diff --git a/deny.toml b/deny.toml
index fdcd4ee..2f4ea70 100644
--- a/deny.toml
+++ b/deny.toml
@@ -75,6 +75,7 @@ ignore = [
     #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish
     #{ crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" },
     { id = "RUSTSEC-2024-0436", reason = "paste is unmaintained, no safe upgrade available, need upstream dependencies to migrate away from it." },
+    { id = "RUSTSEC-2026-0110", reason = "bare-metal is deprecated; pulled in transitively, needs upstream migration." },
 ]
 # If this is true, then cargo deny will use the git executable to fetch advisory database.
 # If this is false, then it uses a built-in git library.
diff --git a/libs/imxrt-rom/Cargo.toml b/libs/imxrt-rom/Cargo.toml
index 0670cd8..88e71ef 100644
--- a/libs/imxrt-rom/Cargo.toml
+++ b/libs/imxrt-rom/Cargo.toml
@@ -24,7 +24,7 @@ embassy-imxrt = { git = "https://github.com/OpenDevicePartnership/embassy-imxrt.
     "unstable-pac",
 ] }
 
-device-driver = { version = "1.0", default-features = false, features = [
+device-driver = { version = "1.0.9", default-features = false, features = [
     "json",
 ] }