0.5.2", default-features = false, features = ["balance", "buffer", "filter", "limit", "load-shed", "log", "retry", "timeout"] }
+tower = { version = "0.5.3", default-features = false, features = ["balance", "buffer", "filter", "limit", "load-shed", "log", "retry", "timeout"] }
 tower-http = { version = "0.6.8", features = ["auth", "cors", "decompression-br", "decompression-deflate", "decompression-gzip", "decompression-zstd", "map-response-body", "trace", "util"] }
 tracing = { version = "0.1.44", features = ["log"] }
 tracing-core = { version = "0.1.36" }