diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index e5f7c85bcb8..8628c222dd7 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -1,5 +1,5 @@
 {
-  "image": "ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45",
+  "image": "ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d",
   "remoteUser": "ubuntu",
   "privileged": true,
   "runArgs": [
diff --git a/.github/workflows-source/ci-main.yml b/.github/workflows-source/ci-main.yml
index eb04739f9a3..ff9a337cc5f 100644
--- a/.github/workflows-source/ci-main.yml
+++ b/.github/workflows-source/ci-main.yml
@@ -32,7 +32,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+    image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
   dind-large-setup: &dind-large-setup
     runs-on:
       labels: dind-large
diff --git a/.github/workflows-source/ci-pr-only.yml b/.github/workflows-source/ci-pr-only.yml
index 6d13482cbb7..10a556e4a67 100644
--- a/.github/workflows-source/ci-pr-only.yml
+++ b/.github/workflows-source/ci-pr-only.yml
@@ -17,7 +17,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+    image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
   dind-small-setup: &dind-small-setup
     timeout-minutes: 30
     runs-on:
diff --git a/.github/workflows-source/release-testing.yml b/.github/workflows-source/release-testing.yml
index 252a50d5a3f..a2a6c2d66ff 100644
--- a/.github/workflows-source/release-testing.yml
+++ b/.github/workflows-source/release-testing.yml
@@ -23,7 +23,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+    image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
   dind-large-setup: &dind-large-setup
     runs-on:
       group: zh1
diff --git a/.github/workflows-source/schedule-daily.yml b/.github/workflows-source/schedule-daily.yml
index 51355562f43..a5eb842d9e4 100644
--- a/.github/workflows-source/schedule-daily.yml
+++ b/.github/workflows-source/schedule-daily.yml
@@ -16,7 +16,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+    image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
   dind-large-setup: &dind-large-setup
     runs-on:
       group: zh1
diff --git a/.github/workflows-source/schedule-hourly.yml b/.github/workflows-source/schedule-hourly.yml
index 781feb2a136..0ed1834aeb2 100644
--- a/.github/workflows-source/schedule-hourly.yml
+++ b/.github/workflows-source/schedule-hourly.yml
@@ -16,7 +16,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+    image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
   dind-large-setup: &dind-large-setup
     runs-on:
       labels: dind-large
diff --git a/.github/workflows/anonymization-backend-release.yml b/.github/workflows/anonymization-backend-release.yml
index 6cb04a8c820..3f44f4cd37f 100644
--- a/.github/workflows/anonymization-backend-release.yml
+++ b/.github/workflows/anonymization-backend-release.yml
@@ -33,7 +33,7 @@ jobs:
       labels: dind-large
 
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
 
diff --git a/.github/workflows/ci-main.yml b/.github/workflows/ci-main.yml
index e58caf8259c..5b140e1467f 100644
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@@ -30,7 +30,7 @@ jobs:
   bazel-test-all:
     name: Bazel Test All
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -126,7 +126,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -218,7 +218,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -253,7 +253,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -288,7 +288,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
     timeout-minutes: 30
     steps:
       - name: Checkout
@@ -318,7 +318,7 @@ jobs:
   build-ic:
     name: Build IC
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -420,7 +420,7 @@ jobs:
   cargo-clippy-linux:
     name: Cargo Clippy Linux
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
     timeout-minutes: 30
     runs-on:
       group: ch1
@@ -457,7 +457,7 @@ jobs:
   cargo-build-release-linux:
     name: Cargo Build Release Linux
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
     timeout-minutes: 30
     runs-on:
       group: ch1
diff --git a/.github/workflows/ci-pr-only.yml b/.github/workflows/ci-pr-only.yml
index 1d9a94645d2..870eef04fd0 100644
--- a/.github/workflows/ci-pr-only.yml
+++ b/.github/workflows/ci-pr-only.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME
     if: ${{ github.event_name != 'merge_group' }}
@@ -61,7 +61,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME
     if: ${{ github.event_name != 'merge_group' }}
@@ -102,7 +102,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME
     if: ${{ github.event_name != 'merge_group' }}
@@ -150,7 +150,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME
     if: contains(github.event.pull_request.labels.*.name, 'CI_COVERAGE')
diff --git a/.github/workflows/rate-limits-backend-release.yml b/.github/workflows/rate-limits-backend-release.yml
index b17b9c10ffb..02948d0370f 100644
--- a/.github/workflows/rate-limits-backend-release.yml
+++ b/.github/workflows/rate-limits-backend-release.yml
@@ -33,7 +33,7 @@ jobs:
       labels: dind-large
 
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
 
diff --git a/.github/workflows/release-testing.yml b/.github/workflows/release-testing.yml
index 818e6403162..f21715b6e63 100644
--- a/.github/workflows/release-testing.yml
+++ b/.github/workflows/release-testing.yml
@@ -28,7 +28,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
@@ -70,7 +70,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
@@ -112,7 +112,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 90
@@ -154,7 +154,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 60
@@ -201,7 +201,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
@@ -229,7 +229,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
diff --git a/.github/workflows/rosetta-release.yml b/.github/workflows/rosetta-release.yml
index 2da864a410d..cd99e734580 100644
--- a/.github/workflows/rosetta-release.yml
+++ b/.github/workflows/rosetta-release.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
     steps:
       - name: Checkout
         uses: actions/checkout@v4
diff --git a/.github/workflows/schedule-daily.yml b/.github/workflows/schedule-daily.yml
index 39844f4588d..771bc20432e 100644
--- a/.github/workflows/schedule-daily.yml
+++ b/.github/workflows/schedule-daily.yml
@@ -15,7 +15,7 @@ jobs:
   bazel-test-bare-metal:
     name: Bazel Test Bare Metal
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
@@ -72,7 +72,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 720 # 12 hours
@@ -113,7 +113,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 20
@@ -154,7 +154,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 480
@@ -208,7 +208,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 60
@@ -260,7 +260,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
diff --git a/.github/workflows/schedule-hourly.yml b/.github/workflows/schedule-hourly.yml
index 4b3958d34b5..99c579508e3 100644
--- a/.github/workflows/schedule-hourly.yml
+++ b/.github/workflows/schedule-hourly.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
@@ -53,7 +53,7 @@ jobs:
   bazel-system-test-hourly:
     name: Bazel System Tests Hourly
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
@@ -95,7 +95,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
diff --git a/.github/workflows/schedule-rust-bench.yml b/.github/workflows/schedule-rust-bench.yml
index b95f77f7bc5..eb8e515e004 100644
--- a/.github/workflows/schedule-rust-bench.yml
+++ b/.github/workflows/schedule-rust-bench.yml
@@ -20,7 +20,7 @@ jobs:
       # see linux-x86-64 runner group
       labels: rust-benchmarks
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       # running on bare metal machine using ubuntu user
       options: --user ubuntu -v /cache:/cache
     timeout-minutes: 720 # 12 hours
diff --git a/.github/workflows/schedule-weekly.yml b/.github/workflows/schedule-weekly.yml
index 918fe9b4864..e0ac84c0026 100644
--- a/.github/workflows/schedule-weekly.yml
+++ b/.github/workflows/schedule-weekly.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME
         -v /cache:/cache
diff --git a/.github/workflows/system-tests-k8s.yml b/.github/workflows/system-tests-k8s.yml
index 1dec1c5ddc9..7eab15df6d5 100644
--- a/.github/workflows/system-tests-k8s.yml
+++ b/.github/workflows/system-tests-k8s.yml
@@ -48,7 +48,7 @@ jobs:
       group: ln1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME -e KUBECONFIG
         --privileged --cgroupns host
@@ -102,7 +102,7 @@ jobs:
       group: ln1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME -e KUBECONFIG
         --privileged --cgroupns host
diff --git a/.github/workflows/update-mainnet-revisions.yaml b/.github/workflows/update-mainnet-revisions.yaml
index d847894404e..605c82259e1 100644
--- a/.github/workflows/update-mainnet-revisions.yaml
+++ b/.github/workflows/update-mainnet-revisions.yaml
@@ -38,7 +38,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:4fd13b47285e783c3a6f35aadd9559d097c0de162a1cf221ead66ab1598d5d45
+      image: ghcr.io/dfinity/ic-build@sha256:2e8185171700872d48fdfb4b08e175fca5be27b3fbbc4d7bed681ec8486f8b1d
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     steps:
diff --git a/Cargo.Bazel.Fuzzing.json.lock b/Cargo.Bazel.Fuzzing.json.lock
index 4a4c36ca861..62b92f3b732 100644
--- a/Cargo.Bazel.Fuzzing.json.lock
+++ b/Cargo.Bazel.Fuzzing.json.lock
@@ -1,5 +1,5 @@
 {
-  "checksum": "47779dd70947956334194045d833b520303bd12424c6ae738db137a5ede73532",
+  "checksum": "e2f0c9fb8047d4200e8e14e235a3d28792aef48b70952cf21a1f849ff9ea495d",
   "crates": {
     "abnf 0.12.0": {
       "name": "abnf",
@@ -11281,16 +11281,6 @@
                 "target": "wasm_bindgen"
               }
             ],
-            "wasm32-wasi": [
-              {
-                "id": "serde-wasm-bindgen 0.5.0",
-                "target": "serde_wasm_bindgen"
-              },
-              {
-                "id": "wasm-bindgen 0.2.95",
-                "target": "wasm_bindgen"
-              }
-            ],
             "wasm32-wasip1": [
               {
                 "id": "serde-wasm-bindgen 0.5.0",
@@ -58417,12 +58407,6 @@
                 "target": "wasm_streams"
               }
             ],
-            "wasm32-wasi": [
-              {
-                "id": "wasm-streams 0.4.0",
-                "target": "wasm_streams"
-              }
-            ],
             "wasm32-wasip1": [
               {
                 "id": "wasm-streams 0.4.0",
@@ -60978,11 +60962,6 @@
               "termios",
               "use-libc-auxv"
             ],
-            "wasm32-wasi": [
-              "default",
-              "termios",
-              "use-libc-auxv"
-            ],
             "wasm32-wasip1": [
               "default",
               "termios",
@@ -61318,17 +61297,6 @@
                 "target": "libc"
               }
             ],
-            "wasm32-wasi": [
-              {
-                "id": "errno 0.3.8",
-                "target": "errno",
-                "alias": "libc_errno"
-              },
-              {
-                "id": "libc 0.2.158",
-                "target": "libc"
-              }
-            ],
             "wasm32-wasip1": [
               {
                 "id": "errno 0.3.8",
@@ -86443,7 +86411,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86474,7 +86441,6 @@
       "wasm32-unknown-unknown"
     ],
     "cfg(all(target_arch = \"wasm32\", target_os = \"wasi\"))": [
-      "wasm32-wasi",
       "wasm32-wasip1"
     ],
     "cfg(all(target_arch = \"wasm32\", target_vendor = \"unknown\", target_os = \"unknown\", target_env = \"\"))": [
@@ -86757,7 +86723,6 @@
       "i686-unknown-linux-gnu",
       "powerpc-unknown-linux-gnu",
       "s390x-unknown-linux-gnu",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86884,7 +86849,6 @@
       "i686-unknown-linux-gnu",
       "powerpc-unknown-linux-gnu",
       "s390x-unknown-linux-gnu",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86947,7 +86911,6 @@
       "riscv64gc-unknown-none-elf",
       "s390x-unknown-linux-gnu",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86982,7 +86945,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87071,7 +87033,6 @@
       "s390x-unknown-linux-gnu",
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87173,7 +87134,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87209,7 +87169,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87235,7 +87194,6 @@
     ],
     "cfg(target_arch = \"wasm32\")": [
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1"
     ],
     "cfg(target_arch = \"x86\")": [
@@ -87300,7 +87258,6 @@
     ],
     "cfg(target_os = \"redox\")": [],
     "cfg(target_os = \"wasi\")": [
-      "wasm32-wasi",
       "wasm32-wasip1"
     ],
     "cfg(target_os = \"windows\")": [
@@ -87380,9 +87337,6 @@
     "wasm32-unknown-unknown": [
       "wasm32-unknown-unknown"
     ],
-    "wasm32-wasi": [
-      "wasm32-wasi"
-    ],
     "wasm32-wasip1": [
       "wasm32-wasip1"
     ],
@@ -87758,5 +87712,6 @@
     "zeroize 1.8.1",
     "zstd 0.13.2"
   ],
-  "direct_dev_deps": []
+  "direct_dev_deps": [],
+  "unused_patches": []
 }
diff --git a/Cargo.Bazel.json.lock b/Cargo.Bazel.json.lock
index fc9e4520644..ae3a6e269f4 100644
--- a/Cargo.Bazel.json.lock
+++ b/Cargo.Bazel.json.lock
@@ -1,5 +1,5 @@
 {
-  "checksum": "78e6ae0a6f656c3bc2e62f91681c90f7088a556e20471251f4b378d2f917e8f0",
+  "checksum": "c940ed0c71e779f38de47e366662d71cd883022d89016936e1952a55719fe089",
   "crates": {
     "abnf 0.12.0": {
       "name": "abnf",
@@ -11177,16 +11177,6 @@
                 "target": "wasm_bindgen"
               }
             ],
-            "wasm32-wasi": [
-              {
-                "id": "serde-wasm-bindgen 0.5.0",
-                "target": "serde_wasm_bindgen"
-              },
-              {
-                "id": "wasm-bindgen 0.2.95",
-                "target": "wasm_bindgen"
-              }
-            ],
             "wasm32-wasip1": [
               {
                 "id": "serde-wasm-bindgen 0.5.0",
@@ -58263,12 +58253,6 @@
                 "target": "wasm_streams"
               }
             ],
-            "wasm32-wasi": [
-              {
-                "id": "wasm-streams 0.4.0",
-                "target": "wasm_streams"
-              }
-            ],
             "wasm32-wasip1": [
               {
                 "id": "wasm-streams 0.4.0",
@@ -60824,11 +60808,6 @@
               "termios",
               "use-libc-auxv"
             ],
-            "wasm32-wasi": [
-              "default",
-              "termios",
-              "use-libc-auxv"
-            ],
             "wasm32-wasip1": [
               "default",
               "termios",
@@ -61164,17 +61143,6 @@
                 "target": "libc"
               }
             ],
-            "wasm32-wasi": [
-              {
-                "id": "errno 0.3.8",
-                "target": "errno",
-                "alias": "libc_errno"
-              },
-              {
-                "id": "libc 0.2.158",
-                "target": "libc"
-              }
-            ],
             "wasm32-wasip1": [
               {
                 "id": "errno 0.3.8",
@@ -86401,7 +86369,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86432,7 +86399,6 @@
       "wasm32-unknown-unknown"
     ],
     "cfg(all(target_arch = \"wasm32\", target_os = \"wasi\"))": [
-      "wasm32-wasi",
       "wasm32-wasip1"
     ],
     "cfg(all(target_arch = \"wasm32\", target_vendor = \"unknown\", target_os = \"unknown\", target_env = \"\"))": [
@@ -86699,7 +86665,6 @@
       "i686-unknown-linux-gnu",
       "powerpc-unknown-linux-gnu",
       "s390x-unknown-linux-gnu",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86826,7 +86791,6 @@
       "i686-unknown-linux-gnu",
       "powerpc-unknown-linux-gnu",
       "s390x-unknown-linux-gnu",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86860,7 +86824,6 @@
       "riscv64gc-unknown-none-elf",
       "s390x-unknown-linux-gnu",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -86950,7 +86913,6 @@
       "s390x-unknown-linux-gnu",
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87052,7 +87014,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87088,7 +87049,6 @@
       "thumbv7em-none-eabi",
       "thumbv8m.main-none-eabi",
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1",
       "x86_64-apple-darwin",
       "x86_64-apple-ios",
@@ -87114,7 +87074,6 @@
     ],
     "cfg(target_arch = \"wasm32\")": [
       "wasm32-unknown-unknown",
-      "wasm32-wasi",
       "wasm32-wasip1"
     ],
     "cfg(target_arch = \"x86\")": [
@@ -87179,7 +87138,6 @@
     ],
     "cfg(target_os = \"redox\")": [],
     "cfg(target_os = \"wasi\")": [
-      "wasm32-wasi",
       "wasm32-wasip1"
     ],
     "cfg(target_os = \"windows\")": [
@@ -87259,9 +87217,6 @@
     "wasm32-unknown-unknown": [
       "wasm32-unknown-unknown"
     ],
-    "wasm32-wasi": [
-      "wasm32-wasi"
-    ],
     "wasm32-wasip1": [
       "wasm32-wasip1"
     ],
@@ -87637,5 +87592,6 @@
     "zeroize 1.8.1",
     "zstd 0.13.2"
   ],
-  "direct_dev_deps": []
+  "direct_dev_deps": [],
+  "unused_patches": []
 }
diff --git a/Cargo.lock b/Cargo.lock
index 5b88c045f4b..da683f8ccbc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1,6 +1,6 @@
 # This file is automatically @generated by Cargo.
 # It is not intended for manual editing.
-version = 3
+version = 4
 
 [[package]]
 name = "abnf"
@@ -39,7 +39,7 @@ version = "0.5.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5f7b0a21988c1bf877cf4759ef5ddaac04c1c9fe808c9142ecb78ba97d97a28a"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "bytes",
  "futures-core",
  "futures-sink",
@@ -62,7 +62,7 @@ dependencies = [
  "actix-utils",
  "ahash 0.8.11",
  "base64 0.22.1",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "brotli 6.0.0",
  "bytes",
  "bytestring",
@@ -96,7 +96,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e01ed3140b2f8d422c68afa1ed2e85d996ea619c988ac834d255db32138655cb"
 dependencies = [
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -214,7 +214,7 @@ dependencies = [
  "actix-router",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -292,9 +292,9 @@ dependencies = [
 
 [[package]]
 name = "aide"
-version = "0.13.4"
+version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b0e3b97a21e41ec5c19bfd9b4fc1f7086be104f8b988681230247ffc91cc8ed"
+checksum = "5678d2978845ddb4bd736a026f467dd652d831e9e6254b0e41b07f7ee7523309"
 dependencies = [
  "axum",
  "bytes",
@@ -375,7 +375,7 @@ dependencies = [
  "prometheus",
  "rand 0.8.5",
  "rsa",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
 ]
 
@@ -403,7 +403,7 @@ dependencies = [
  "lazy_static",
  "prometheus",
  "serde",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -447,19 +447,20 @@ dependencies = [
 
 [[package]]
 name = "anstyle-wincon"
-version = "3.0.6"
+version = "3.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2109dbce0e72be3ec00bed26e6a7479ca384ad226efdd66db8fa2e3a38c83125"
+checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e"
 dependencies = [
  "anstyle",
+ "once_cell",
  "windows-sys 0.59.0",
 ]
 
 [[package]]
 name = "anyhow"
-version = "1.0.94"
+version = "1.0.95"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1fd03a028ef38ba2276dce7e33fcd6369c158a1bca17946c4b1b701891c1ff7"
+checksum = "34ac096ce696dc2fcabef30516bb13c0a68a11d30131d3df6f04711467681b04"
 
 [[package]]
 name = "arbitrary"
@@ -525,7 +526,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "serde",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -567,7 +568,7 @@ checksum = "965c2d33e53cb6b267e148a4cb0760bc01f4904c1cd4bb4002a085bb016d1490"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
  "synstructure",
 ]
 
@@ -579,7 +580,7 @@ checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -691,7 +692,7 @@ version = "3.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ff6e472cdea888a4bd64f342f09b3f50e1886d32afe8df3d663c01140b811b18"
 dependencies = [
- "event-listener 5.3.1",
+ "event-listener 5.4.0",
  "event-listener-strategy",
  "pin-project-lite",
 ]
@@ -747,7 +748,7 @@ checksum = "c7c24de15d275a1ecfd47a380fb4d5ec9bfe0933f309ed5e705b775596a3574d"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -758,13 +759,13 @@ checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de"
 
 [[package]]
 name = "async-trait"
-version = "0.1.83"
+version = "0.1.85"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "721cae7de5c34fbb2acd27e21e6d2cf7b886dce0c27388d46c4e6c47ea4318dd"
+checksum = "3f934833b4b7233644e5848f235df3f57ed8c80f1528a26c3dfa13d2147fa056"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -813,13 +814,13 @@ dependencies = [
 
 [[package]]
 name = "auto_impl"
-version = "1.2.0"
+version = "1.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c87f3f15e7794432337fc718554eaa4dc8f04c9677a950ffe366f20a162ae42"
+checksum = "e12882f59de5360c748c4cbf569a042d5fb0eb515f7bea9c1f470b47f6ffbd73"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -1108,7 +1109,7 @@ version = "0.69.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "271383c67ccabffb7381723dea0672a673f292304fcb45c01cc648c7a8d58088"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "cexpr",
  "clang-sys",
  "itertools 0.12.1",
@@ -1119,7 +1120,7 @@ dependencies = [
  "regex",
  "rustc-hash 1.1.0",
  "shlex",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -1337,9 +1338,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
 
 [[package]]
 name = "bitflags"
-version = "2.6.0"
+version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b048fb63fd8b5923fc5aa7b340d8e156aec7ec02f0c78fa8a6ddc2613f6f71de"
+checksum = "8f68f53c83ab957f72c32642f3868eec03eb974d1fb82e453128456482613d36"
 
 [[package]]
 name = "bitvec"
@@ -1386,9 +1387,9 @@ dependencies = [
 
 [[package]]
 name = "borsh"
-version = "1.5.3"
+version = "1.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2506947f73ad44e344215ccd6403ac2ae18cd8e046e581a441bf8d199f257f03"
+checksum = "9fb65153674e51d3a42c8f27b05b9508cea85edfaade8aa46bc8fc18cecdfef3"
 dependencies = [
  "borsh-derive",
  "cfg_aliases",
@@ -1396,15 +1397,15 @@ dependencies = [
 
 [[package]]
 name = "borsh-derive"
-version = "1.5.3"
+version = "1.5.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2593a3b8b938bd68373196c9832f516be11fa487ef4ae745eb282e6a56a7244"
+checksum = "a396e17ad94059c650db3d253bb6e25927f1eb462eede7e7a153bb6e75dce0a7"
 dependencies = [
  "once_cell",
  "proc-macro-crate",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -1451,9 +1452,9 @@ dependencies = [
 
 [[package]]
 name = "bstr"
-version = "1.11.1"
+version = "1.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "786a307d683a5bf92e6fd5fd69a7eb613751668d1d8d67d802846dfe367c62c8"
+checksum = "531a9155a481e2ee699d4f98f43c0ca4ff8ee1bfd55c31e9e98fb29d2b176fe0"
 dependencies = [
  "memchr",
  "regex-automata 0.4.9",
@@ -1574,9 +1575,9 @@ dependencies = [
 
 [[package]]
 name = "bytemuck"
-version = "1.20.0"
+version = "1.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b37c88a63ffd85d15b406896cc343916d7cf57838a847b3a6f2ca5d39a5695a"
+checksum = "ef657dfab802224e671f5818e9a4935f9b1957ed18e58292690cc39e7a4092a3"
 
 [[package]]
 name = "byteorder"
@@ -1674,7 +1675,7 @@ dependencies = [
  "darling 0.20.10",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -1710,7 +1711,7 @@ version = "0.1.0"
 dependencies = [
  "anyhow",
  "bytes",
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures-util",
  "http 1.2.0",
  "http-body 1.0.1",
@@ -1750,9 +1751,9 @@ dependencies = [
 
 [[package]]
 name = "candid"
-version = "0.10.11"
+version = "0.10.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d04aa85a9ba2542bded33d1eff0ffb17cb98b1be8117e0a25e1ad8c62bedc881"
+checksum = "51e129c4051c57daf943586e01ef72faae48b04a8f692d5f646febf17a264c38"
 dependencies = [
  "anyhow",
  "binread",
@@ -1788,7 +1789,7 @@ dependencies = [
  "lazy_static",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -1896,9 +1897,9 @@ checksum = "37b2a672a2cb129a2e41c10b1224bb368f9f37a2b16b612598138befd7b37eb5"
 
 [[package]]
 name = "cc"
-version = "1.2.5"
+version = "1.2.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c31a0499c1dc64f458ad13872de75c0eb7e3fdb0e67964610c914b034fc5956e"
+checksum = "13208fcbb66eaeffe09b99fffbe1af420f00a7b35aa99ad683dfc1aa76145229"
 dependencies = [
  "jobserver",
  "libc",
@@ -1948,7 +1949,7 @@ dependencies = [
  "candid",
  "certificate_orchestrator_interface",
  "chacha20poly1305",
- "clap 4.5.23",
+ "clap 4.5.26",
  "cloudflare 0.12.0 (git+https://github.com/dfinity/cloudflare-rs.git?rev=a6538a036926bd756986c9c0a5de356daef48881)",
  "flate2",
  "futures",
@@ -1956,7 +1957,7 @@ dependencies = [
  "ic-agent",
  "ic-http-certification",
  "ic-response-verification",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "idna 1.0.3",
  "instant-acme",
  "leb128",
@@ -1966,12 +1967,12 @@ dependencies = [
  "pem 1.1.1",
  "prometheus",
  "rcgen",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_cbor",
  "serde_json",
  "sha2 0.10.8",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tower 0.5.2",
  "tracing",
@@ -2003,7 +2004,7 @@ dependencies = [
  "serde",
  "serde_cbor",
  "sha2 0.10.8",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -2015,7 +2016,7 @@ dependencies = [
  "ic-stable-structures",
  "serde",
  "serde_bytes",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -2158,19 +2159,19 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.23"
+version = "4.5.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3135e7ec2ef7b10c6ed8950f0f792ed96ee093fa088608f1c76e569722700c84"
+checksum = "a8eb5e908ef3a6efbe1ed62520fb7287959888c88485abe072543190ecc66783"
 dependencies = [
  "clap_builder",
- "clap_derive 4.5.18",
+ "clap_derive 4.5.24",
 ]
 
 [[package]]
 name = "clap_builder"
-version = "4.5.23"
+version = "4.5.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "30582fc632330df2bd26877bde0c1f4470d57c582bbc070376afcd04d8cb4838"
+checksum = "96b01801b5fc6a0a232407abc821660c9c6d25a1cafc0d4f85f29fb8d9afc121"
 dependencies = [
  "anstream",
  "anstyle",
@@ -2193,14 +2194,14 @@ dependencies = [
 
 [[package]]
 name = "clap_derive"
-version = "4.5.18"
+version = "4.5.24"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ac6a0c7b1a9e9a5186361f67dfa1b88213572f427fb9ab038efb2bd8c582dab"
+checksum = "54b755194d6389280185988721fffba69495eed5ee9feeee9a599b53db80318c"
 dependencies = [
  "heck 0.5.0",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -2376,7 +2377,7 @@ name = "config"
 version = "1.0.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config_types",
  "ic-types",
  "macaddr",
@@ -2403,7 +2404,7 @@ dependencies = [
  "serde_json",
  "serde_with 1.14.0",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "url",
 ]
 
@@ -2512,7 +2513,7 @@ dependencies = [
  "rand 0.8.5",
  "rand_chacha 0.3.1",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_json",
  "slog",
  "tokio",
@@ -2699,18 +2700,18 @@ dependencies = [
 
 [[package]]
 name = "cranelift-bforest"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac89549be94911dd0e839b4a7db99e9ed29c17517e1c026f61066884c168aa3c"
+checksum = "88c1d02b72b6c411c0a2e92b25ed791ad5d071184193c08a34aa0fdcdf000b72"
 dependencies = [
  "cranelift-entity",
 ]
 
 [[package]]
 name = "cranelift-bitset"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9bd49369f76c77e34e641af85d0956869237832c118964d08bf5f51f210875a"
+checksum = "720b93bd86ebbb23ebfb2db1ed44d54b2ecbdbb2d034d485bc64aa605ee787ab"
 dependencies = [
  "serde",
  "serde_derive",
@@ -2718,9 +2719,9 @@ dependencies = [
 
 [[package]]
 name = "cranelift-codegen"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd96ce9cf8efebd7f5ab8ced5a0ce44250280bbae9f593d74a6d7effc3582a35"
+checksum = "aed3d2d9914d30b460eedd7fd507720203023997bef71452ce84873f9c93537c"
 dependencies = [
  "bumpalo",
  "cranelift-bforest",
@@ -2742,33 +2743,33 @@ dependencies = [
 
 [[package]]
 name = "cranelift-codegen-meta"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a68e358827afe4bfb6239fcbf6fbd5ac56206ece8a99c8f5f9bbd518773281a"
+checksum = "888c188d32263ec9e048873ff0b68c700933600d553f4412417916828be25f8e"
 dependencies = [
  "cranelift-codegen-shared",
 ]
 
 [[package]]
 name = "cranelift-codegen-shared"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e184c9767afbe73d50c55ec29abcf4c32f9baf0d9d22b86d58c4d55e06dee181"
+checksum = "4ddd5f4114d04ce7e073dd74e2ad16541fc61970726fcc8b2d5644a154ee4127"
 
 [[package]]
 name = "cranelift-control"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5cc7664f2a66f053e33f149e952bb5971d138e3af637f5097727ed6dc0ed95dd"
+checksum = "92cc4c98d6a4256a1600d93ccd3536f3e77da9b4ca2c279de786ac22876e67d6"
 dependencies = [
  "arbitrary",
 ]
 
 [[package]]
 name = "cranelift-entity"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "118597e3a9cf86c3556fa579a7a23b955fa18231651a52a77a2475d305a9cf84"
+checksum = "760af4b5e051b5f82097a27274b917e3751736369fa73660513488248d27f23d"
 dependencies = [
  "cranelift-bitset",
  "serde",
@@ -2777,9 +2778,9 @@ dependencies = [
 
 [[package]]
 name = "cranelift-frontend"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7638ea1efb069a0aa18d8ee67401b6b0d19f6bfe5de5e9ede348bfc80bb0d8c7"
+checksum = "c0bf77ec0f470621655ec7539860b5c620d4f91326654ab21b075b83900f8831"
 dependencies = [
  "cranelift-codegen",
  "log",
@@ -2789,15 +2790,15 @@ dependencies = [
 
 [[package]]
 name = "cranelift-isle"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "15c53e1152a0b01c4ed2b1e0535602b8e86458777dd9d18b28732b16325c7dc0"
+checksum = "4b665d0a6932c421620be184f9fc7f7adaf1b0bc2fa77bb7ac5177c49abf645b"
 
 [[package]]
 name = "cranelift-native"
-version = "0.115.0"
+version = "0.115.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b7d8f895444fa52dd7bdd0bed11bf007a7fb43af65a6deac8fcc4094c6372f7"
+checksum = "bb2e75d1bd43dfec10924798f15e6474f1dbf63b0024506551aa19394dbe72ab"
 dependencies = [
  "cranelift-codegen",
  "libc",
@@ -2822,7 +2823,7 @@ dependencies = [
  "anes",
  "cast",
  "ciborium",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion-plot",
  "futures",
  "is-terminal",
@@ -2921,7 +2922,7 @@ version = "0.27.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f476fe445d41c9e991fd07515a6f463074b782242ccf4a5b7b1d1012e70824df"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "crossterm_winapi",
  "libc",
  "mio 0.8.11",
@@ -2978,7 +2979,7 @@ dependencies = [
  "cssparser-macros",
  "dtoa-short",
  "itoa",
- "phf 0.11.2",
+ "phf 0.11.3",
  "smallvec",
 ]
 
@@ -2989,7 +2990,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
 dependencies = [
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3049,7 +3050,7 @@ checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3186,7 +3187,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "strsim 0.11.1",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3208,7 +3209,7 @@ checksum = "d336a2a514f6ccccaa3e09b02d41d35330c07ddf03a62165fcec10bb561c7806"
 dependencies = [
  "darling_core 0.20.10",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3246,9 +3247,9 @@ dependencies = [
 
 [[package]]
 name = "data-encoding"
-version = "2.6.0"
+version = "2.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e8566979429cf69b49a5c740c60791108e86440e8be149bbea4fe54d2c32d6e2"
+checksum = "0e60eed09d8c01d3cee5b7d30acb059b76614c918fa0f992e0dd6eeb10daad6f"
 
 [[package]]
 name = "debugid"
@@ -3301,7 +3302,7 @@ checksum = "8034092389675178f570469e6c3b0465d3d30b4505c294a6550db47f3c17ad18"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3322,7 +3323,7 @@ checksum = "2cdc8d50f426189eef89dac62fabfa0abb27d5cc008f25bf4156a0203325becc"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3333,7 +3334,7 @@ checksum = "30542c1ad912e0e3d22a1935c290e12e8a29d704a420177a31faad4a601a0800"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3346,7 +3347,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "rustc_version",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3366,7 +3367,7 @@ checksum = "cb7330aeadfbe296029522e6c40f315320aba36fc43a5b3632f3795348f3bd22"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3374,11 +3375,11 @@ name = "deterministic_ips"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config_types",
  "ic-crypto-sha2",
  "macaddr",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -3386,7 +3387,7 @@ name = "dflate"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "libc",
  "tar",
 ]
@@ -3501,7 +3502,7 @@ name = "diroid"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "walkdir",
 ]
 
@@ -3534,7 +3535,7 @@ checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3779,7 +3780,7 @@ dependencies = [
  "heck 0.5.0",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3792,7 +3793,7 @@ dependencies = [
  "num-traits",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3842,7 +3843,7 @@ checksum = "3bf679796c0322556351f287a51b49e48f7c4986e727b5dd78c972d30e2e16cc"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -3995,9 +3996,9 @@ checksum = "0206175f82b8d6bf6652ff7d71a1e27fd2e4efde587fd368662814d6ec1d9ce0"
 
 [[package]]
 name = "event-listener"
-version = "5.3.1"
+version = "5.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6032be9bd27023a771701cc49f9f053c751055f71efb2e0ae5c15809093675ba"
+checksum = "3492acde4c3fc54c845eaab3eed8bd00c7a7d881f78bfc801e43a93dec1331ae"
 dependencies = [
  "concurrent-queue",
  "parking",
@@ -4010,7 +4011,7 @@ version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3c3e4e0dd3673c1139bf041f3008816d9cf2946bbfac2945c09e523b8d7b05b2"
 dependencies = [
- "event-listener 5.3.1",
+ "event-listener 5.4.0",
  "pin-project-lite",
 ]
 
@@ -4025,7 +4026,7 @@ dependencies = [
  "ic-cdk 0.16.0",
  "mockall",
  "serde",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
 ]
 
@@ -4108,11 +4109,11 @@ dependencies = [
  "ic-types",
  "ic-types-test-utils",
  "ic-universal-canister",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "lazy_static",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_cbor",
  "slog",
  "tokio",
@@ -4396,9 +4397,9 @@ checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
 
 [[package]]
 name = "futures-lite"
-version = "2.5.0"
+version = "2.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cef40d21ae2c515b51041df9ed313ed21e572df340ea58a922a0aefe7e8891a1"
+checksum = "f5edaec856126859abb19ed65f39e90fea3a9574b9707f13539acf4abf7eb532"
 dependencies = [
  "fastrand",
  "futures-core",
@@ -4415,7 +4416,7 @@ checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -4425,7 +4426,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a8f2f12607f92c69b12ed746fabf9ca4f5c482cba46679c1a75b874ed7c26adb"
 dependencies = [
  "futures-io",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-pki-types",
 ]
 
@@ -4480,6 +4481,19 @@ version = "0.3.55"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8f5f3913fa0bfe7ee1fd8248b6b9f42a5af4b9d65ec2dd2c3c26132b950ecfc2"
 
+[[package]]
+name = "generator"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc6bd114ceda131d3b1d665eba35788690ad37f5916457286b32ab6fd3c438dd"
+dependencies = [
+ "cfg-if 1.0.0",
+ "libc",
+ "log",
+ "rustversion",
+ "windows",
+]
+
 [[package]]
 name = "generic-array"
 version = "0.14.7"
@@ -4559,9 +4573,9 @@ dependencies = [
 
 [[package]]
 name = "glob"
-version = "0.3.1"
+version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2fabcfbdc87f4758337ca535fb41a6d701b65693ce38287d856d1674551ec9b"
+checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2"
 
 [[package]]
 name = "governor"
@@ -4599,7 +4613,7 @@ name = "guestos_tool"
 version = "1.0.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config",
  "indoc",
  "itertools 0.12.1",
@@ -4936,7 +4950,7 @@ name = "hostos_tool"
 version = "1.0.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config",
  "config_types",
  "deterministic_ips",
@@ -5036,10 +5050,10 @@ name = "httpbin-rs"
 version = "0.9.0"
 dependencies = [
  "axum",
- "clap 4.5.23",
+ "clap 4.5.26",
  "hyper 1.5.2",
  "hyper-util",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-pemfile 2.2.0",
  "serde_json",
  "tokio",
@@ -5168,7 +5182,7 @@ dependencies = [
  "hyper 1.5.2",
  "hyper-util",
  "log",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-native-certs 0.8.1",
  "rustls-pki-types",
  "tokio",
@@ -5235,7 +5249,7 @@ dependencies = [
  "iana-time-zone-haiku",
  "js-sys",
  "wasm-bindgen",
- "windows-core",
+ "windows-core 0.52.0",
 ]
 
 [[package]]
@@ -5296,7 +5310,7 @@ dependencies = [
  "base64 0.13.1",
  "candid",
  "chrono",
- "clap 4.5.23",
+ "clap 4.5.26",
  "cycles-minting-canister",
  "futures",
  "hex",
@@ -5396,7 +5410,7 @@ dependencies = [
  "pkcs8",
  "rand 0.8.5",
  "rangemap",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "ring 0.17.8",
  "sec1",
  "serde",
@@ -5406,7 +5420,7 @@ dependencies = [
  "sha2 0.10.8",
  "simple_asn1",
  "stop-token",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "time",
  "tokio",
  "tower-service",
@@ -5442,7 +5456,7 @@ dependencies = [
  "prost 0.13.4",
  "rand 0.8.5",
  "slog",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tower 0.5.2",
  "tracing",
@@ -5473,7 +5487,7 @@ version = "0.9.0"
 dependencies = [
  "bincode",
  "byteorder",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion",
  "ic-config",
  "ic-crypto-test-utils-canister-threshold-sigs",
@@ -5516,7 +5530,7 @@ version = "0.9.0"
 dependencies = [
  "anyhow",
  "chrono",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-config",
  "ic-crypto-utils-threshold-sig-der",
  "ic-logger",
@@ -5528,7 +5542,7 @@ dependencies = [
  "ic-test-utilities-tmpdir",
  "ic-types",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_json",
  "slog",
@@ -5610,8 +5624,8 @@ dependencies = [
  "base64 0.22.1",
  "bytes",
  "chacha20poly1305",
- "clap 4.5.23",
- "clap_derive 4.5.18",
+ "clap 4.5.26",
+ "clap_derive 4.5.24",
  "cloudflare 0.12.0 (git+https://github.com/cloudflare/cloudflare-rs.git?rev=f14720e42184ee176a97676e85ef2d2d85bc3aae)",
  "derive-new",
  "fqdn 0.4.4",
@@ -5633,8 +5647,8 @@ dependencies = [
  "prost-types 0.13.4",
  "rand 0.8.5",
  "rcgen",
- "reqwest 0.12.9",
- "rustls 0.23.20",
+ "reqwest 0.12.12",
+ "rustls 0.23.21",
  "rustls-acme",
  "rustls-pemfile 2.2.0",
  "rustls-platform-verifier",
@@ -5645,7 +5659,7 @@ dependencies = [
  "strum",
  "strum_macros",
  "systemstat",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tokio-io-timeout",
  "tokio-rustls 0.26.1",
@@ -5674,7 +5688,7 @@ dependencies = [
  "axum-extra",
  "bytes",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion",
  "dashmap 6.1.0",
  "ethnum",
@@ -5726,8 +5740,8 @@ dependencies = [
  "ratelimit",
  "rcgen",
  "regex",
- "reqwest 0.12.9",
- "rustls 0.23.20",
+ "reqwest 0.12.12",
+ "rustls 0.23.21",
  "rustls-pemfile 2.2.0",
  "serde",
  "serde_bytes",
@@ -5739,7 +5753,7 @@ dependencies = [
  "slog",
  "strum",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tikv-jemalloc-ctl",
  "tikv-jemallocator",
  "tokio",
@@ -5776,7 +5790,7 @@ dependencies = [
  "pem 1.1.1",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_json",
  "slog",
  "tokio",
@@ -5793,7 +5807,7 @@ dependencies = [
  "ic-crypto-tree-hash",
  "ic-system-test-driver",
  "ic-types",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_cbor",
  "slog",
@@ -5817,7 +5831,7 @@ dependencies = [
  "ic-system-test-driver",
  "prost 0.13.4",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "slog",
  "tokio",
 ]
@@ -5838,7 +5852,7 @@ dependencies = [
  "ic-registry-subnet-type",
  "ic-system-test-driver",
  "ic-types",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "slog",
  "url",
 ]
@@ -5850,7 +5864,7 @@ dependencies = [
  "bitcoin 0.28.2",
  "bitcoincore-rpc",
  "bitcoind",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion",
  "futures",
  "hashlink",
@@ -5879,7 +5893,7 @@ dependencies = [
  "slog",
  "slog-async",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tokio-socks",
  "tonic",
@@ -5985,7 +5999,7 @@ dependencies = [
  "proptest",
  "prost 0.13.4",
  "slog",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -6059,7 +6073,7 @@ dependencies = [
  "prost 0.13.4",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "serde",
  "serde_cbor",
  "tokio",
@@ -6185,7 +6199,7 @@ dependencies = [
  "serde_bytes",
  "serde_cbor",
  "sha2 0.10.8",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -6252,7 +6266,7 @@ dependencies = [
  "rand 0.8.5",
  "rand_chacha 0.3.1",
  "scoped_threadpool",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -6383,7 +6397,7 @@ dependencies = [
  "quote",
  "serde",
  "serde_tokenstream 0.2.2",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -6397,7 +6411,7 @@ dependencies = [
  "quote",
  "serde",
  "serde_tokenstream 0.2.2",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -6652,7 +6666,7 @@ dependencies = [
  "strum",
  "strum_macros",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "thousands",
  "time",
  "tokio",
@@ -6901,7 +6915,7 @@ dependencies = [
  "assert_matches",
  "async-trait",
  "bincode",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion",
  "hex",
  "ic-adapter-metrics-server",
@@ -6980,7 +6994,7 @@ dependencies = [
  "rand 0.8.5",
  "rand_chacha 0.3.1",
  "rsa",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "serde",
  "sha2 0.10.8",
  "simple_asn1",
@@ -7024,7 +7038,7 @@ dependencies = [
  "pem 1.1.1",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "wycheproof",
  "zeroize",
 ]
@@ -7330,7 +7344,7 @@ dependencies = [
  "stubborn-io",
  "tarpc",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "time",
  "tokio",
  "tokio-serde",
@@ -7572,7 +7586,7 @@ dependencies = [
  "serde_cbor",
  "strum",
  "strum_macros",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "zeroize",
 ]
 
@@ -7741,7 +7755,7 @@ dependencies = [
  "ic-types-test-utils",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "tempfile",
  "tokio",
 ]
@@ -7920,7 +7934,7 @@ version = "0.9.0"
 dependencies = [
  "ic-types",
  "mockall",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -7941,7 +7955,7 @@ dependencies = [
  "ic-types",
  "pkcs8",
  "rand 0.8.5",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "signature",
  "time",
  "tokio",
@@ -7977,9 +7991,9 @@ dependencies = [
  "ic-types",
  "json5",
  "maplit",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "serde",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "x509-parser",
 ]
 
@@ -7990,7 +8004,7 @@ dependencies = [
  "ic-base-types",
  "ic-crypto-tls-interfaces",
  "mockall",
- "rustls 0.23.20",
+ "rustls 0.23.21",
 ]
 
 [[package]]
@@ -8011,7 +8025,7 @@ dependencies = [
  "serde",
  "serde_bytes",
  "serde_cbor",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -8023,7 +8037,7 @@ dependencies = [
  "ic-crypto-tree-hash",
  "proptest",
  "rand 0.8.5",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -8090,7 +8104,7 @@ name = "ic-crypto-utils-tls"
 version = "0.9.0"
 dependencies = [
  "ic-base-types",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "x509-parser",
 ]
 
@@ -8105,7 +8119,7 @@ dependencies = [
  "ic-registry-nns-data-provider",
  "ic-types",
  "prost 0.13.4",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "tokio",
 ]
 
@@ -8175,7 +8189,7 @@ dependencies = [
 name = "ic-drun"
 version = "0.9.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures",
  "hex",
  "ic-canister-sandbox-backend-lib",
@@ -8220,7 +8234,7 @@ dependencies = [
  "bincode",
  "candid",
  "canister-test",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion",
  "embedders_bench",
  "ic-base-types",
@@ -8398,7 +8412,7 @@ dependencies = [
  "anyhow",
  "assert_cmd",
  "assert_matches",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-crypto-test-utils-reproducible-rng",
  "ic-sys",
  "maplit",
@@ -8452,9 +8466,9 @@ dependencies = [
  "ic-metrics",
  "ic-test-utilities-logger",
  "prometheus",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "slog",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tokio-io-timeout",
  "tower 0.5.2",
@@ -8517,7 +8531,7 @@ dependencies = [
  "ic-tracing",
  "ic-types",
  "ic-validator",
- "inferno 0.12.0",
+ "inferno 0.12.1",
  "maplit",
  "mockall",
  "pretty_assertions",
@@ -8525,9 +8539,9 @@ dependencies = [
  "proptest",
  "prost 0.13.4",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rstest",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "serde",
  "serde_bytes",
  "serde_cbor",
@@ -8574,7 +8588,7 @@ dependencies = [
  "maplit",
  "prometheus",
  "prost 0.13.4",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_json",
  "slog",
@@ -8599,7 +8613,7 @@ dependencies = [
  "ic-agent",
  "ic-http-certification",
  "ic-response-verification",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "thiserror 1.0.69",
 ]
 
@@ -8615,7 +8629,7 @@ dependencies = [
  "ic-logger",
  "ic-test-utilities-in-memory-logger",
  "mockito",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "slog",
  "tar",
  "tempfile",
@@ -8630,7 +8644,7 @@ dependencies = [
  "async-stream",
  "byte-unit",
  "bytes",
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures",
  "http 1.2.0",
  "http-body-util",
@@ -8648,13 +8662,13 @@ dependencies = [
  "prometheus",
  "rand 0.8.5",
  "rstest",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-pemfile 2.2.0",
  "serde",
  "serde_json",
  "slog",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tokio-rustls 0.26.1",
  "tonic",
@@ -8788,7 +8802,7 @@ dependencies = [
  "icrc-ledger-types",
  "num-bigint 0.4.6",
  "pocket-ic",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rosetta-core",
  "serde",
  "tempfile",
@@ -8805,7 +8819,7 @@ dependencies = [
  "ic-rosetta-test-utils",
  "icp-ledger",
  "pocket-ic",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "tempfile",
  "tokio",
 ]
@@ -8818,7 +8832,7 @@ dependencies = [
  "axum",
  "candid",
  "ciborium",
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures",
  "hex",
  "ic-agent",
@@ -8838,7 +8852,7 @@ dependencies = [
  "ic-rosetta-test-utils",
  "ic-sys",
  "ic-test-utilities-load-wasm",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "icrc-ledger-agent",
  "icrc-ledger-types",
  "indicatif",
@@ -8849,7 +8863,7 @@ dependencies = [
  "pocket-ic",
  "proptest",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rolling-file",
  "rosetta-core",
  "rusqlite",
@@ -8875,7 +8889,7 @@ version = "0.1.0"
 dependencies = [
  "anyhow",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "hex",
  "ic-agent",
  "ic-crypto-ed25519",
@@ -8886,7 +8900,7 @@ dependencies = [
  "icrc-ledger-types",
  "num-bigint 0.4.6",
  "pocket-ic",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rosetta-core",
  "serde",
  "tokio",
@@ -8901,7 +8915,7 @@ dependencies = [
  "candid",
  "icrc-ledger-types",
  "pocket-ic",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "tempfile",
  "tokio",
 ]
@@ -8939,7 +8953,7 @@ dependencies = [
  "rand 0.8.5",
  "serde",
  "serde_bytes",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -9179,7 +9193,7 @@ dependencies = [
  "serde",
  "strum",
  "strum_macros",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tower 0.5.2",
 ]
 
@@ -9188,7 +9202,7 @@ name = "ic-interfaces-adapter-client"
 version = "0.9.0"
 dependencies = [
  "strum_macros",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -9243,7 +9257,7 @@ dependencies = [
  "ic-crypto-tree-hash",
  "ic-types",
  "phantom_newtype",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -9278,7 +9292,7 @@ dependencies = [
  "icp-ledger",
  "on_wire",
  "proptest",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rusqlite",
  "serde",
  "tokio",
@@ -9504,7 +9518,7 @@ dependencies = [
  "ic-types",
  "ic_consensus_system_test_utils",
  "icp-ledger",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "slog",
  "url",
@@ -9518,11 +9532,11 @@ dependencies = [
  "assert_matches",
  "candid",
  "candid_parser",
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures",
  "hex",
  "maplit",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_json",
  "sha2 0.10.8",
@@ -9684,7 +9698,7 @@ name = "ic-metrics-tool"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
 ]
 
 [[package]]
@@ -9706,7 +9720,7 @@ dependencies = [
  "pocket-ic",
  "serde",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
 ]
 
@@ -10467,7 +10481,7 @@ version = "0.9.0"
 dependencies = [
  "candid",
  "canister-test",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-base-types",
  "ic-canister-client",
  "ic-interfaces-registry",
@@ -10491,7 +10505,7 @@ dependencies = [
 name = "ic-nns-inspector"
 version = "0.1.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "csv",
  "hex",
  "ic-base-types",
@@ -10726,7 +10740,7 @@ dependencies = [
  "quinn",
  "quinn-udp",
  "rcgen",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "serde",
  "slog",
  "tempfile",
@@ -10764,7 +10778,7 @@ dependencies = [
  "pprof",
  "prost 0.12.6",
  "regex",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
 ]
 
@@ -10775,7 +10789,7 @@ dependencies = [
  "anyhow",
  "assert_matches",
  "base64 0.13.1",
- "clap 4.5.23",
+ "clap 4.5.26",
  "fs_extra",
  "ic-config",
  "ic-crypto-node-key-generation",
@@ -10806,12 +10820,12 @@ dependencies = [
  "pretty_assertions",
  "prost 0.13.4",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_json",
  "slog",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "url",
  "x509-cert",
 ]
@@ -10891,11 +10905,11 @@ dependencies = [
  "prost 0.13.4",
  "quinn",
  "rstest",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "slog",
  "socket2 0.5.8",
  "static_assertions",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tokio-metrics",
  "tokio-util",
@@ -10923,7 +10937,7 @@ name = "ic-recovery"
 version = "0.9.0"
 dependencies = [
  "base64 0.13.1",
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures",
  "hex",
  "ic-artifact-pool",
@@ -10953,7 +10967,7 @@ dependencies = [
  "ic-test-utilities-types",
  "ic-types",
  "prost 0.13.4",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_cbor",
  "serde_json",
@@ -10973,7 +10987,7 @@ version = "0.9.0"
 dependencies = [
  "anyhow",
  "base64 0.13.1",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-base-types",
  "ic-crypto-sha2",
  "ic-crypto-utils-threshold-sig-der",
@@ -10991,7 +11005,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "url",
 ]
@@ -11003,7 +11017,7 @@ dependencies = [
  "candid",
  "ic-base-types",
  "serde",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -11078,7 +11092,7 @@ dependencies = [
  "ic-registry-subnet-features",
  "ic-types",
  "serde_cbor",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -11127,7 +11141,7 @@ dependencies = [
  "ic-registry-transport",
  "ic-types",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "url",
 ]
@@ -11200,7 +11214,7 @@ dependencies = [
  "ic-registry-transport",
  "ic-sys",
  "ic-types",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -11215,7 +11229,7 @@ dependencies = [
 name = "ic-registry-replicator"
 version = "0.9.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-config",
  "ic-crypto-utils-threshold-sig-der",
  "ic-http-endpoints-metrics",
@@ -11300,7 +11314,7 @@ name = "ic-replay"
 version = "0.9.0"
 dependencies = [
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "hex",
  "ic-artifact-pool",
  "ic-canister-client",
@@ -11354,7 +11368,7 @@ version = "0.9.0"
 dependencies = [
  "assert_cmd",
  "canister-test",
- "clap 4.5.23",
+ "clap 4.5.26",
  "criterion",
  "hex",
  "ic-artifact-pool",
@@ -11610,7 +11624,7 @@ dependencies = [
  "async-trait",
  "base64 0.13.1",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "dfn_candid",
  "dfn_protobuf",
  "futures",
@@ -11657,7 +11671,7 @@ dependencies = [
  "rand 0.8.5",
  "rand_chacha 0.3.1",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rolling-file",
  "rosetta-core",
  "rusqlite",
@@ -11690,7 +11704,7 @@ dependencies = [
  "icp-ledger",
  "nix 0.24.3",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rosetta-core",
  "serde",
  "serde_bytes",
@@ -11771,7 +11785,7 @@ dependencies = [
  "serde",
  "serde_json",
  "textplots",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
 ]
 
@@ -11782,7 +11796,7 @@ dependencies = [
  "anyhow",
  "base64 0.13.1",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "futures",
  "hex",
  "ic-agent",
@@ -11808,7 +11822,7 @@ dependencies = [
  "serde_json",
  "serde_yaml",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
 ]
 
@@ -11824,7 +11838,7 @@ dependencies = [
  "canbench-rs",
  "candid",
  "candid_parser",
- "clap 4.5.23",
+ "clap 4.5.26",
  "comparable",
  "futures",
  "hex",
@@ -11899,7 +11913,7 @@ version = "0.9.0"
 dependencies = [
  "bytes",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "comparable",
  "ic-base-types",
  "ic-nervous-system-proto",
@@ -12314,7 +12328,7 @@ name = "ic-starter"
 version = "0.9.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-config",
  "ic-logger",
  "ic-management-canister-types",
@@ -12366,7 +12380,7 @@ version = "0.9.0"
 dependencies = [
  "candid",
  "ciborium",
- "clap 4.5.23",
+ "clap 4.5.26",
  "hex",
  "ic-artifact-pool",
  "ic-base-types",
@@ -12526,7 +12540,7 @@ dependencies = [
  "prost 0.13.4",
  "rand 0.8.5",
  "slog",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tokio-metrics",
  "tokio-util",
@@ -12538,7 +12552,7 @@ dependencies = [
 name = "ic-state-tool"
 version = "0.9.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "hex",
  "ic-config",
  "ic-logger",
@@ -12563,7 +12577,7 @@ dependencies = [
 name = "ic-subnet-splitting"
 version = "0.9.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "hex",
  "ic-agent",
  "ic-base-types",
@@ -12602,7 +12616,7 @@ dependencies = [
  "prost 0.13.4",
  "rand 0.8.5",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "wsl",
 ]
@@ -12659,7 +12673,7 @@ dependencies = [
  "candid",
  "canister-test",
  "chrono",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config_types",
  "crossbeam-channel",
  "cycles-minting-canister",
@@ -12737,7 +12751,7 @@ dependencies = [
  "ic-types",
  "ic-types-test-utils",
  "ic-universal-canister",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "ic-wasm-types",
  "icp-ledger",
  "icrc-ledger-types",
@@ -12765,7 +12779,7 @@ dependencies = [
  "rcgen",
  "regex",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "ring 0.17.8",
  "rosetta-core",
  "rsa",
@@ -12783,7 +12797,7 @@ dependencies = [
  "strum",
  "strum_macros",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "time",
  "tokio",
  "tokio-util",
@@ -13172,7 +13186,7 @@ dependencies = [
  "ic_consensus_system_test_utils",
  "ic_consensus_threshold_sig_system_test_utils",
  "icrc-ledger-types",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_json",
  "slog",
 ]
@@ -13225,7 +13239,7 @@ dependencies = [
  "serde_cbor",
  "serde_repr",
  "sha2 0.10.8",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -13272,7 +13286,7 @@ dependencies = [
  "serde_with 1.14.0",
  "strum",
  "strum_macros",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "thousands",
 ]
 
@@ -13313,9 +13327,9 @@ dependencies = [
 
 [[package]]
 name = "ic-utils"
-version = "0.39.0"
+version = "0.39.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb1da4a68c45146018b8496c157ad94126b9c202ab4400c6c0a9030c1ef0f0ba"
+checksum = "e1fb9c35ef4976a71d37f3ebf73ee43bb52b360be60d91d3a77f74fbc875dda4"
 dependencies = [
  "async-trait",
  "candid",
@@ -13328,7 +13342,7 @@ dependencies = [
  "sha2 0.10.8",
  "strum",
  "strum_macros",
- "thiserror 1.0.69",
+ "thiserror 2.0.11",
  "time",
  "tokio",
 ]
@@ -13392,7 +13406,7 @@ dependencies = [
  "ic-types",
  "mockall",
  "rand 0.8.5",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
 ]
 
 [[package]]
@@ -13524,7 +13538,7 @@ checksum = "19fabaeecfe37f24b433c62489242fc54503d98d4cc8d0f9ef7544dfdfc0ddcb"
 dependencies = [
  "anyhow",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "libflate",
  "rustc-demangle",
  "serde",
@@ -13564,7 +13578,7 @@ dependencies = [
  "byte-unit",
  "candid",
  "chrono",
- "clap 4.5.23",
+ "clap 4.5.26",
  "console 0.11.3",
  "futures",
  "hex",
@@ -13656,10 +13670,10 @@ dependencies = [
  "prometheus",
  "proptest",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "slog",
  "tempfile",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "url",
 ]
@@ -13809,7 +13823,7 @@ dependencies = [
  "prost 0.13.4",
  "rand 0.8.5",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rsa",
  "serde_json",
  "slog",
@@ -13848,7 +13862,7 @@ dependencies = [
  "rand 0.8.5",
  "rand_chacha 0.3.1",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_cbor",
  "serde_json",
  "slog",
@@ -13906,7 +13920,7 @@ dependencies = [
  "ic_consensus_system_test_utils",
  "k256",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_bytes",
  "serde_cbor",
  "slog",
@@ -13931,7 +13945,7 @@ dependencies = [
 name = "icp-config"
 version = "0.9.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "eyre",
  "ic-config",
  "ic-replicated-state",
@@ -14221,7 +14235,7 @@ checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -14283,9 +14297,9 @@ dependencies = [
 
 [[package]]
 name = "impl-more"
-version = "0.1.8"
+version = "0.1.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aae21c3177a27788957044151cc2800043d127acaa460a47ebb9b84dfa2c6aa0"
+checksum = "e8a5a9a0ff0086c7a148acb942baaabeadf9504d10400b5a05645853729b9cd2"
 
 [[package]]
 name = "impl-rlp"
@@ -14313,7 +14327,7 @@ checksum = "a0eb5a3343abf848c0984fe4604b2b105da9539376e24fc0a3b0007411ae4fd9"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -14383,12 +14397,12 @@ dependencies = [
 
 [[package]]
 name = "inferno"
-version = "0.12.0"
+version = "0.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75a5d75fee4d36809e6b021e4b96b686e763d365ffdb03af2bd00786353f84fe"
+checksum = "692eda1cc790750b9f5a5e3921ef9c117fd5498b97cfacbc910693e5b29002dc"
 dependencies = [
  "ahash 0.8.11",
- "clap 4.5.23",
+ "clap 4.5.26",
  "crossbeam-channel",
  "crossbeam-utils",
  "dashmap 6.1.0",
@@ -14398,7 +14412,7 @@ dependencies = [
  "log",
  "num-format",
  "once_cell",
- "quick-xml 0.37.1",
+ "quick-xml 0.37.2",
  "rgb",
  "str_stack",
 ]
@@ -14408,7 +14422,7 @@ name = "inject-files"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "partition_tools",
  "tempfile",
  "tokio",
@@ -14425,13 +14439,13 @@ dependencies = [
 
 [[package]]
 name = "insta"
-version = "1.41.1"
+version = "1.42.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e9ffc4d4892617c50a928c52b2961cb5174b6fc6ebf252b2fac9d21955c48b8"
+checksum = "6513e4067e16e69ed1db5ab56048ed65db32d10ba5fc1217f5393f8f17d8b5a5"
 dependencies = [
  "console 0.15.10",
- "lazy_static",
  "linked-hash-map",
+ "once_cell",
  "similar",
 ]
 
@@ -14605,9 +14619,9 @@ dependencies = [
 
 [[package]]
 name = "js-sys"
-version = "0.3.76"
+version = "0.3.77"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6717b6b5b077764fb5966237269cb3c64edddde4b14ce42647430a78ced9e7b7"
+checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f"
 dependencies = [
  "once_cell",
  "wasm-bindgen",
@@ -14742,7 +14756,7 @@ dependencies = [
  "k8s-openapi",
  "kube-core",
  "pem 3.0.4",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-pemfile 2.2.0",
  "secrecy",
  "serde",
@@ -14858,12 +14872,12 @@ checksum = "d4345964bb142484797b161f473a503a434de77149dd8c7427788c6e13379388"
 name = "launch-single-vm"
 version = "0.1.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-prep",
  "ic-registry-subnet-type",
  "ic-system-test-driver",
  "ic-types",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "slog",
  "slog-async",
@@ -15097,7 +15111,7 @@ version = "0.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c0ff37bd590ca25063e35af745c343cb7a0271906fb7b37e4813e8f79f00268d"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "libc",
  "redox_syscall 0.5.8",
 ]
@@ -15155,9 +15169,9 @@ dependencies = [
 
 [[package]]
 name = "libz-sys"
-version = "1.1.20"
+version = "1.1.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2d16453e800a8cf6dd2fc3eb4bc99b786a9b90c663b8559a5b1a041bf89e472"
+checksum = "df9b68e50e6e0b26f672573834882eb57759f6db9b3be2ea3c35c91188bb4eaa"
 dependencies = [
  "cc",
  "libc",
@@ -15189,9 +15203,9 @@ checksum = "0717cef1bc8b636c6e1c1bbdefc09e6322da8a9321966e8928ef80d20f7f770f"
 
 [[package]]
 name = "linux-raw-sys"
-version = "0.4.14"
+version = "0.4.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
 
 [[package]]
 name = "linux_kernel_command_line"
@@ -15283,9 +15297,9 @@ dependencies = [
 
 [[package]]
 name = "log"
-version = "0.4.22"
+version = "0.4.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7a70ba024b9dc04c27ea2f0c0548feb474ec5c54bba33a7f72f873a39d07b24"
+checksum = "04cbf5b083de1c7e0222a7a51dbfdba1cbe1c6ab0b15e29fff3f6c077fd9cd9f"
 
 [[package]]
 name = "logos"
@@ -15316,7 +15330,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "regex-syntax 0.6.29",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -15342,6 +15356,19 @@ dependencies = [
  "logos-codegen",
 ]
 
+[[package]]
+name = "loom"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca"
+dependencies = [
+ "cfg-if 1.0.0",
+ "generator",
+ "scoped-tls",
+ "tracing",
+ "tracing-subscriber",
+]
+
 [[package]]
 name = "lru"
 version = "0.7.8"
@@ -15566,7 +15593,7 @@ dependencies = [
  "ic-registry-subnet-type",
  "ic-system-test-driver",
  "ic-types",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "itertools 0.12.1",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
@@ -15636,9 +15663,9 @@ checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
 
 [[package]]
 name = "miniz_oxide"
-version = "0.8.2"
+version = "0.8.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ffbe83022cedc1d264172192511ae958937694cd57ce297164951b8b3568394"
+checksum = "b8402cab7aefae129c6977bb0ff1b8fd9a04eb5b51efc50a70bea51cda0c7924"
 dependencies = [
  "adler2",
 ]
@@ -15696,7 +15723,7 @@ dependencies = [
  "cfg-if 1.0.0",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -15725,25 +15752,23 @@ dependencies = [
 
 [[package]]
 name = "moka"
-version = "0.12.8"
+version = "0.12.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32cf62eb4dd975d2dde76432fb1075c49e3ee2331cf36f1f8fd4b66550d32b6f"
+checksum = "a9321642ca94a4282428e6ea4af8cc2ca4eac48ac7a6a4ea8f33f76d0ce70926"
 dependencies = [
  "async-lock",
- "async-trait",
  "crossbeam-channel",
  "crossbeam-epoch",
  "crossbeam-utils",
- "event-listener 5.3.1",
+ "event-listener 5.4.0",
  "futures-util",
- "once_cell",
+ "loom",
  "parking_lot 0.12.3",
- "quanta",
+ "portable-atomic",
  "rustc_version",
  "smallvec",
  "tagptr",
  "thiserror 1.0.69",
- "triomphe",
  "uuid",
 ]
 
@@ -15796,9 +15821,9 @@ checksum = "defc4c55412d89136f966bbb339008b474350e5e6e78d2714439c386b3137a03"
 
 [[package]]
 name = "neli"
-version = "0.6.4"
+version = "0.6.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1100229e06604150b3becd61a4965d5c70f3be1759544ea7274166f4be41ef43"
+checksum = "93062a0dce6da2517ea35f301dfc88184ce18d3601ec786a727a87bf535deca9"
 dependencies = [
  "byteorder",
  "libc",
@@ -15808,9 +15833,9 @@ dependencies = [
 
 [[package]]
 name = "neli-proc-macros"
-version = "0.1.3"
+version = "0.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c168194d373b1e134786274020dae7fc5513d565ea2ebb9bc9ff17ffb69106d4"
+checksum = "0c8034b7fbb6f9455b2a96c19e6edf8dc9fc34c70449938d8ee3b4df363f61fe"
 dependencies = [
  "either",
  "proc-macro2",
@@ -15880,12 +15905,12 @@ dependencies = [
  "ic-test-utilities",
  "ic-test-utilities-types",
  "ic-types",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "proxy_canister",
  "rand 0.8.5",
  "rand_chacha 0.3.1",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "slog",
  "tokio",
  "url",
@@ -15902,7 +15927,7 @@ name = "nft_exporter"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "serde",
  "serde_json",
 ]
@@ -15950,7 +15975,7 @@ version = "0.27.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2eb04e9c688eff1c89d72b407f168cf79bb9e867a9d3323ed6c01519eb9cc053"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "cfg-if 1.0.0",
  "libc",
  "memoffset 0.9.1",
@@ -15962,7 +15987,7 @@ version = "0.29.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "cfg-if 1.0.0",
  "cfg_aliases",
  "libc",
@@ -16012,7 +16037,7 @@ dependencies = [
  "on_wire",
  "prost 0.13.4",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_cbor",
  "slog",
  "tokio",
@@ -16241,7 +16266,7 @@ dependencies = [
  "proc-macro-crate",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -16261,9 +16286,9 @@ checksum = "830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3"
 
 [[package]]
 name = "object"
-version = "0.36.5"
+version = "0.36.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aedf0a2d09c573ed1d8d85b30c119153926a2b36dce0ab28322c09a117a4683e"
+checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87"
 dependencies = [
  "crc32fast",
  "hashbrown 0.15.2",
@@ -16533,7 +16558,7 @@ dependencies = [
  "async-trait",
  "backoff",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "env-file-reader",
  "exec",
  "get_if_addrs",
@@ -16643,7 +16668,7 @@ dependencies = [
  "ic-types",
  "ic_consensus_system_test_utils",
  "itertools 0.12.1",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "slog",
  "tokio",
@@ -16869,7 +16894,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8b7cafe60d6cf8e62e1b9b2ea516a089c008945bb5a275416789e7db0bc199dc"
 dependencies = [
  "memchr",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "ucd-trie",
 ]
 
@@ -16893,7 +16918,7 @@ dependencies = [
  "pest_meta",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -16949,12 +16974,12 @@ dependencies = [
 
 [[package]]
 name = "phf"
-version = "0.11.2"
+version = "0.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ade2d8b8f33c7333b51bcf0428d37e217e9f32192ae4772156f65063b8ce03dc"
+checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078"
 dependencies = [
  "phf_macros",
- "phf_shared 0.11.2",
+ "phf_shared 0.11.3",
 ]
 
 [[package]]
@@ -16979,25 +17004,25 @@ dependencies = [
 
 [[package]]
 name = "phf_generator"
-version = "0.11.2"
+version = "0.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48e4cc64c2ad9ebe670cb8fd69dd50ae301650392e81c05f9bfcb2d5bdbc24b0"
+checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
 dependencies = [
- "phf_shared 0.11.2",
+ "phf_shared 0.11.3",
  "rand 0.8.5",
 ]
 
 [[package]]
 name = "phf_macros"
-version = "0.11.2"
+version = "0.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3444646e286606587e49f3bcf1679b8cef1dc2c5ecc29ddacaffc305180d464b"
+checksum = "f84ac04429c13a7ff43785d75ad27569f2951ce0ffd30a3321230db2fc727216"
 dependencies = [
- "phf_generator 0.11.2",
- "phf_shared 0.11.2",
+ "phf_generator 0.11.3",
+ "phf_shared 0.11.3",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -17006,16 +17031,16 @@ version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b6796ad771acdc0123d2a88dc428b5e38ef24456743ddb1744ed628f9815c096"
 dependencies = [
- "siphasher",
+ "siphasher 0.3.11",
 ]
 
 [[package]]
 name = "phf_shared"
-version = "0.11.2"
+version = "0.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "90fcb95eef784c2ac79119d1dd819e162b5da872ce6f3c3abe1e8ca1c082f72b"
+checksum = "67eabc2ef2a60eb7faa00097bd1ffdb5bd28e62bf39990626a582201b7a754e5"
 dependencies = [
- "siphasher",
+ "siphasher 1.0.1",
 ]
 
 [[package]]
@@ -17026,29 +17051,29 @@ checksum = "5be167a7af36ee22fe3115051bc51f6e6c7054c9348e28deb4f49bd6f705a315"
 
 [[package]]
 name = "pin-project"
-version = "1.1.7"
+version = "1.1.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be57f64e946e500c8ee36ef6331845d40a93055567ec57e8fae13efd33759b95"
+checksum = "1e2ec53ad785f4d35dac0adea7f7dc6f1bb277ad84a680c7afefeae05d1f5916"
 dependencies = [
  "pin-project-internal",
 ]
 
 [[package]]
 name = "pin-project-internal"
-version = "1.1.7"
+version = "1.1.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c0f5fad0874fc7abcd4d750e76917eaebbecaa2c20bde22e1dbeeba8beb758c"
+checksum = "d56a66c0c55993aa927429d0f8a0abfd74f084e4d9c192cffed01e418d83eefb"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
 name = "pin-project-lite"
-version = "0.2.15"
+version = "0.2.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "915a1e146535de9163f3987b8944ed8cf49a18bb0056bcebcdcece385cece4ff"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
 
 [[package]]
 name = "pin-utils"
@@ -17162,7 +17187,7 @@ dependencies = [
  "ic-transport-types",
  "k256",
  "lazy_static",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "schemars",
  "serde",
  "serde_bytes",
@@ -17172,7 +17197,7 @@ dependencies = [
  "slog",
  "strum",
  "strum_macros",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tracing",
  "tracing-appender",
@@ -17197,7 +17222,7 @@ dependencies = [
  "bitcoincore-rpc",
  "bytes",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ctrlc",
  "flate2",
  "form_urlencoded",
@@ -17246,7 +17271,7 @@ dependencies = [
  "ic-test-utilities",
  "ic-test-utilities-registry",
  "ic-types",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "ic-utils-thread",
  "ic-validator-ingress-message",
  "itertools 0.12.1",
@@ -17255,7 +17280,7 @@ dependencies = [
  "rand 0.8.5",
  "rcgen",
  "registry-canister",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_cbor",
  "serde_json",
@@ -17451,12 +17476,12 @@ dependencies = [
 
 [[package]]
 name = "prettyplease"
-version = "0.2.25"
+version = "0.2.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "64d1ec885c64d0457d564db4ec299b2dae3f9c02808b8ad9c3a089c591b18033"
+checksum = "6924ced06e1f7dfe3fa48d57b9f74f55d8915f5036121bef647ef4b204895fac"
 dependencies = [
  "proc-macro2",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -17534,9 +17559,9 @@ checksum = "dc375e1527247fe1a97d8b7156678dfe7c1af2fc075c9a4db3690ecd2a148068"
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.92"
+version = "1.0.93"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "37d3544b3f2748c54e147655edb5025752e2303145b5aefb3c3ea2c78b973bb0"
+checksum = "60946a68e5f9d28b0dc1c21bb8a97ee7d018a8b322fa57838ba31cc878e22d99"
 dependencies = [
  "unicode-ident",
 ]
@@ -17561,7 +17586,7 @@ version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "731e0d9356b0c25f16f33b5be79b1c57b562f141ebfcdb0ad8ac2c13a24293b4"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "hex",
  "lazy_static",
  "procfs-core",
@@ -17574,7 +17599,7 @@ version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2d3554923a69f4ce04c4a754260c338f505ce22642d3830e049a399fc2059a29"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "hex",
 ]
 
@@ -17615,7 +17640,7 @@ checksum = "14cae93065090804185d3b75f0bf93b8eeda30c7a9b4a33d3bdb3988d6229e50"
 dependencies = [
  "bit-set 0.8.0",
  "bit-vec 0.8.0",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "lazy_static",
  "num-traits",
  "rand 0.8.5",
@@ -17635,7 +17660,7 @@ checksum = "4ee1c9ac207483d5e7db4940700de86a9aae46ef90c48b57f99fe7edb8345e49"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -17675,7 +17700,7 @@ dependencies = [
  "prost 0.12.6",
  "prost-types 0.12.6",
  "regex",
- "syn 2.0.90",
+ "syn 2.0.96",
  "tempfile",
 ]
 
@@ -17695,7 +17720,7 @@ dependencies = [
  "prost 0.13.4",
  "prost-types 0.13.4",
  "regex",
- "syn 2.0.90",
+ "syn 2.0.96",
  "tempfile",
 ]
 
@@ -17709,7 +17734,7 @@ dependencies = [
  "itertools 0.12.1",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -17722,7 +17747,7 @@ dependencies = [
  "itertools 0.13.0",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -17807,9 +17832,9 @@ dependencies = [
 
 [[package]]
 name = "pulley-interpreter"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "403a1a95f4c18a45c86c7bff13df00347afd0abcbf2e54af273c837339ffcf77"
+checksum = "8324e531de91a3c25021a30fb7862d39cc516b61fbb801176acb5ff279ea887b"
 dependencies = [
  "cranelift-bitset",
  "log",
@@ -17818,9 +17843,9 @@ dependencies = [
 
 [[package]]
 name = "quanta"
-version = "0.12.4"
+version = "0.12.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "773ce68d0bb9bc7ef20be3536ffe94e223e1f365bd374108b2659fac0c65cfe6"
+checksum = "3bd1fe6824cea6538803de3ff1bc0cf3949024db3d43c9643024bfb33a807c0e"
 dependencies = [
  "crossbeam-utils",
  "libc",
@@ -17848,9 +17873,9 @@ dependencies = [
 
 [[package]]
 name = "quick-xml"
-version = "0.37.1"
+version = "0.37.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f22f29bdff3987b4d8632ef95fd6424ec7e4e0a57e2f4fc63e489e75357f6a03"
+checksum = "165859e9e55f79d67b96c5d96f4e88b6f2695a1972849c15a6a3f5c59fc2c003"
 dependencies = [
  "memchr",
 ]
@@ -17866,9 +17891,9 @@ dependencies = [
  "quinn-proto",
  "quinn-udp",
  "rustc-hash 2.1.0",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "socket2 0.5.8",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tokio",
  "tracing",
 ]
@@ -17884,10 +17909,10 @@ dependencies = [
  "rand 0.8.5",
  "ring 0.17.8",
  "rustc-hash 2.1.0",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-pki-types",
  "slab",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "tinyvec",
  "tracing",
  "web-time",
@@ -17909,9 +17934,9 @@ dependencies = [
 
 [[package]]
 name = "quote"
-version = "1.0.37"
+version = "1.0.38"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5b9d34b8991d19d98081b46eacdd8eb58c6f2b201139f7c5f643cc155a633af"
+checksum = "0e4dccaaaf89514f546c693ddc140f729f958c247918a13380cccc6078391acc"
 dependencies = [
  "proc-macro2",
 ]
@@ -18133,7 +18158,7 @@ version = "0.9.0"
 dependencies = [
  "anyhow",
  "candid",
- "clap 4.5.23",
+ "clap 4.5.26",
  "ic-agent",
  "k256",
  "rate-limits-api",
@@ -18187,7 +18212,7 @@ dependencies = [
  "serde_cbor",
  "serde_json",
  "strum",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "uuid",
 ]
 
@@ -18204,11 +18229,11 @@ dependencies = [
 
 [[package]]
 name = "raw-cpuid"
-version = "11.2.0"
+version = "11.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ab240315c661615f2ee9f0f2cd32d5a7343a84d5ebcccb99d46e6637565e7b0"
+checksum = "c6928fa44c097620b706542d428957635951bade7143269085389d42c8a4927e"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
 ]
 
 [[package]]
@@ -18233,9 +18258,9 @@ dependencies = [
 
 [[package]]
 name = "rcgen"
-version = "0.13.1"
+version = "0.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "54077e1872c46788540de1ea3d7f4ccb1983d12f9aa909b234468676c1a36779"
+checksum = "75e669e5202259b5314d1ea5397316ad400819437857b90861765f24c4cf80a2"
 dependencies = [
  "pem 3.0.4",
  "ring 0.17.8",
@@ -18269,7 +18294,7 @@ version = "0.5.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "03a862b389f93e68874fbf580b9de08dd02facb9a788ebadaf4a3fd33cf58834"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
 ]
 
 [[package]]
@@ -18532,9 +18557,9 @@ dependencies = [
 
 [[package]]
 name = "reqwest"
-version = "0.12.9"
+version = "0.12.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a77c62af46e79de0a562e1a9849205ffcb7fc1238876e9bd743357570e04046f"
+checksum = "43e734407157c3c2034e0258f5e4473ddb361b1e85f95a66690d67264d7cd1da"
 dependencies = [
  "base64 0.22.1",
  "bytes",
@@ -18558,7 +18583,7 @@ dependencies = [
  "percent-encoding",
  "pin-project-lite",
  "quinn",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-native-certs 0.8.1",
  "rustls-pemfile 2.2.0",
  "rustls-pki-types",
@@ -18570,6 +18595,7 @@ dependencies = [
  "tokio-rustls 0.26.1",
  "tokio-socks",
  "tokio-util",
+ "tower 0.5.2",
  "tower-service",
  "url",
  "wasm-bindgen",
@@ -18827,7 +18853,7 @@ dependencies = [
  "on_wire",
  "prost 0.13.4",
  "rand 0.8.5",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rosetta-core",
  "serde",
  "serde_json",
@@ -18882,7 +18908,7 @@ dependencies = [
  "regex",
  "relative-path",
  "rustc_version",
- "syn 2.0.90",
+ "syn 2.0.96",
  "unicode-ident",
 ]
 
@@ -19005,11 +19031,11 @@ dependencies = [
 
 [[package]]
 name = "rustix"
-version = "0.38.42"
+version = "0.38.43"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f93dc38ecbab2eb790ff964bb77fa94faf256fd3e73285fd7ba0903b76bedb85"
+checksum = "a78891ee6bf2340288408954ac787aa063d8e8817e9f53abb37c695c6d834ef6"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "errno 0.3.10",
  "libc",
  "linux-raw-sys",
@@ -19044,9 +19070,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.20"
+version = "0.23.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5065c3f250cbd332cd894be57c40fa52387247659b14a2d6041d121547903b1b"
+checksum = "8f287924602bf649d949c63dc8ac8b235fa5387d394020705b80c4eb597ce5b8"
 dependencies = [
  "brotli 7.0.0",
  "brotli-decompressor",
@@ -19080,7 +19106,7 @@ dependencies = [
  "ring 0.17.8",
  "serde",
  "serde_json",
- "thiserror 2.0.8",
+ "thiserror 2.0.11",
  "webpki-roots 0.26.7",
  "x509-parser",
 ]
@@ -19107,7 +19133,7 @@ dependencies = [
  "openssl-probe",
  "rustls-pki-types",
  "schannel",
- "security-framework 3.1.0",
+ "security-framework 3.2.0",
 ]
 
 [[package]]
@@ -19148,7 +19174,7 @@ dependencies = [
  "jni",
  "log",
  "once_cell",
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "rustls-native-certs 0.7.3",
  "rustls-platform-verifier-android",
  "rustls-webpki 0.102.8",
@@ -19187,9 +19213,9 @@ dependencies = [
 
 [[package]]
 name = "rustversion"
-version = "1.0.18"
+version = "1.0.19"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e819f2bc632f285be6d7cd36e25940d45b2391dd6d9b939e79de557f7014248"
+checksum = "f7c45b9784283f1b2e7fb61b42047c2fd678ef0960d4f6f1eba131594cc369d4"
 
 [[package]]
 name = "rusty-fork"
@@ -19239,7 +19265,7 @@ dependencies = [
  "proc-macro-crate",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -19273,7 +19299,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "serde_derive_internals",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -19332,7 +19358,7 @@ dependencies = [
  "ic-system-test-driver",
  "ic_consensus_system_test_utils",
  "nns_dapp",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde_json",
  "slog",
 ]
@@ -19433,7 +19459,7 @@ version = "2.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "897b2245f0b511c87893af39b033e5ca9cce68824c4d7e7630b5a1d339658d02"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "core-foundation 0.9.4",
  "core-foundation-sys",
  "libc",
@@ -19443,11 +19469,11 @@ dependencies = [
 
 [[package]]
 name = "security-framework"
-version = "3.1.0"
+version = "3.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "81d3f8c9bfcc3cbb6b0179eb57042d75b1582bdc65c3cb95f3fa999509c03cbc"
+checksum = "271720403f46ca04f7ba6f55d438f8bd878d6b8ca0a1046e8228c4145bcbb316"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "core-foundation 0.10.0",
  "core-foundation-sys",
  "libc",
@@ -19456,9 +19482,9 @@ dependencies = [
 
 [[package]]
 name = "security-framework-sys"
-version = "2.13.0"
+version = "2.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1863fd3768cd83c56a7f60faa4dc0d403f1b6df0a38c3c25f44b7894e45370d5"
+checksum = "49db231d56a190491cb4aeda9527f1ad45345af50b0851622a7adb8c03b01c32"
 dependencies = [
  "core-foundation-sys",
  "libc",
@@ -19470,7 +19496,7 @@ version = "0.25.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4eb30575f3638fc8f6815f448d50cb1a2e255b0897985c8c59f4d37b72a07b06"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "cssparser",
  "derive_more 0.99.18",
  "fxhash",
@@ -19494,9 +19520,9 @@ dependencies = [
 
 [[package]]
 name = "serde"
-version = "1.0.216"
+version = "1.0.217"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b9781016e935a97e8beecf0c933758c97a5520d32930e460142b4cd80c6338e"
+checksum = "02fc4265df13d6fa1d00ecff087228cc0a2b5f3c0e87e258d8b94a156e984c70"
 dependencies = [
  "serde_derive",
 ]
@@ -19554,13 +19580,13 @@ dependencies = [
 
 [[package]]
 name = "serde_derive"
-version = "1.0.216"
+version = "1.0.217"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "46f859dbbf73865c6627ed570e78961cd3ac92407a2d117204c49232485da55e"
+checksum = "5a9bf7cf98d04a2b28aead066b7496853d4779c9cc183c440dbac457641e19a0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -19571,14 +19597,14 @@ checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
 name = "serde_json"
-version = "1.0.133"
+version = "1.0.135"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7fceb2473b9166b2294ef05efcb65a3db80803f0b03ef86a5fc88a2b85ee377"
+checksum = "2b0d7ba2887406110130a978386c4e1befb98c674b4fba677954e4db976630d9"
 dependencies = [
  "itoa",
  "memchr",
@@ -19627,7 +19653,7 @@ checksum = "6c64451ba24fc7a6a2d60fc75dd9c83c90903b19028d4eff35e88fc1e86564e9"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -19650,7 +19676,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "serde",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -19712,7 +19738,7 @@ dependencies = [
  "darling 0.20.10",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -19742,7 +19768,7 @@ name = "setupos-disable-checks"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "indoc",
  "linux_kernel_command_line",
  "partition_tools",
@@ -19756,7 +19782,7 @@ name = "setupos-inject-configuration"
 version = "0.1.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config",
  "partition_tools",
  "serde",
@@ -19772,7 +19798,7 @@ name = "setupos_tool"
 version = "1.0.0"
 dependencies = [
  "anyhow",
- "clap 4.5.23",
+ "clap 4.5.26",
  "config",
  "config_types",
  "deterministic_ips",
@@ -19894,13 +19920,13 @@ checksum = "1de1d4f81173b03af4c0cbed3c898f6bff5b870e4a7f5d6f4057d62a7a4b686e"
 
 [[package]]
 name = "simple_asn1"
-version = "0.6.2"
+version = "0.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "adc4e5204eb1910f40f9cfa375f6f05b68c3abac4b6fd879c8ff5e7ae8a0a085"
+checksum = "297f631f50729c8c99b84667867963997ec0b50f32b2a7dbcab828ef0541e8bb"
 dependencies = [
  "num-bigint 0.4.6",
  "num-traits",
- "thiserror 1.0.69",
+ "thiserror 2.0.11",
  "time",
 ]
 
@@ -19930,6 +19956,12 @@ version = "0.3.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "38b58827f4464d87d377d175e90bf58eb00fd8716ff0a62f80356b5e61555d0d"
 
+[[package]]
+name = "siphasher"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56199f7ddabf13fe5074ce809e7d3f42b42ae711800501b5b16ea82ad029c39d"
+
 [[package]]
 name = "slab"
 version = "0.4.9"
@@ -20059,7 +20091,7 @@ dependencies = [
  "heck 0.5.0",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20087,7 +20119,7 @@ dependencies = [
  "ic-system-test-driver",
  "ic-types",
  "ic-universal-canister",
- "ic-utils 0.39.0",
+ "ic-utils 0.39.2",
  "ic_consensus_system_test_utils",
  "icp-ledger",
  "icrc-ledger-agent",
@@ -20145,7 +20177,7 @@ dependencies = [
  "ic-registry-subnet-type",
  "ic-system-test-driver",
  "ic-types",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "slog",
 ]
 
@@ -20325,7 +20357,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "structmeta-derive 0.2.0",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20337,7 +20369,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "structmeta-derive 0.3.0",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20348,7 +20380,7 @@ checksum = "a60bcaff7397072dca0017d1db428e30d5002e00b6847703e2e42005c95fbe00"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20359,7 +20391,7 @@ checksum = "152a0b65a590ff6c3da95cabe2353ee04e6167c896b28e3b14478c2636c922fc"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20381,7 +20413,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "rustversion",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20409,9 +20441,9 @@ checksum = "734676eb262c623cec13c3155096e08d1f8f29adce39ba17948b18dad1e54142"
 
 [[package]]
 name = "symbolic-common"
-version = "12.12.4"
+version = "12.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd33e73f154e36ec223c18013f7064a2c120f1162fc086ac9933542def186b00"
+checksum = "8150eae9699e3c73a3e6431dc1f80d87748797c0457336af23e94c1de619ed24"
 dependencies = [
  "debugid",
  "memmap2",
@@ -20421,9 +20453,9 @@ dependencies = [
 
 [[package]]
 name = "symbolic-demangle"
-version = "12.12.4"
+version = "12.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "89e51191290147f071777e37fe111800bb82a9059f9c95b19d2dd41bfeddf477"
+checksum = "95f4a9846f7a8933b6d198c022faa2c9bd89e1a970bed9d9a98d25708bf8de17"
 dependencies = [
  "rustc-demangle",
  "symbolic-common",
@@ -20442,9 +20474,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "2.0.90"
+version = "2.0.96"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "919d3b74a5dd0ccd15aeb8f93e7006bd9e14c295087c9896a110f490752bcf31"
+checksum = "d5d0adab1ae378d7f53bdebc67a39f1f151407ef230f0ce2883572f5d8985c80"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -20496,7 +20528,7 @@ checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20527,11 +20559,11 @@ dependencies = [
  "anyhow",
  "async-trait",
  "axum",
- "clap 4.5.23",
+ "clap 4.5.26",
  "http 1.2.0",
  "itertools 0.12.1",
- "reqwest 0.12.9",
- "thiserror 2.0.8",
+ "reqwest 0.12.12",
+ "thiserror 2.0.11",
  "tokio",
  "url",
 ]
@@ -20636,12 +20668,13 @@ dependencies = [
 
 [[package]]
 name = "tempfile"
-version = "3.14.0"
+version = "3.15.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "28cce251fcbc87fac86a866eeb0d6c2d536fc16d06f184bb61aeae11aa4cee0c"
+checksum = "9a8a559c81686f576e8cd0290cd2a24a2a9ad80c98b3478856500fcbd7acd704"
 dependencies = [
  "cfg-if 1.0.0",
  "fastrand",
+ "getrandom",
  "once_cell",
  "rustix",
  "windows-sys 0.59.0",
@@ -20712,7 +20745,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "structmeta 0.2.0",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20724,7 +20757,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "structmeta 0.3.0",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20764,7 +20797,7 @@ dependencies = [
  "ic_consensus_system_test_utils",
  "nns_dapp",
  "os_qualification_utils",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "serde",
  "serde_json",
  "slog",
@@ -20799,11 +20832,11 @@ dependencies = [
 
 [[package]]
 name = "thiserror"
-version = "2.0.8"
+version = "2.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08f5383f3e0071702bf93ab5ee99b52d26936be9dedd9413067cbdcddcb6141a"
+checksum = "d452f284b73e6d76dd36758a0c8684b1d5be31f92b89d07fd5822175732206fc"
 dependencies = [
- "thiserror-impl 2.0.8",
+ "thiserror-impl 2.0.11",
 ]
 
 [[package]]
@@ -20814,18 +20847,18 @@ checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
 name = "thiserror-impl"
-version = "2.0.8"
+version = "2.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f357fcec90b3caef6623a099691be676d033b40a058ac95d2a6ade6fa0c943"
+checksum = "26afc1baea8a989337eeb52b6e72a039780ce45c3edfcc9c5b9d112feeb173c2"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -20948,9 +20981,9 @@ dependencies = [
 
 [[package]]
 name = "tinyvec"
-version = "1.8.0"
+version = "1.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "445e881f4f6d382d5f27c034e25eb92edd7c784ceab92a0937db7f2e9471b938"
+checksum = "022db8904dfa342efe721985167e9fcd16c29b226db4397ed752a761cfce81e8"
 dependencies = [
  "tinyvec_macros",
 ]
@@ -21001,14 +21034,14 @@ checksum = "8d9ef545650e79f30233c0003bcc2504d7efac6dad25fca40744de773fe2049c"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
 name = "tokio"
-version = "1.42.0"
+version = "1.43.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5cec9b21b0450273377fc97bd4c33a8acffc8c996c987a7c5b319a0083707551"
+checksum = "3d61fa4ffa3de412bfea335c6ecff681de2b609ba3c77ef3e00e521813a9ed9e"
 dependencies = [
  "backtrace",
  "bytes",
@@ -21034,13 +21067,13 @@ dependencies = [
 
 [[package]]
 name = "tokio-macros"
-version = "2.4.0"
+version = "2.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "693d596312e88961bc67d7f1f97af8a70227d9f90c31bba5806eec004978d752"
+checksum = "6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -21082,7 +21115,7 @@ version = "0.26.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5f6d0975eaace0cf0fcadee4e4aaa5da15b5c079146f2cffb67c113be122bf37"
 dependencies = [
- "rustls 0.23.20",
+ "rustls 0.23.21",
  "tokio",
 ]
 
@@ -21225,7 +21258,7 @@ dependencies = [
  "prost-build 0.13.4",
  "prost-types 0.13.4",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -21275,7 +21308,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1e9cd434a998747dd2c4276bc96ee2e0c7a2eadf3cae88e52be55a05fa9053f5"
 dependencies = [
  "base64 0.21.7",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "bytes",
  "http 1.2.0",
  "http-body 1.0.1",
@@ -21294,7 +21327,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "403fa3b783d4b626a8ad51d766ab03cb6d2dbfc46b1c5d4448395e6628dc9697"
 dependencies = [
  "async-compression",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "bytes",
  "futures-core",
  "http 1.2.0",
@@ -21396,7 +21429,7 @@ checksum = "395ae124c09f9e6918a2310af6038fba074bcf474ac352496d5910dd59a2226d"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -21536,12 +21569,6 @@ dependencies = [
  "serde_json",
 ]
 
-[[package]]
-name = "triomphe"
-version = "0.1.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "859eb650cfee7434994602c3a68b25d77ad9e68c8a6cd491616ef86661382eb3"
-
 [[package]]
 name = "trust-dns-proto"
 version = "0.22.0"
@@ -21664,11 +21691,10 @@ dependencies = [
 
 [[package]]
 name = "ulid"
-version = "1.1.3"
+version = "1.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04f903f293d11f31c0c29e4148f6dc0d033a7f80cebc0282bea147611667d289"
+checksum = "f294bff79170ed1c5633812aff1e565c35d993a36e757f9bc0accf5eec4e6045"
 dependencies = [
- "getrandom",
  "rand 0.8.5",
  "web-time",
 ]
@@ -21681,9 +21707,9 @@ checksum = "eaea85b334db583fe3274d12b4cd1880032beab409c0d774be044d4480ab9a94"
 
 [[package]]
 name = "unicase"
-version = "2.8.0"
+version = "2.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e51b68083f157f853b6379db119d1c1be0e6e4dec98101079dec41f6f5cf6df"
+checksum = "75b844d17643ee918803943289730bec8aac480150456169e647ed0b576ba539"
 
 [[package]]
 name = "unicode-bidi"
@@ -21835,9 +21861,9 @@ dependencies = [
 
 [[package]]
 name = "uuid"
-version = "1.11.0"
+version = "1.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8c5f0a0af699448548ad1a2fbf920fb4bee257eae39953ba95cb84891a0446a"
+checksum = "744018581f9a3454a9e15beb8a33b017183f1e7c0cd170232a2d1453b23a51c4"
 dependencies = [
  "getrandom",
  "serde",
@@ -21845,9 +21871,9 @@ dependencies = [
 
 [[package]]
 name = "valuable"
-version = "0.1.0"
+version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "830b7e5d4d90034032940e4ace0d9a9a057e7a45cd94e6c007832e39edb82f6d"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
 
 [[package]]
 name = "vcpkg"
@@ -21894,7 +21920,7 @@ dependencies = [
 name = "vsock_guest"
 version = "1.0.0"
 dependencies = [
- "clap 4.5.23",
+ "clap 4.5.26",
  "vsock_lib",
 ]
 
@@ -21911,7 +21937,7 @@ version = "1.0.0"
 dependencies = [
  "anyhow",
  "regex",
- "reqwest 0.12.9",
+ "reqwest 0.12.12",
  "rusb",
  "serde",
  "serde_json",
@@ -22023,34 +22049,35 @@ checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
 
 [[package]]
 name = "wasm-bindgen"
-version = "0.2.99"
+version = "0.2.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a474f6281d1d70c17ae7aa6a613c87fce69a127e2624002df63dcb39d6cf6396"
+checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5"
 dependencies = [
  "cfg-if 1.0.0",
  "once_cell",
+ "rustversion",
  "wasm-bindgen-macro",
 ]
 
 [[package]]
 name = "wasm-bindgen-backend"
-version = "0.2.99"
+version = "0.2.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f89bb38646b4f81674e8f5c3fb81b562be1fd936d84320f3264486418519c79"
+checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6"
 dependencies = [
  "bumpalo",
  "log",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
  "wasm-bindgen-shared",
 ]
 
 [[package]]
 name = "wasm-bindgen-futures"
-version = "0.4.49"
+version = "0.4.50"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38176d9b44ea84e9184eff0bc34cc167ed044f816accfe5922e54d84cf48eca2"
+checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61"
 dependencies = [
  "cfg-if 1.0.0",
  "js-sys",
@@ -22061,9 +22088,9 @@ dependencies = [
 
 [[package]]
 name = "wasm-bindgen-macro"
-version = "0.2.99"
+version = "0.2.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2cc6181fd9a7492eef6fef1f33961e3695e4579b9872a6f7c83aee556666d4fe"
+checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407"
 dependencies = [
  "quote",
  "wasm-bindgen-macro-support",
@@ -22071,22 +22098,25 @@ dependencies = [
 
 [[package]]
 name = "wasm-bindgen-macro-support"
-version = "0.2.99"
+version = "0.2.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "30d7a95b763d3c45903ed6c81f156801839e5ee968bb07e534c44df0fcd330c2"
+checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
  "wasm-bindgen-backend",
  "wasm-bindgen-shared",
 ]
 
 [[package]]
 name = "wasm-bindgen-shared"
-version = "0.2.99"
+version = "0.2.100"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "943aab3fdaaa029a6e0271b35ea10b72b943135afe9bffca82384098ad0e06a6"
+checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d"
+dependencies = [
+ "unicode-ident",
+]
 
 [[package]]
 name = "wasm-encoder"
@@ -22119,12 +22149,12 @@ dependencies = [
 
 [[package]]
 name = "wasm-encoder"
-version = "0.222.0"
+version = "0.223.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3432682105d7e994565ef928ccf5856cf6af4ba3dddebedb737f61caed70f956"
+checksum = "7e636076193fa68103e937ac951b5f2f587624097017d764b8984d9c0f149464"
 dependencies = [
  "leb128",
- "wasmparser 0.222.0",
+ "wasmparser 0.223.0",
 ]
 
 [[package]]
@@ -22147,7 +22177,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8d28bc49ba1e5c5b61ffa7a2eace10820443c4b7d1c0b144109261d14570fdf8"
 dependencies = [
  "ahash 0.8.11",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "hashbrown 0.14.5",
  "indexmap 2.7.0",
  "semver",
@@ -22161,7 +22191,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ca917a21307d3adf2b9857b94dd05ebf8496bdcff4437a9b9fb3899d3e6c74e7"
 dependencies = [
  "ahash 0.8.11",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "hashbrown 0.14.5",
  "indexmap 2.7.0",
  "semver",
@@ -22174,7 +22204,7 @@ version = "0.221.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9845c470a2e10b61dd42c385839cdd6496363ed63b5c9e420b5488b77bd22083"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "hashbrown 0.15.2",
  "indexmap 2.7.0",
  "semver",
@@ -22183,11 +22213,11 @@ dependencies = [
 
 [[package]]
 name = "wasmparser"
-version = "0.222.0"
+version = "0.223.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4adf50fde1b1a49c1add6a80d47aea500c88db70551805853aa8b88f3ea27ab5"
+checksum = "d5a99faceb1a5a84dd6084ec4bfa4b2ab153b5793b43fd8f58b89232634afc35"
 dependencies = [
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "indexmap 2.7.0",
  "semver",
 ]
@@ -22216,12 +22246,12 @@ dependencies = [
 
 [[package]]
 name = "wasmtime"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f639ecae347b9a2227e453a7b7671e84370a0b61f47a15e0390fe9b7725e47b3"
+checksum = "edd30973c65eceb0f37dfcc430d83abd5eb24015fdfcab6912f52949287e04f0"
 dependencies = [
  "anyhow",
- "bitflags 2.6.0",
+ "bitflags 2.8.0",
  "bumpalo",
  "cc",
  "cfg-if 1.0.0",
@@ -22260,23 +22290,23 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-asm-macros"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "882a18800471cfc063c8b3ccf75723784acc3fd534009ac09421f2fac2fcdcec"
+checksum = "c6c21dd30d1f3f93ee390ac1a7ec304ecdbfdab6390e1add41a1f52727b0992b"
 dependencies = [
  "cfg-if 1.0.0",
 ]
 
 [[package]]
 name = "wasmtime-component-macro"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eb5c0a77c9e1927c3d471f53cc13767c3d3438e5d5ffd394e3eb31c86445fd60"
+checksum = "9f948a6ef3119d52c9f12936970de28ddf3f9bea04bc65571f4a92d2e5ab38f4"
 dependencies = [
  "anyhow",
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
  "wasmtime-component-util",
  "wasmtime-wit-bindgen",
  "wit-parser",
@@ -22284,15 +22314,15 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-component-util"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43702ca98bf5162eca0573db691ed9ecd36d716f8c6688410fe26ec16b6f9bcb"
+checksum = "b9275aa01ceaaa2fa6c0ecaa5267518d80b9d6e9ae7c7ea42f4c6e073e6a69ef"
 
 [[package]]
 name = "wasmtime-cranelift"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20070aa5b75080a8932ec328419faf841df2bc6ceb16b55b0df2b952098392a2"
+checksum = "0701a44a323267aae4499672dae422b266cee3135a23b640972ec8c0e10a44a2"
 dependencies = [
  "anyhow",
  "cfg-if 1.0.0",
@@ -22315,9 +22345,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-environ"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2604ddb24879d4dc1dedcb7081d7a8e017259bce916fdae097a97db52cbaab80"
+checksum = "264c968c1b81d340355ece2be0bc31a10f567ccb6ce08512c3b7d10e26f3cbe5"
 dependencies = [
  "anyhow",
  "cranelift-bitset",
@@ -22338,9 +22368,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-fiber"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "98593412d2b167ebe2b59d4a17a184978a72f976b53b3a0ec05629451079ac1d"
+checksum = "78505221fd5bd7b07b4e1fa2804edea49dc231e626ad6861adc8f531812973e6"
 dependencies = [
  "anyhow",
  "cc",
@@ -22353,9 +22383,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-jit-icache-coherence"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d40d7722b9e1fbeae135715710a8a2570b1e6cf72b74dd653962d89831c6c70d"
+checksum = "9bedb677ca1b549d98f95e9e1f9251b460090d99a2c196a0614228c064bf2e59"
 dependencies = [
  "anyhow",
  "cfg-if 1.0.0",
@@ -22365,26 +22395,26 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-slab"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8579c335220b4ece9aa490a0e8b46de78cd342b195ab21ff981d095e14b52383"
+checksum = "564905638c132c275d365c1fa074f0b499790568f43148d29de84ccecfb5cb31"
 
 [[package]]
 name = "wasmtime-versioned-export-macros"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7de0a56fb0a69b185968f2d7a9ba54750920a806470dff7ad8de91ac06d277e"
+checksum = "1e91092e6cf77390eeccee273846a9327f3e8f91c3c6280f60f37809f0e62d29"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
 name = "wasmtime-winch"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "abd309943c443f5590d12f9aba9ba63c481091c955a0a14de0c2a9e0e3aaeca9"
+checksum = "b111d909dc604c741bd8ac2f4af373eaa5c68c34b5717271bcb687688212cef8"
 dependencies = [
  "anyhow",
  "cranelift-codegen",
@@ -22399,9 +22429,9 @@ dependencies = [
 
 [[package]]
 name = "wasmtime-wit-bindgen"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "969f83022dac3435d6469edb582ceed04cfe32aa44dc3ef16e5cb55574633df8"
+checksum = "5f38f7a5eb2f06f53fe943e7fb8bf4197f7cf279f1bc52c0ce56e9d3ffd750a4"
 dependencies = [
  "anyhow",
  "heck 0.5.0",
@@ -22424,31 +22454,31 @@ dependencies = [
 
 [[package]]
 name = "wast"
-version = "222.0.0"
+version = "223.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ce7191f4b7da0dd300cc32476abae6457154e4625d9b1bc26890828a9a26f6e"
+checksum = "d59b2ba8a2ff9f06194b7be9524f92e45e70149f4dacc0d0c7ad92b59ac875e4"
 dependencies = [
  "bumpalo",
  "leb128",
  "memchr",
  "unicode-width 0.2.0",
- "wasm-encoder 0.222.0",
+ "wasm-encoder 0.223.0",
 ]
 
 [[package]]
 name = "wat"
-version = "1.222.0"
+version = "1.223.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fde61b4b52f9a84ae31b5e8902a2cd3162ea45d8bf564c729c3288fe52f4334"
+checksum = "662786915c427e4918ff01eabb3c4756d4d947cd8f635761526b4cc9da2eaaad"
 dependencies = [
- "wast 222.0.0",
+ "wast 223.0.0",
 ]
 
 [[package]]
 name = "web-sys"
-version = "0.3.76"
+version = "0.3.77"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04dd7223427d52553d3702c004d3b2fe07c148165faa56313cb00211e31c12bc"
+checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2"
 dependencies = [
  "js-sys",
  "wasm-bindgen",
@@ -22569,9 +22599,9 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "winch-codegen"
-version = "28.0.0"
+version = "28.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9110decc2983ed94de904804dcd979ba59cbabc78a94fec6b1d8468ec513d0f6"
+checksum = "6232f40a795be2ce10fc761ed3b403825126a60d12491ac556ea104a932fd18a"
 dependencies = [
  "anyhow",
  "cranelift-codegen",
@@ -22584,6 +22614,16 @@ dependencies = [
  "wasmtime-environ",
 ]
 
+[[package]]
+name = "windows"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
+dependencies = [
+ "windows-core 0.58.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-core"
 version = "0.52.0"
@@ -22593,6 +22633,41 @@ dependencies = [
  "windows-targets 0.52.6",
 ]
 
+[[package]]
+name = "windows-core"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-result",
+ "windows-strings",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.96",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.96",
+]
+
 [[package]]
 name = "windows-registry"
 version = "0.2.0"
@@ -22773,9 +22848,9 @@ checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
 [[package]]
 name = "winnow"
-version = "0.6.20"
+version = "0.6.24"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "36c1fec1a2bb5866f07c25f68c26e565c4c200aebb96d7e55710c19d3e8ac49b"
+checksum = "c8d71a593cc5c42ad7876e2c1fda56f314f3754c084128833e64f1345ff8a03a"
 dependencies = [
  "memchr",
 ]
@@ -22891,9 +22966,9 @@ dependencies = [
 
 [[package]]
 name = "xattr"
-version = "1.3.1"
+version = "1.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8da84f1a25939b27f6820d92aed108f83ff920fdf11a7b19366c27c4cda81d4f"
+checksum = "e105d177a3871454f754b33bb0ee637ecaaac997446375fd3e5d43a2ed00c909"
 dependencies = [
  "libc",
  "linux-raw-sys",
@@ -22990,7 +23065,7 @@ checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
  "synstructure",
 ]
 
@@ -23012,7 +23087,7 @@ checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -23032,7 +23107,7 @@ checksum = "595eed982f7d355beb85837f651fa22e90b3c044842dc7f2c2842c086f295808"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
  "synstructure",
 ]
 
@@ -23053,7 +23128,7 @@ checksum = "ce36e65b0d2999d2aafac989fb249189a141aee1f53c612c1f37d72631959f69"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
@@ -23075,7 +23150,7 @@ checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.90",
+ "syn 2.0.96",
 ]
 
 [[package]]
diff --git a/WORKSPACE.bazel b/WORKSPACE.bazel
index 10c29ef4de2..cb85b845545 100644
--- a/WORKSPACE.bazel
+++ b/WORKSPACE.bazel
@@ -96,8 +96,8 @@ sol_register_toolchains(
 
 http_archive(
     name = "rules_rust",
-    sha256 = "af4f56caae50a99a68bfce39b141b509dd68548c8204b98ab7a1cafc94d5bb02",
-    urls = ["https://github.com/bazelbuild/rules_rust/releases/download/0.54.1/rules_rust-v0.54.1.tar.gz"],
+    integrity = "sha256-8TBqrAsli3kN8BrZq8arsN8LZUFsdLTvJ/Sqsph4CmQ=",
+    urls = ["https://github.com/bazelbuild/rules_rust/releases/download/0.56.0/rules_rust-0.56.0.tar.gz"],
 )
 
 load("@rules_rust//rust:repositories.bzl", "rules_rust_dependencies", "rust_register_toolchains")
@@ -112,12 +112,12 @@ rust_register_toolchains(
     # The nightly version is required to compile fuzz tests from Bazel.
     # The version below is chosen so that it is in sync with the non-nightly version.
     versions = [
-        "1.82.0",
+        "1.84.0",
         # Use the nightly version from the day before the branch.
         # -
         # NB! Due to a regression in the compiler https://github.com/rust-lang/rust/issues/128895, that's
         # only back-ported to stable, we use a more recent version.
-        "nightly/2024-09-23",
+        "nightly/2024-11-21",
     ],
 )
 
diff --git a/bazel/canisters.bzl b/bazel/canisters.bzl
index 8985effd90d..2308dc7147e 100644
--- a/bazel/canisters.bzl
+++ b/bazel/canisters.bzl
@@ -25,6 +25,13 @@ def _wasm_rust_transition_impl(_settings, attr):
             "-C",
             "lto",
             "-C",
+            # If combined with -C lto, -C embed-bitcode=no will cause rustc to abort at start-up,
+            # because the combination is invalid.
+            # See: https://doc.rust-lang.org/rustc/codegen-options/index.html#embed-bitcode
+            #
+            # embed-bitcode is disabled by default by rules_rust.
+            "embed-bitcode=yes",
+            "-C",
             "target-feature=+bulk-memory",
         ],
     }
diff --git a/ci/container/TAG b/ci/container/TAG
index 1b88ba01cf3..510327d7002 100644
--- a/ci/container/TAG
+++ b/ci/container/TAG
@@ -1 +1 @@
-7beeb6e69346fd10ff4421688aec841d072ac4f8c4c80d3b089d64aa280c0894
+b3869ba20c4e9ba2915be302f5b5a4b23da0545af2f1cb896441055372950389
diff --git a/packages/ic-ethereum-types/src/serde_data/mod.rs b/packages/ic-ethereum-types/src/serde_data/mod.rs
index 59902e43923..50b13ef7977 100644
--- a/packages/ic-ethereum-types/src/serde_data/mod.rs
+++ b/packages/ic-ethereum-types/src/serde_data/mod.rs
@@ -30,7 +30,7 @@ where
 {
     struct HexStrVisitor<T>(PhantomData<T>);
 
-    impl<'de, T> Visitor<'de> for HexStrVisitor<T>
+    impl<T> Visitor<'_> for HexStrVisitor<T>
     where
         T: FromHex,
         <T as FromHex>::Error: fmt::Display,
diff --git a/packages/ic-ledger-hash-of/src/lib.rs b/packages/ic-ledger-hash-of/src/lib.rs
index 584a9830fad..03716b1577d 100644
--- a/packages/ic-ledger-hash-of/src/lib.rs
+++ b/packages/ic-ledger-hash-of/src/lib.rs
@@ -93,7 +93,7 @@ impl<'de, T> Deserialize<'de> for HashOf<T> {
             phantom: PhantomData<T>,
         }
 
-        impl<'de, T> Visitor<'de> for HashOfVisitor<T> {
+        impl<T> Visitor<'_> for HashOfVisitor<T> {
             type Value = HashOf<T>;
 
             fn expecting(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
diff --git a/packages/ic-sha3/BUILD.bazel b/packages/ic-sha3/BUILD.bazel
index 65f411d555a..641d0acc48d 100644
--- a/packages/ic-sha3/BUILD.bazel
+++ b/packages/ic-sha3/BUILD.bazel
@@ -28,7 +28,7 @@ rust_test_suite(
     srcs = glob(
         ["tests/*.rs"],
     ),
-    data = [
+    compile_data = [
         "test_resources/SHAKE256ShortMsg_subset.rsp",
         "test_resources/SHAKE256VariableOut_subset.rsp",
     ],
diff --git a/packages/pocket-ic/src/lib.rs b/packages/pocket-ic/src/lib.rs
index d33ef0cdc1e..947e057e3aa 100644
--- a/packages/pocket-ic/src/lib.rs
+++ b/packages/pocket-ic/src/lib.rs
@@ -1685,6 +1685,9 @@ To download the binary, please visit https://github.com/dfinity/pocketic."
             cmd.stderr(std::process::Stdio::null());
         }
     }
+
+    // TODO: SDK-1936
+    #[allow(clippy::zombie_processes)]
     cmd.spawn()
         .unwrap_or_else(|_| panic!("Failed to start PocketIC binary ({:?})", bin_path));
 
diff --git a/publish/canisters/BUILD.bazel b/publish/canisters/BUILD.bazel
index 1955eff350f..d2c64d9e258 100644
--- a/publish/canisters/BUILD.bazel
+++ b/publish/canisters/BUILD.bazel
@@ -78,8 +78,8 @@ CANISTERS_MAX_SIZE_COMPRESSED_E5_BYTES = {
     # The orchestrator needs to embed 3 wasms at compile time
     # (ICRC1 index, ICRC1 ledger, and ICRC1 archive) and size is
     # therefore strictly controlled.
-    # Size when constraint addded: 1_655_752 bytes
-    "ic-ledger-suite-orchestrator-canister.wasm.gz": "17",
+    # Size when constraint addded: 1_704_979 bytes
+    "ic-ledger-suite-orchestrator-canister.wasm.gz": "18",
 
     # -- BN team --
     # Size when constraint addded: 540_349 bytes
diff --git a/rs/artifact_pool/src/consensus_pool_cache.rs b/rs/artifact_pool/src/consensus_pool_cache.rs
index 5b5ef9462b3..5de2a1d307d 100644
--- a/rs/artifact_pool/src/consensus_pool_cache.rs
+++ b/rs/artifact_pool/src/consensus_pool_cache.rs
@@ -120,7 +120,7 @@ impl<'a> CachedChainIterator<'a> {
     }
 }
 
-impl<'a> Iterator for CachedChainIterator<'a> {
+impl Iterator for CachedChainIterator<'_> {
     type Item = Block;
 
     fn next(&mut self) -> Option<Self::Item> {
diff --git a/rs/artifact_pool/src/lmdb_iterator.rs b/rs/artifact_pool/src/lmdb_iterator.rs
index 59437b6c1b8..36924fc0fec 100644
--- a/rs/artifact_pool/src/lmdb_iterator.rs
+++ b/rs/artifact_pool/src/lmdb_iterator.rs
@@ -43,7 +43,7 @@ pub(crate) struct LMDBIterator<'a, F> {
     db_env: Arc<Environment>,
 }
 
-impl<'a, F> LMDBIterator<'a, F> {
+impl<F> LMDBIterator<'_, F> {
     /// Return a new iterator that will iterator through DB objects between
     /// min_key and max_key (inclusive) that are deserialized using the
     /// given deserialize function.
@@ -71,7 +71,7 @@ impl<'a, F> LMDBIterator<'a, F> {
     }
 }
 
-impl<'a, T, F: Fn(&RoTransaction<'_>, &[u8]) -> lmdb::Result<T>> Iterator for LMDBIterator<'a, F> {
+impl<T, F: Fn(&RoTransaction<'_>, &[u8]) -> lmdb::Result<T>> Iterator for LMDBIterator<'_, F> {
     type Item = T;
 
     fn next(&mut self) -> Option<Self::Item> {
@@ -106,7 +106,7 @@ pub(crate) struct LMDBIDkgIterator<'a, F> {
     _db_env: Arc<Environment>,
 }
 
-impl<'a, F> LMDBIDkgIterator<'a, F> {
+impl<F> LMDBIDkgIterator<'_, F> {
     pub fn new(
         db_env: Arc<Environment>,
         db: Database,
@@ -136,7 +136,7 @@ impl<'a, F> LMDBIDkgIterator<'a, F> {
     }
 }
 
-impl<'a, K, T, F: Fn(&[u8], &[u8]) -> Option<(K, T)>> Iterator for LMDBIDkgIterator<'a, F> {
+impl<K, T, F: Fn(&[u8], &[u8]) -> Option<(K, T)>> Iterator for LMDBIDkgIterator<'_, F> {
     type Item = (K, T);
 
     fn next(&mut self) -> Option<Self::Item> {
diff --git a/rs/artifact_pool/src/rocksdb_iterator.rs b/rs/artifact_pool/src/rocksdb_iterator.rs
index b61483cb1d0..55936a2e0ec 100644
--- a/rs/artifact_pool/src/rocksdb_iterator.rs
+++ b/rs/artifact_pool/src/rocksdb_iterator.rs
@@ -68,7 +68,7 @@ enum Status {
     Stopped,
 }
 
-impl<'a, F> StandaloneIterator<'a, F> {
+impl<F> StandaloneIterator<'_, F> {
     /// Create an iterator for the given column family 'name' of the given 'db'
     /// starting from 'start_key'
     pub fn new(
diff --git a/rs/artifact_pool/src/rocksdb_pool.rs b/rs/artifact_pool/src/rocksdb_pool.rs
index ab35775a2f0..0c89925857b 100755
--- a/rs/artifact_pool/src/rocksdb_pool.rs
+++ b/rs/artifact_pool/src/rocksdb_pool.rs
@@ -568,7 +568,7 @@ fn deserialize_consensus_artifact(
 
 impl PoolSection<ValidatedConsensusArtifact> for PersistentHeightIndexedPool<ConsensusMessage> {
     fn contains(&self, msg_id: &ConsensusMessageId) -> bool {
-        self.lookup_key(msg_id).map_or(false, |key| {
+        self.lookup_key(msg_id).is_some_and(|key| {
             let info = info_for_msg_id(msg_id);
             let cf_handle = check_not_none_uw!(self.db.cf_handle(info.name));
             check_ok_uw!(self.db.get_pinned_cf(cf_handle, &key)).is_some()
diff --git a/rs/backup/BUILD.bazel b/rs/backup/BUILD.bazel
index a792b7b5e34..32709db022a 100644
--- a/rs/backup/BUILD.bazel
+++ b/rs/backup/BUILD.bazel
@@ -61,7 +61,7 @@ rust_binary(
 
 rust_test(
     name = "backup_test",
+    compile_data = ["test_data/fake_input_config.json.template"],
     crate = ":backup",
-    data = ["test_data/fake_input_config.json.template"],
     deps = DEPENDENCIES + DEV_DEPENDENCIES,
 )
diff --git a/rs/bitcoin/adapter/BUILD.bazel b/rs/bitcoin/adapter/BUILD.bazel
index 2050fc86d39..bf093511e2d 100644
--- a/rs/bitcoin/adapter/BUILD.bazel
+++ b/rs/bitcoin/adapter/BUILD.bazel
@@ -89,11 +89,11 @@ rust_binary(
 
 rust_test(
     name = "adapter_test",
-    crate = ":adapter",
-    data = [
+    compile_data = [
         "test_data/first_2500_mainnet_headers.json",
         "test_data/first_2500_testnet_headers.json",
     ],
+    crate = ":adapter",
     tags = ["requires-network"],
     deps = DEV_DEPENDENCIES,
 )
diff --git a/rs/bitcoin/adapter/src/lib.rs b/rs/bitcoin/adapter/src/lib.rs
index ffec373df3f..61329ee5136 100644
--- a/rs/bitcoin/adapter/src/lib.rs
+++ b/rs/bitcoin/adapter/src/lib.rs
@@ -1,4 +1,4 @@
-#![warn(missing_docs)]
+#![cfg_attr(not(test), warn(missing_docs))]
 
 //! The Bitcoin adapter interacts with the Bitcoin P2P network to obtain blocks
 //! and publish transactions. Moreover, it interacts with the Bitcoin system
diff --git a/rs/boundary_node/canary_proxy/src/support/auto_server.rs b/rs/boundary_node/canary_proxy/src/support/auto_server.rs
index 0dd0d4079a7..cd5ce9926fe 100644
--- a/rs/boundary_node/canary_proxy/src/support/auto_server.rs
+++ b/rs/boundary_node/canary_proxy/src/support/auto_server.rs
@@ -123,7 +123,7 @@ enum Version {
     H1,
     H2,
 }
-async fn read_version<'a, A>(mut reader: A) -> IoResult<(Version, Rewind<A>)>
+async fn read_version<A>(mut reader: A) -> IoResult<(Version, Rewind<A>)>
 where
     A: AsyncRead + Unpin,
 {
@@ -171,7 +171,7 @@ where
         if this.buf.filled() == H2_PREFACE {
             *this.version = Version::H2;
         }
-        return Poll::Ready(Ok((*this.version, this.buf.filled().to_vec())));
+        Poll::Ready(Ok((*this.version, this.buf.filled().to_vec())))
     }
 }
 
diff --git a/rs/boundary_node/ic_boundary/src/cache.rs b/rs/boundary_node/ic_boundary/src/cache.rs
index 11f046cf4cc..5920874df4d 100644
--- a/rs/boundary_node/ic_boundary/src/cache.rs
+++ b/rs/boundary_node/ic_boundary/src/cache.rs
@@ -100,7 +100,7 @@ fn weigh_entry(k: &Arc<RequestContext>, v: &CacheItem) -> u32 {
         + 58; // 2 x Principal
 
     for (k, v) in v.headers.iter() {
-        cost += k.as_str().as_bytes().len();
+        cost += k.as_str().len();
         cost += v.as_bytes().len();
     }
 
diff --git a/rs/boundary_node/rate_limits/api/src/schema_versions/v1.rs b/rs/boundary_node/rate_limits/api/src/schema_versions/v1.rs
index 7067518a60f..42644593858 100644
--- a/rs/boundary_node/rate_limits/api/src/schema_versions/v1.rs
+++ b/rs/boundary_node/rate_limits/api/src/schema_versions/v1.rs
@@ -28,7 +28,7 @@ pub enum RequestType {
 
 /// Implement serde parser for Action
 struct ActionVisitor;
-impl<'de> de::Visitor<'de> for ActionVisitor {
+impl de::Visitor<'_> for ActionVisitor {
     type Value = Action;
 
     fn expecting(&self, formatter: &mut fmt::Formatter) -> fmt::Result {
diff --git a/rs/canister_sandbox/src/rpc.rs b/rs/canister_sandbox/src/rpc.rs
index 8cdef287c94..4dc06be5d51 100644
--- a/rs/canister_sandbox/src/rpc.rs
+++ b/rs/canister_sandbox/src/rpc.rs
@@ -5,7 +5,6 @@ use std::task::{Context, Poll};
 
 /// Pieces for a very simple bidirectional RPC using an underlying
 /// duplex stream channel.
-
 /// Describe RPC error -- can be either related to transport (i.e.
 /// failure to transport or parse a message) or to server (i.e. server
 /// responded, but gave us a message indicating an error).
@@ -276,7 +275,6 @@ impl<Message> MessageSink<Message> for ReplyManager<Message> {
 
 /// An RPC result that is immediately "ready" (i.e. pass a value to
 /// a caller such that it does not need to wait).
-
 pub struct ReadyResult<Value> {
     value: Mutex<RPCResult<Value>>,
 }
diff --git a/rs/canister_sandbox/src/transport.rs b/rs/canister_sandbox/src/transport.rs
index 57975178cf6..9e6f9a4e9ba 100644
--- a/rs/canister_sandbox/src/transport.rs
+++ b/rs/canister_sandbox/src/transport.rs
@@ -471,7 +471,7 @@ pub fn socket_read_messages<
                     // updating the socket timeout.
                     loop {
                         if let Some(bytes) = reader.receive_message(&mut buf, &mut fds, 0, None) {
-                            break (bytes);
+                            break bytes;
                         }
                     }
                 }
diff --git a/rs/canonical_state/src/encoding/tests/compatibility.rs b/rs/canonical_state/src/encoding/tests/compatibility.rs
index dd46b757209..c451d085f61 100644
--- a/rs/canonical_state/src/encoding/tests/compatibility.rs
+++ b/rs/canonical_state/src/encoding/tests/compatibility.rs
@@ -333,7 +333,6 @@ fn canonical_encoding_stream_header_v19_plus() {
 ///       00                  # unsigned(0)
 ///    03                     # field_index(SubnetMetrics::update_transactions_total)
 ///    19 1068                # unsigned(4200)
-
 /// ```
 /// Used http://cbor.me/ for printing the human friendly output.
 #[test]
diff --git a/rs/canonical_state/src/subtree_visitor.rs b/rs/canonical_state/src/subtree_visitor.rs
index a9ebbd7a574..8c9d92c8312 100644
--- a/rs/canonical_state/src/subtree_visitor.rs
+++ b/rs/canonical_state/src/subtree_visitor.rs
@@ -91,7 +91,7 @@ impl<'a, V> SubtreeVisitor<'a, V> {
     }
 }
 
-impl<'a, V> Visitor for SubtreeVisitor<'a, V>
+impl<V> Visitor for SubtreeVisitor<'_, V>
 where
     V: Visitor,
 {
diff --git a/rs/canonical_state/tree_hash/src/lazy_tree.rs b/rs/canonical_state/tree_hash/src/lazy_tree.rs
index 64f6c8d8a4f..fd76d0a3cdc 100644
--- a/rs/canonical_state/tree_hash/src/lazy_tree.rs
+++ b/rs/canonical_state/tree_hash/src/lazy_tree.rs
@@ -25,7 +25,7 @@ pub enum Lazy<'a, T> {
     Func(ArcFn<'a, T>),
 }
 
-impl<'a, T: Clone> Lazy<'a, T> {
+impl<T: Clone> Lazy<'_, T> {
     pub fn force(&self) -> T {
         match self {
             Self::Value(v) => v.clone(),
diff --git a/rs/config/src/config_sample.rs b/rs/config/src/config_sample.rs
index 46069274b59..147248c05c6 100644
--- a/rs/config/src/config_sample.rs
+++ b/rs/config/src/config_sample.rs
@@ -60,7 +60,6 @@
 /// # EXAMPLE: y: "bad"
 /// y: "good"
 /// ```
-
 pub const SAMPLE_CONFIG: &str = r#"
 {
     // ============================================
diff --git a/rs/consensus/src/consensus/malicious_consensus.rs b/rs/consensus/src/consensus/malicious_consensus.rs
index 5a9e5be9300..71e80f00c64 100644
--- a/rs/consensus/src/consensus/malicious_consensus.rs
+++ b/rs/consensus/src/consensus/malicious_consensus.rs
@@ -234,7 +234,6 @@ fn maliciously_notarize_all(notary: &Notary, pool: &PoolReader<'_>) -> Vec<Notar
 
 /// Generate finalization shares for each notarized block in the validated
 /// pool.
-
 fn maliciously_finalize_all(
     finalizer: &Finalizer,
     pool: &PoolReader<'_>,
diff --git a/rs/consensus/src/idkg/pre_signer.rs b/rs/consensus/src/idkg/pre_signer.rs
index 71e910638c4..bbf5bd39f08 100644
--- a/rs/consensus/src/idkg/pre_signer.rs
+++ b/rs/consensus/src/idkg/pre_signer.rs
@@ -1210,7 +1210,7 @@ impl<'a> IDkgTranscriptBuilderImpl<'a> {
     }
 }
 
-impl<'a> IDkgTranscriptBuilder for IDkgTranscriptBuilderImpl<'a> {
+impl IDkgTranscriptBuilder for IDkgTranscriptBuilderImpl<'_> {
     fn get_completed_transcript(&self, transcript_id: IDkgTranscriptId) -> Option<IDkgTranscript> {
         timed_call(
             "get_completed_transcript",
@@ -1278,7 +1278,7 @@ impl<'a> Action<'a> {
 }
 
 /// Needed as IDKGTranscriptParams doesn't implement Debug
-impl<'a> Debug for Action<'a> {
+impl Debug for Action<'_> {
     fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
         match &self {
             Self::Process(transcript_params) => {
diff --git a/rs/consensus/src/idkg/signer.rs b/rs/consensus/src/idkg/signer.rs
index dce0600d594..1b9aa8ff7d4 100644
--- a/rs/consensus/src/idkg/signer.rs
+++ b/rs/consensus/src/idkg/signer.rs
@@ -726,7 +726,7 @@ impl<'a> ThresholdSignatureBuilderImpl<'a> {
     }
 }
 
-impl<'a> ThresholdSignatureBuilder for ThresholdSignatureBuilderImpl<'a> {
+impl ThresholdSignatureBuilder for ThresholdSignatureBuilderImpl<'_> {
     fn get_completed_signature(
         &self,
         callback_id: CallbackId,
@@ -832,7 +832,7 @@ impl<'a> Action<'a> {
     }
 }
 
-impl<'a> Debug for Action<'a> {
+impl Debug for Action<'_> {
     fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
         match &self {
             Self::Process(sig_inputs) => {
diff --git a/rs/consensus/src/lib.rs b/rs/consensus/src/lib.rs
index 4f0a9ecdc66..471a29d69e8 100755
--- a/rs/consensus/src/lib.rs
+++ b/rs/consensus/src/lib.rs
@@ -1,4 +1,4 @@
-#![deny(missing_docs)]
+#![cfg_attr(not(test), deny(missing_docs))]
 //! The consensus crate provides implementations of the consensus algorithm of
 //! the internet computer block chain, a component responsible for executing
 //! distributed key generation using said block chain to hold the state of the
diff --git a/rs/consensus/utils/src/lib.rs b/rs/consensus/utils/src/lib.rs
index 99a079b1b8b..32ff4260341 100644
--- a/rs/consensus/utils/src/lib.rs
+++ b/rs/consensus/utils/src/lib.rs
@@ -87,7 +87,7 @@ pub fn find_lowest_ranked_non_disqualified_proposals(
         .filter(|proposal| !disqualified.contains(&proposal.signature.signer))
     {
         let best_rank = best_proposals.first().map(HasRank::rank);
-        if !best_rank.is_some_and(|rank| rank <= proposal.rank()) {
+        if best_rank.is_none_or(|rank| rank > proposal.rank()) {
             best_proposals = vec![proposal];
         } else if Some(proposal.rank()) == best_rank {
             best_proposals.push(proposal);
diff --git a/rs/consensus/utils/src/pool_reader.rs b/rs/consensus/utils/src/pool_reader.rs
index ebdf2bf8e5d..2e015943a82 100644
--- a/rs/consensus/utils/src/pool_reader.rs
+++ b/rs/consensus/utils/src/pool_reader.rs
@@ -64,7 +64,7 @@ impl<'a> PoolReader<'a> {
     /// Get the range of ancestor blocks of `block` specified (inclusively) by
     /// `min` and `max`. This assumes the correctness of the state of the pool.
     pub fn get_range(
-        &'a self,
+        &self,
         block: Block,
         min: Height,
         max: Height,
diff --git a/rs/crypto/internal/crypto_lib/bls12_381/type/src/lib.rs b/rs/crypto/internal/crypto_lib/bls12_381/type/src/lib.rs
index 71d7f707f29..b25fe1ba06e 100644
--- a/rs/crypto/internal/crypto_lib/bls12_381/type/src/lib.rs
+++ b/rs/crypto/internal/crypto_lib/bls12_381/type/src/lib.rs
@@ -852,7 +852,7 @@ macro_rules! define_affine_and_projective_types {
                 const WINDOW_MASK: u8 = (1 << Self::WINDOW_BITS) - 1;
 
                 // The total number of windows in a scalar
-                const WINDOWS : usize = (Self::SUBGROUP_BITS + Self::WINDOW_BITS - 1) / Self::WINDOW_BITS;
+                const WINDOWS: usize = Self::SUBGROUP_BITS.div_ceil(Self::WINDOW_BITS);
 
                 // We must select from 2^WINDOW_BITS elements in each table
                 // group. However one element of the table group is always the
@@ -2337,7 +2337,7 @@ struct WindowInfo<const WINDOW_SIZE: usize> {}
 
 impl<const WINDOW_SIZE: usize> WindowInfo<WINDOW_SIZE> {
     const SIZE: usize = WINDOW_SIZE;
-    const WINDOWS: usize = (Scalar::BYTES * 8 + Self::SIZE - 1) / Self::SIZE;
+    const WINDOWS: usize = (Scalar::BYTES * 8).div_ceil(Self::SIZE);
 
     const MASK: u8 = 0xFFu8 >> (8 - Self::SIZE);
     const ELEMENTS: usize = (1 << Self::SIZE) as usize;
diff --git a/rs/crypto/internal/crypto_lib/hmac/src/lib.rs b/rs/crypto/internal/crypto_lib/hmac/src/lib.rs
index 4b3d4baee18..22434146dee 100644
--- a/rs/crypto/internal/crypto_lib/hmac/src/lib.rs
+++ b/rs/crypto/internal/crypto_lib/hmac/src/lib.rs
@@ -181,7 +181,7 @@ pub fn hkdf<H: HmacHashFunction>(
 
     // Step 2. HKDF-Expand(PRK, info, L) -> OKM
 
-    let blocks = (output_len + H::OUTPUT_LENGTH - 1) / H::OUTPUT_LENGTH;
+    let blocks = output_len.div_ceil(H::OUTPUT_LENGTH);
 
     let mut prev_t: Option<Vec<u8>> = None;
 
diff --git a/rs/crypto/internal/crypto_lib/seed/src/xmd.rs b/rs/crypto/internal/crypto_lib/seed/src/xmd.rs
index be9e275b12f..d497a576a8e 100644
--- a/rs/crypto/internal/crypto_lib/seed/src/xmd.rs
+++ b/rs/crypto/internal/crypto_lib/seed/src/xmd.rs
@@ -78,7 +78,7 @@ pub fn xmd<H: XmdHashFunction>(msg: &[u8], dst: &[u8], len: usize) -> XmdResult<
 
     // len ≤ 255*H::OUTPUT_BYTES ⭢ ell ≤ 255
     // thus values ≤ ell can be safely cast to u8
-    let ell = (len + H::OUTPUT_BYTES - 1) / H::OUTPUT_BYTES;
+    let ell = len.div_ceil(H::OUTPUT_BYTES);
 
     let mut out = vec![0u8; len];
 
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/chunking.rs b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/chunking.rs
index 469d17827db..460aa92ce3a 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/chunking.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/chunking.rs
@@ -23,7 +23,7 @@ pub const CHUNK_MAX: Chunk = CHUNK_MIN + (CHUNK_SIZE as Chunk) - 1;
 pub(crate) const MESSAGE_BYTES: usize = Scalar::BYTES;
 
 /// NUM_CHUNKS is simply the number of chunks needed to hold a message
-pub const NUM_CHUNKS: usize = (MESSAGE_BYTES + CHUNK_BYTES - 1) / CHUNK_BYTES;
+pub const NUM_CHUNKS: usize = MESSAGE_BYTES.div_ceil(CHUNK_BYTES);
 
 #[derive(Clone, Debug, Zeroize, ZeroizeOnDrop)]
 pub struct PlaintextChunks {
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/dlog_recovery.rs b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/dlog_recovery.rs
index 91340142309..d337ced36f1 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/dlog_recovery.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/dlog_recovery.rs
@@ -274,7 +274,7 @@ impl BabyStepGiantStep {
             BabyStepGiantStepTable::compute_table_size(range, max_mbytes, max_table_mul);
 
         let giant_steps = if range > 0 && table_size > 0 {
-            (range + table_size - 1) / table_size
+            range.div_ceil(table_size)
         } else {
             0
         };
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/nizk_chunking.rs b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/nizk_chunking.rs
index 16651c18bea..771fe54318a 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/nizk_chunking.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/src/ni_dkg/fs_ni_dkg/nizk_chunking.rs
@@ -24,7 +24,7 @@ const SECURITY_LEVEL: usize = 256;
 pub const NUM_ZK_REPETITIONS: usize = 32;
 
 /// Defined as ceil(SECURITY_LEVEL/NUM_ZK_REPETITIONS)
-pub const CHALLENGE_BITS: usize = (SECURITY_LEVEL + NUM_ZK_REPETITIONS - 1) / NUM_ZK_REPETITIONS;
+pub const CHALLENGE_BITS: usize = SECURITY_LEVEL.div_ceil(NUM_ZK_REPETITIONS);
 
 // The number of bytes needed to represent a challenge (which must fit in a usize)
 pub const CHALLENGE_BYTES: usize = (CHALLENGE_BITS + 7) / 8;
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/tests/integration_tests.rs b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/tests/integration_tests.rs
index f400c9f5abc..ef5f87832da 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/tests/integration_tests.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/bls12_381/tests/integration_tests.rs
@@ -190,7 +190,7 @@ fn encrypted_chunks_should_validate(epoch: Epoch) {
         /// Context: Most of this code converts the data used for the fs
         /// encryption to the form needed by the zk crypto. Suggestion:
         /// Put the conversion code in the library.
-
+        ///
         /// Combine a big endian array of group elements (first chunk is the
         /// most significant) into a single group element.
         fn g1_from_big_endian_chunks(terms: &[G1Affine]) -> G1Affine {
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/fe-derive/src/lib.rs b/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/fe-derive/src/lib.rs
index 07e39b01501..89aa33d1360 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/fe-derive/src/lib.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/fe-derive/src/lib.rs
@@ -24,7 +24,7 @@ struct FieldElementConfig {
 impl FieldElementConfig {
     fn new(ident: syn::Ident, modulus: BigUint, mut params: BTreeMap<String, BigUint>) -> Self {
         let limb_size = 64; // bits of u64
-        let limbs = (modulus.bits() + limb_size - 1) / limb_size;
+        let limbs = modulus.bits().div_ceil(limb_size);
 
         let m64 = BigUint::one() << limb_size;
 
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group.rs b/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group.rs
index cf18fc7960a..1aa0ed4ecfa 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group.rs
@@ -1317,7 +1317,7 @@ impl<const WINDOW_SIZE: usize> WindowInfo<WINDOW_SIZE> {
     /// Returns the number of windows if scalar_bits bits are used
     #[inline(always)]
     pub(crate) const fn number_of_windows_for_bits(scalar_bits: usize) -> usize {
-        (scalar_bits + WINDOW_SIZE - 1) / WINDOW_SIZE
+        scalar_bits.div_ceil(WINDOW_SIZE)
     }
 
     /// Extract a window from a serialized scalar value
@@ -1336,7 +1336,7 @@ impl<const WINDOW_SIZE: usize> WindowInfo<WINDOW_SIZE> {
         const BITS_IN_BYTE: usize = 8;
 
         let scalar_bytes = scalar.len();
-        let windows = (scalar_bytes * 8 + WINDOW_SIZE - 1) / WINDOW_SIZE;
+        let windows = (scalar_bytes * 8).div_ceil(WINDOW_SIZE);
 
         // to compute the correct bit offset for bit lengths that are not a power of 2,
         // we need to start from the inverted value or otherwise we will have multiple options
diff --git a/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group/algos.rs b/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group/algos.rs
index 350647e9ee9..cb455812138 100644
--- a/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group/algos.rs
+++ b/rs/crypto/internal/crypto_lib/threshold_sig/canister_threshold_sig/src/utils/group/algos.rs
@@ -124,7 +124,7 @@ macro_rules! declare_mul2_table_impl {
 
             // The number of windows (of WINDOW_BITS size) required to examine every
             // bit of a scalar of this curve.
-            const WINDOWS: usize = (<$scalar>::BITS + Self::WINDOW_BITS - 1) / Self::WINDOW_BITS;
+            const WINDOWS: usize = <$scalar>::BITS.div_ceil(Self::WINDOW_BITS);
 
             pub fn for_standard_generators() -> Self {
                 let g = <$projective>::generator();
diff --git a/rs/crypto/internal/crypto_lib/types/src/encrypt/forward_secure.rs b/rs/crypto/internal/crypto_lib/types/src/encrypt/forward_secure.rs
index 88926195935..c43704911d9 100644
--- a/rs/crypto/internal/crypto_lib/types/src/encrypt/forward_secure.rs
+++ b/rs/crypto/internal/crypto_lib/types/src/encrypt/forward_secure.rs
@@ -171,7 +171,7 @@ pub mod groth20_bls12_381 {
     }
 
     pub const CHUNK_BYTES: usize = 2;
-    pub const NUM_CHUNKS: usize = (FrBytes::SIZE + CHUNK_BYTES - 1) / CHUNK_BYTES;
+    pub const NUM_CHUNKS: usize = FrBytes::SIZE.div_ceil(CHUNK_BYTES);
 
     // Note: the spec currently has: Vec<(r,s,z)>; this could be represented more
     // strongly as [(G1,G1,G2);NUM_CHUNKS], which is equivalent to the below.
diff --git a/rs/crypto/internal/crypto_service_provider/src/vault/api.rs b/rs/crypto/internal/crypto_service_provider/src/vault/api.rs
index 3b82edf4386..93727e5bc21 100644
--- a/rs/crypto/internal/crypto_service_provider/src/vault/api.rs
+++ b/rs/crypto/internal/crypto_service_provider/src/vault/api.rs
@@ -187,31 +187,31 @@ impl NodeKeysErrors {
     }
 
     pub fn keys_in_registry_missing_locally(&self) -> bool {
-        self.node_signing_key_error.as_ref().map_or(false, |err| {
+        self.node_signing_key_error.as_ref().is_some_and(|err| {
             err.external_public_key_error.is_none()
                 && err.contains_local_public_or_secret_key_error()
         }) || self
             .committee_signing_key_error
             .as_ref()
-            .map_or(false, |err| {
+            .is_some_and(|err| {
                 err.external_public_key_error.is_none()
                     && err.contains_local_public_or_secret_key_error()
             })
-            || self.tls_certificate_error.as_ref().map_or(false, |err| {
+            || self.tls_certificate_error.as_ref().is_some_and(|err| {
                 err.external_public_key_error.is_none()
                     && err.contains_local_public_or_secret_key_error()
             })
             || self
                 .dkg_dealing_encryption_key_error
                 .as_ref()
-                .map_or(false, |err| {
+                .is_some_and(|err| {
                     err.external_public_key_error.is_none()
                         && err.contains_local_public_or_secret_key_error()
                 })
             || self
                 .idkg_dealing_encryption_key_error
                 .as_ref()
-                .map_or(false, |err| {
+                .is_some_and(|err| {
                     err.external_public_key_error.is_none()
                         && err.contains_local_public_or_secret_key_error()
                 })
diff --git a/rs/crypto/internal/crypto_service_provider/src/vault/local_csp_vault/mod.rs b/rs/crypto/internal/crypto_service_provider/src/vault/local_csp_vault/mod.rs
index 4f60844b5db..32a6cc4627d 100644
--- a/rs/crypto/internal/crypto_service_provider/src/vault/local_csp_vault/mod.rs
+++ b/rs/crypto/internal/crypto_service_provider/src/vault/local_csp_vault/mod.rs
@@ -73,7 +73,6 @@ use std::sync::Arc;
 /// only during node key generation and rotation).
 ///
 /// [1]: https://medium.com/digitalfrontiers/rust-dynamic-dispatching-deep-dive-236a5896e49b
-
 pub struct LocalCspVault<
     R: Rng + CryptoRng,
     S: SecretKeyStore,
diff --git a/rs/crypto/secrets_containers/src/secret_array.rs b/rs/crypto/secrets_containers/src/secret_array.rs
index 1a2f84721d7..43f2494b3a7 100644
--- a/rs/crypto/secrets_containers/src/secret_array.rs
+++ b/rs/crypto/secrets_containers/src/secret_array.rs
@@ -56,7 +56,7 @@ impl<const N: usize> serde::Serialize for SecretArray<N> {
 
 struct SecretArrayVisitor<const N: usize>;
 
-impl<'de, const N: usize> serde::de::Visitor<'de> for SecretArrayVisitor<N> {
+impl<const N: usize> serde::de::Visitor<'_> for SecretArrayVisitor<N> {
     type Value = SecretArray<N>;
 
     fn expecting(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
diff --git a/rs/crypto/secrets_containers/src/secret_bytes.rs b/rs/crypto/secrets_containers/src/secret_bytes.rs
index 4baed52781f..954f5588e93 100644
--- a/rs/crypto/secrets_containers/src/secret_bytes.rs
+++ b/rs/crypto/secrets_containers/src/secret_bytes.rs
@@ -49,7 +49,7 @@ impl<'a> serde::Deserialize<'a> for SecretBytes {
     fn deserialize<D: serde::de::Deserializer<'a>>(deserializer: D) -> Result<Self, D::Error> {
         struct Visitor;
 
-        impl<'de> serde::de::Visitor<'de> for Visitor {
+        impl serde::de::Visitor<'_> for Visitor {
             type Value = SecretBytes;
 
             fn expecting(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
diff --git a/rs/crypto/test_utils/canister_threshold_sigs/src/lib.rs b/rs/crypto/test_utils/canister_threshold_sigs/src/lib.rs
index 1a6fc5f8000..385db085960 100644
--- a/rs/crypto/test_utils/canister_threshold_sigs/src/lib.rs
+++ b/rs/crypto/test_utils/canister_threshold_sigs/src/lib.rs
@@ -821,7 +821,7 @@ pub mod node {
         pub fn filter_by_receivers<'a, T: AsRef<IDkgReceivers> + 'a>(
             &'a self,
             idkg_receivers: T,
-        ) -> impl Iterator<Item = &Node> + 'a {
+        ) -> impl Iterator<Item = &'a Node> + 'a {
             self.iter()
                 .filter(move |node| idkg_receivers.as_ref().contains(node.id))
         }
@@ -829,7 +829,7 @@ pub mod node {
         pub fn filter_by_dealers<'a, T: AsRef<IDkgDealers> + 'a>(
             &'a self,
             idkg_dealers: T,
-        ) -> impl Iterator<Item = &Node> + 'a {
+        ) -> impl Iterator<Item = &'a Node> + 'a {
             self.iter()
                 .filter(move |node| idkg_dealers.as_ref().contains(node.id))
         }
@@ -838,7 +838,7 @@ pub mod node {
             &'a self,
             minimum_size: usize,
             rng: &'a mut R,
-        ) -> impl Iterator<Item = &Node> + 'a {
+        ) -> impl Iterator<Item = &'a Node> + 'a {
             assert!(
                 minimum_size <= self.len(),
                 "Requested a random subset with at least {} elements but there are only {} elements",
@@ -853,7 +853,7 @@ pub mod node {
             &'a self,
             size: usize,
             rng: &'a mut R,
-        ) -> impl Iterator<Item = &Node> + 'a {
+        ) -> impl Iterator<Item = &'a Node> + 'a {
             assert!(
                 size <= self.len(),
                 "Requested a random subset with {} elements but there are only {} elements",
@@ -867,7 +867,7 @@ pub mod node {
             &'a self,
             idkg_receivers: T,
             rng: &mut R,
-        ) -> &Node {
+        ) -> &'a Node {
             self.filter_by_receivers(idkg_receivers)
                 .choose(rng)
                 .expect("empty receivers")
@@ -878,7 +878,7 @@ pub mod node {
             exclusion: &Node,
             idkg_receivers: T,
             rng: &mut R,
-        ) -> &Node {
+        ) -> &'a Node {
             self.filter_by_receivers(idkg_receivers)
                 .filter(|node| *node != exclusion)
                 .choose(rng)
@@ -889,7 +889,7 @@ pub mod node {
             &'a self,
             params: &'a IDkgTranscriptParams,
             rng: &mut R,
-        ) -> &Node {
+        ) -> &'a Node {
             self.filter_by_dealers(params)
                 .choose(rng)
                 .expect("empty dealers")
diff --git a/rs/crypto/test_utils/tls/src/test_client.rs b/rs/crypto/test_utils/tls/src/test_client.rs
index 281ab26616a..755458f0a4f 100644
--- a/rs/crypto/test_utils/tls/src/test_client.rs
+++ b/rs/crypto/test_utils/tls/src/test_client.rs
@@ -119,7 +119,7 @@ impl Client {
             let msg_for_server_with_eol = format!("{}\n", msg_for_server);
             #[allow(clippy::disallowed_methods)]
             let num_bytes_written = wr.write(msg_for_server_with_eol.as_bytes()).await.unwrap();
-            assert_eq!(num_bytes_written, msg_for_server_with_eol.as_bytes().len());
+            assert_eq!(num_bytes_written, msg_for_server_with_eol.len());
 
             const ACK: u8 = 0x06;
             let reply = rd.read_u8().await.unwrap();
diff --git a/rs/crypto/test_utils/tls/src/test_server.rs b/rs/crypto/test_utils/tls/src/test_server.rs
index 6e3ec7c98a3..1d730712b90 100644
--- a/rs/crypto/test_utils/tls/src/test_server.rs
+++ b/rs/crypto/test_utils/tls/src/test_server.rs
@@ -180,7 +180,7 @@ impl Server {
             let msg_with_eol = format!("{}\n", msg_for_client);
             #[allow(clippy::disallowed_methods)]
             let num_bytes_written = wr.write(msg_with_eol.as_bytes()).await.unwrap();
-            assert_eq!(num_bytes_written, msg_with_eol.as_bytes().len());
+            assert_eq!(num_bytes_written, msg_with_eol.len());
 
             const ACK: u8 = 0x06;
             let reply = rd.read_u8().await.unwrap();
diff --git a/rs/crypto/tree_hash/src/lib.rs b/rs/crypto/tree_hash/src/lib.rs
index e1753aeaf55..65ed25aee22 100644
--- a/rs/crypto/tree_hash/src/lib.rs
+++ b/rs/crypto/tree_hash/src/lib.rs
@@ -491,7 +491,7 @@ impl MixedHashTree {
             Collect(&'a MixedHashTree),
         }
 
-        impl<'a> StackItem<'a> {
+        impl StackItem<'_> {
             fn to_collect(&self) -> Self {
                 match self {
                     Self::Expand(t) => Self::Collect(t),
diff --git a/rs/embedders/src/wasm_utils.rs b/rs/embedders/src/wasm_utils.rs
index 771a5d328f3..8615e831e4c 100644
--- a/rs/embedders/src/wasm_utils.rs
+++ b/rs/embedders/src/wasm_utils.rs
@@ -243,9 +243,7 @@ fn compile_inner(
 
     let is_wasm64 = module
         .get_export(crate::wasmtime_embedder::WASM_HEAP_MEMORY_NAME)
-        .map_or(false, |export| {
-            export.memory().map_or(false, |mem| mem.is_64())
-        });
+        .is_some_and(|export| export.memory().is_some_and(|mem| mem.is_64()));
 
     let serialized_module = SerializedModule::new(
         &module,
diff --git a/rs/embedders/src/wasmtime_embedder/system_api_complexity.rs b/rs/embedders/src/wasmtime_embedder/system_api_complexity.rs
index 4dc8a107589..304520fd6b8 100644
--- a/rs/embedders/src/wasmtime_embedder/system_api_complexity.rs
+++ b/rs/embedders/src/wasmtime_embedder/system_api_complexity.rs
@@ -1,7 +1,6 @@
 ///
 /// System API Calls Complexity Module
 ///
-
 /// The Fixed System API Overhead (in Instructions)
 ///
 /// The cost of the System API calls is proportional to the work the call performs.
diff --git a/rs/execution_environment/benches/lib/src/wat_builder.rs b/rs/execution_environment/benches/lib/src/wat_builder.rs
index fcbdb0f6b20..d75e95fd512 100644
--- a/rs/execution_environment/benches/lib/src/wat_builder.rs
+++ b/rs/execution_environment/benches/lib/src/wat_builder.rs
@@ -1,6 +1,4 @@
-///
-/// The new WAT builder.
-//
+// The new WAT builder.
 
 /// Default number of loop iterations.
 pub const DEFAULT_LOOP_ITERATIONS: usize = 1_000;
@@ -23,7 +21,6 @@ use crate::common::Wasm64;
 
 ////////////////////////////////////////////////////////////////////////
 /// WAT Block Builder
-
 /// Represent a block of WAT code with corresponding imports and local variables.
 #[derive(Default)]
 pub struct Block {
@@ -161,7 +158,6 @@ impl Block {
 
 ////////////////////////////////////////////////////////////////////////
 /// WAT Function Builder
-
 /// Represent a WAT function with corresponding imports.
 #[derive(Default)]
 pub struct Func {
@@ -188,7 +184,6 @@ impl Func {
 
 ////////////////////////////////////////////////////////////////////////
 /// Helper functions
-
 /// Return a new block prepended and appended with the specified lines.
 fn wrap_lines(prefix: &str, lines: Vec<String>, suffix: &str) -> Vec<String> {
     vec![prefix.into()]
diff --git a/rs/execution_environment/src/canister_manager.rs b/rs/execution_environment/src/canister_manager.rs
index 14877845010..6dd8409b862 100644
--- a/rs/execution_environment/src/canister_manager.rs
+++ b/rs/execution_environment/src/canister_manager.rs
@@ -912,7 +912,7 @@ impl CanisterManager {
                 return false;
             }
         };
-        module.memories.first().map_or(false, |m| m.memory64)
+        module.memories.first().is_some_and(|m| m.memory64)
     }
 
     /// Installs code to a canister.
@@ -2190,9 +2190,7 @@ impl CanisterManager {
             .certified_data
             .clone_from(snapshot.certified_data());
 
-        let is_wasm64_execution = new_execution_state
-            .as_ref()
-            .map_or(false, |es| es.is_wasm64);
+        let is_wasm64_execution = new_execution_state.as_ref().is_some_and(|es| es.is_wasm64);
 
         let mut new_canister =
             CanisterState::new(system_state, new_execution_state, scheduler_state);
diff --git a/rs/execution_environment/src/execution/replicated_query.rs b/rs/execution_environment/src/execution/replicated_query.rs
index b3b38b83fe7..a63c115e8d4 100644
--- a/rs/execution_environment/src/execution/replicated_query.rs
+++ b/rs/execution_environment/src/execution/replicated_query.rs
@@ -48,7 +48,7 @@ pub fn execute_replicated_query(
     let is_wasm64_execution = canister
         .execution_state
         .as_ref()
-        .map_or(false, |es| es.is_wasm64);
+        .is_some_and(|es| es.is_wasm64);
 
     let prepaid_execution_cycles = match round.cycles_account_manager.prepay_execution_cycles(
         &mut canister.system_state,
diff --git a/rs/execution_environment/src/execution/response.rs b/rs/execution_environment/src/execution/response.rs
index 7d41f7ddac1..ca8963046e7 100644
--- a/rs/execution_environment/src/execution/response.rs
+++ b/rs/execution_environment/src/execution/response.rs
@@ -101,7 +101,6 @@ const RESERVED_CLEANUP_INSTRUCTIONS_IN_PERCENT: u64 = 5;
 ///   ▼
 /// [end]
 ///```
-
 /// Contains fields of `ResponseHelper` that are necessary for resuming the
 /// response execution.
 #[derive(Debug)]
@@ -575,7 +574,7 @@ impl ResponseHelper {
             .canister
             .execution_state
             .as_ref()
-            .map_or(false, |es| es.is_wasm64);
+            .is_some_and(|es| es.is_wasm64);
 
         round.cycles_account_manager.refund_unused_execution_cycles(
             &mut self.canister.system_state,
diff --git a/rs/execution_environment/src/execution/update.rs b/rs/execution_environment/src/execution/update.rs
index 6e8b5098d48..702d008229b 100644
--- a/rs/execution_environment/src/execution/update.rs
+++ b/rs/execution_environment/src/execution/update.rs
@@ -63,7 +63,7 @@ pub fn execute_update(
                 let is_wasm64_execution = canister
                     .execution_state
                     .as_ref()
-                    .map_or(false, |es| es.is_wasm64);
+                    .is_some_and(|es| es.is_wasm64);
 
                 let prepaid_execution_cycles = match round
                     .cycles_account_manager
@@ -268,7 +268,7 @@ fn finish_err(
     let is_wasm64_execution = canister
         .execution_state
         .as_ref()
-        .map_or(false, |es| es.is_wasm64);
+        .is_some_and(|es| es.is_wasm64);
 
     let instruction_limit = original.execution_parameters.instruction_limits.message();
     round.cycles_account_manager.refund_unused_execution_cycles(
@@ -537,7 +537,7 @@ impl UpdateHelper {
             .canister
             .execution_state
             .as_ref()
-            .map_or(false, |es| es.is_wasm64);
+            .is_some_and(|es| es.is_wasm64);
 
         round.cycles_account_manager.refund_unused_execution_cycles(
             &mut self.canister.system_state,
diff --git a/rs/execution_environment/src/execution/upgrade.rs b/rs/execution_environment/src/execution/upgrade.rs
index 924fed0cdf0..9bad4929b70 100644
--- a/rs/execution_environment/src/execution/upgrade.rs
+++ b/rs/execution_environment/src/execution/upgrade.rs
@@ -884,7 +884,7 @@ fn determine_main_memory_handling(
     let old_state_uses_orthogonal_persistence = || {
         old_state
             .as_ref()
-            .map_or(false, expects_enhanced_orthogonal_persistence)
+            .is_some_and(expects_enhanced_orthogonal_persistence)
     };
     let new_state_uses_classical_persistence = || {
         new_state_candidate.is_ok()
diff --git a/rs/execution_environment/src/hypervisor.rs b/rs/execution_environment/src/hypervisor.rs
index 4e472eff012..b67705512da 100644
--- a/rs/execution_environment/src/hypervisor.rs
+++ b/rs/execution_environment/src/hypervisor.rs
@@ -535,11 +535,11 @@ impl Hypervisor {
             if let Err(err) = &mut result.wasm_result {
                 let can_view = match &system_state.log_visibility {
                     LogVisibilityV2::Controllers => {
-                        caller.map_or(false, |c| system_state.controllers.contains(&c))
+                        caller.is_some_and(|c| system_state.controllers.contains(&c))
                     }
                     LogVisibilityV2::Public => true,
                     LogVisibilityV2::AllowedViewers(allowed) => {
-                        caller.map_or(false, |c| allowed.get().contains(&c))
+                        caller.is_some_and(|c| allowed.get().contains(&c))
                     }
                 };
                 if !can_view {
diff --git a/rs/execution_environment/src/metrics.rs b/rs/execution_environment/src/metrics.rs
index b3417bd1ebb..9a59bd1ca20 100644
--- a/rs/execution_environment/src/metrics.rs
+++ b/rs/execution_environment/src/metrics.rs
@@ -552,7 +552,7 @@ struct MeasurementScopeCore<'a> {
     record_zeros: bool,
 }
 
-impl<'a> Drop for MeasurementScopeCore<'a> {
+impl Drop for MeasurementScopeCore<'_> {
     fn drop(&mut self) {
         if let Some(outer) = &self.outer {
             outer.add(self.instructions, self.slices, self.messages);
diff --git a/rs/execution_environment/src/scheduler.rs b/rs/execution_environment/src/scheduler.rs
index 2175395e624..1622f7af25e 100644
--- a/rs/execution_environment/src/scheduler.rs
+++ b/rs/execution_environment/src/scheduler.rs
@@ -138,7 +138,6 @@ impl SchedulerRoundLimits {
 
 ////////////////////////////////////////////////////////////////////////
 /// Scheduler Implementation
-
 pub(crate) struct SchedulerImpl {
     config: SchedulerConfig,
     own_subnet_id: SubnetId,
@@ -222,7 +221,7 @@ impl SchedulerImpl {
             state = new_state;
             ongoing_long_install_code |= state
                 .canister_state(canister_id)
-                .map_or(false, |canister| canister.has_paused_install_code());
+                .is_some_and(|canister| canister.has_paused_install_code());
 
             let round_instructions_executed =
                 as_num_instructions(instructions_before - round_limits.instructions);
@@ -1661,7 +1660,7 @@ impl Scheduler for SchedulerImpl {
 
 ////////////////////////////////////////////////////////////////////////
 /// Filtered Canisters
-
+///
 /// This struct represents a collection of canister IDs.
 struct FilteredCanisters {
     /// Active canisters during the execution of the inner round.
@@ -1826,7 +1825,7 @@ fn execute_canisters_on_thread(
                 &mut round_limits,
                 subnet_size,
             );
-            if instructions_used.map_or(false, |instructions| instructions.get() > 0) {
+            if instructions_used.is_some_and(|instructions| instructions.get() > 0) {
                 // We only want to count the canister as executed if it used instructions.
                 executed_canister_ids.insert(new_canister.canister_id());
             }
@@ -2320,7 +2319,7 @@ fn is_next_method_chosen(
         .system_state
         .task_queue
         .front()
-        .map_or(false, |task| task.is_hook())
+        .is_some_and(|task| task.is_hook())
     {
         return true;
     }
diff --git a/rs/execution_environment/tests/hypervisor.rs b/rs/execution_environment/tests/hypervisor.rs
index 7f9f649b104..7458daebcf0 100644
--- a/rs/execution_environment/tests/hypervisor.rs
+++ b/rs/execution_environment/tests/hypervisor.rs
@@ -7586,9 +7586,7 @@ fn declaring_too_many_tables_fails() {
 // produces a reply from `bytes`.
 fn use_wasm_memory_and_reply(bytes: u64) -> Vec<u8> {
     wasm()
-        .stable64_grow(
-            (bytes + WASM_PAGE_SIZE_IN_BYTES as u64 - 1) / WASM_PAGE_SIZE_IN_BYTES as u64,
-        )
+        .stable64_grow(bytes.div_ceil(WASM_PAGE_SIZE_IN_BYTES as u64))
         .stable64_read(0, bytes)
         .blob_length()
         .reply_int()
diff --git a/rs/execution_environment/tests/storage_reservation.rs b/rs/execution_environment/tests/storage_reservation.rs
index d60bbc77211..083d3662360 100644
--- a/rs/execution_environment/tests/storage_reservation.rs
+++ b/rs/execution_environment/tests/storage_reservation.rs
@@ -203,9 +203,12 @@ fn test_storage_reservation_triggered_in_canister_snapshot_without_enough_cycles
             // Match on a substring of the error message. Due to a difference in instructions consumed on
             // Mac vs Linux, we cannot match on the exact number of cycles but we only need to verify it's
             // a non-zero amount.
-            assert!(err
-                .description()
-                .contains("due to insufficient cycles. At least 339_603_"));
+            assert!(
+                err.description()
+                    .contains("due to insufficient cycles. At least 339_559_"),
+                "Error message: {}",
+                err.description()
+            );
         }
     }
 }
diff --git a/rs/http_utils/src/file_downloader.rs b/rs/http_utils/src/file_downloader.rs
index 2470abd93db..2db6d21bc32 100644
--- a/rs/http_utils/src/file_downloader.rs
+++ b/rs/http_utils/src/file_downloader.rs
@@ -513,7 +513,7 @@ mod tests {
         let mut tar = Builder::new(writer);
         let mut header = tar::Header::new_gnu();
         header.set_path("test.txt")?;
-        header.set_size("Hello, world!".as_bytes().len() as u64);
+        header.set_size("Hello, world!".len() as u64);
         header.set_cksum();
         tar.append(&header, "Hello, world!".as_bytes())?;
         tar.finish()?;
diff --git a/rs/ic_os/os_tools/guestos_tool/src/prometheus_metric.rs b/rs/ic_os/os_tools/guestos_tool/src/prometheus_metric.rs
index 2a16d1cdbdb..7d391a64305 100644
--- a/rs/ic_os/os_tools/guestos_tool/src/prometheus_metric.rs
+++ b/rs/ic_os/os_tools/guestos_tool/src/prometheus_metric.rs
@@ -8,7 +8,6 @@ use std::vec::Vec;
 /// Types and utils for writing prometheus metrics to textfile collector
 /// Unused for now:
 /// const DEFAULT_TEXTFILE_COLLECTOR_DIR: &str = "/run/node_exporter/collector_textfile/";
-
 #[allow(dead_code)]
 pub enum MetricType {
     Counter,
diff --git a/rs/ingress_manager/src/ingress_selector.rs b/rs/ingress_manager/src/ingress_selector.rs
index ad0f07f69e5..553bf46bad1 100644
--- a/rs/ingress_manager/src/ingress_selector.rs
+++ b/rs/ingress_manager/src/ingress_selector.rs
@@ -627,7 +627,7 @@ impl<'a, T: IngressSetQuery> IngressSetChain<'a, T> {
     }
 }
 
-impl<'a, T: IngressSetQuery> IngressSetQuery for IngressSetChain<'a, T> {
+impl<T: IngressSetQuery> IngressSetQuery for IngressSetChain<'_, T> {
     fn contains(&self, msg_id: &IngressMessageId) -> bool {
         if self.first.contains(msg_id) {
             true
diff --git a/rs/interfaces/src/consensus_pool.rs b/rs/interfaces/src/consensus_pool.rs
index 88f39d258d8..627a0a1a6f3 100644
--- a/rs/interfaces/src/consensus_pool.rs
+++ b/rs/interfaces/src/consensus_pool.rs
@@ -490,7 +490,7 @@ impl<'a> ChainIterator<'a> {
     }
 }
 
-impl<'a> Iterator for ChainIterator<'a> {
+impl Iterator for ChainIterator<'_> {
     type Item = Block;
 
     fn next(&mut self) -> Option<Self::Item> {
diff --git a/rs/interfaces/src/crypto/sign/canister_threshold_sig.rs b/rs/interfaces/src/crypto/sign/canister_threshold_sig.rs
index 15ef934f308..75bc013893d 100644
--- a/rs/interfaces/src/crypto/sign/canister_threshold_sig.rs
+++ b/rs/interfaces/src/crypto/sign/canister_threshold_sig.rs
@@ -531,7 +531,6 @@ pub trait IDkgProtocol {
 /// The threshold signing protocol is non-interactive, which means that the nodes participating
 /// to the protocol only need to compute a signature share and publish it. Shares can then be
 /// publicly verified by anybody and combined into a single ECDSA signature.
-
 pub trait ThresholdEcdsaSigner {
     /// Create a threshold ECDSA signature share.
     ///
diff --git a/rs/ledger_suite/icp/BUILD.bazel b/rs/ledger_suite/icp/BUILD.bazel
index 999d83e0d54..20ab1447f14 100644
--- a/rs/ledger_suite/icp/BUILD.bazel
+++ b/rs/ledger_suite/icp/BUILD.bazel
@@ -97,9 +97,9 @@ rust_ic_test_suite(
         "tests/tests.rs",
         "tests/upgrade_downgrade.rs",
     ],
+    compile_data = ["ledger_archive.did"],
     data = [
         "ledger.did",
-        "ledger_archive.did",
         ":ledger_proxy.wasm",
         ":test_notified_canister",
         "//rs/ledger_suite/icp/archive:ledger-archive-node-canister-wasm",
diff --git a/rs/ledger_suite/icrc1/ledger/src/lib.rs b/rs/ledger_suite/icrc1/ledger/src/lib.rs
index ee7d2fc00bf..7961f708bea 100644
--- a/rs/ledger_suite/icrc1/ledger/src/lib.rs
+++ b/rs/ledger_suite/icrc1/ledger/src/lib.rs
@@ -947,22 +947,22 @@ impl Ledger {
                     let mut last_block_index_encoded = Vec::with_capacity(MAX_U64_ENCODING_BYTES);
                     leb128::write::unsigned(&mut last_block_index_encoded, last_block_index)
                         .expect("Failed to write LEB128");
-                    return fork(
+                    fork(
                         label(
                             last_block_hash_label,
                             leaf(last_block_hash.as_slice().to_vec()),
                         ),
                         label(last_block_index_label, leaf(last_block_index_encoded)),
-                    );
+                    )
                 }
                 #[cfg(not(feature = "icrc3-compatible-data-certificate"))]
                 {
                     let tip_hash_label = Label::from("tip_hash");
                     let last_block_index_encoded = last_block_index.to_be_bytes().to_vec();
-                    return fork(
+                    fork(
                         label(last_block_index_label, leaf(last_block_index_encoded)),
                         label(tip_hash_label, leaf(last_block_hash.as_slice().to_vec())),
-                    );
+                    )
                 }
             }
             None => empty(),
diff --git a/rs/memory_tracker/src/tests.rs b/rs/memory_tracker/src/tests.rs
index b7b50d65609..25fb64fd9e3 100644
--- a/rs/memory_tracker/src/tests.rs
+++ b/rs/memory_tracker/src/tests.rs
@@ -795,7 +795,14 @@ mod random_ops {
             handler.sa_flags = libc::SA_SIGINFO | libc::SA_NODEFER | libc::SA_ONSTACK;
             handler.sa_sigaction = sigsegv_handler as usize;
             libc::sigemptyset(&mut handler.sa_mask);
-            if libc::sigaction(libc::SIGSEGV, &handler, PREV_SIGSEGV.as_mut_ptr()) != 0 {
+            if libc::sigaction(
+                libc::SIGSEGV,
+                &handler,
+                // TODO: EXC-1841
+                #[allow(static_mut_refs)]
+                PREV_SIGSEGV.as_mut_ptr(),
+            ) != 0
+            {
                 panic!(
                     "unable to install signal handler: {}",
                     io::Error::last_os_error(),
@@ -809,8 +816,13 @@ mod random_ops {
             TRACKER.with(|cell| {
                 let previous = cell.replace(None);
                 unsafe {
-                    if libc::sigaction(libc::SIGSEGV, PREV_SIGSEGV.as_ptr(), std::ptr::null_mut())
-                        != 0
+                    if libc::sigaction(
+                        libc::SIGSEGV,
+                        // TODO: EXC-1841
+                        #[allow(static_mut_refs)]
+                        PREV_SIGSEGV.as_ptr(),
+                        std::ptr::null_mut(),
+                    ) != 0
                     {
                         panic!(
                             "unable to unregister signal handler: {}",
@@ -846,6 +858,8 @@ mod random_ops {
 
             unsafe {
                 if !handled {
+                    // TODO: EXC-1841
+                    #[allow(static_mut_refs)]
                     let previous = *PREV_SIGSEGV.as_ptr();
                     if previous.sa_flags & libc::SA_SIGINFO != 0 {
                         mem::transmute::<
diff --git a/rs/messaging/src/message_routing/tests.rs b/rs/messaging/src/message_routing/tests.rs
index 22e6d08066d..505c066dbb9 100644
--- a/rs/messaging/src/message_routing/tests.rs
+++ b/rs/messaging/src/message_routing/tests.rs
@@ -275,7 +275,7 @@ struct SubnetRecord<'a> {
     max_number_of_canisters: u64,
 }
 
-impl<'a> From<SubnetRecord<'a>> for SubnetRecordProto {
+impl From<SubnetRecord<'_>> for SubnetRecordProto {
     fn from(record: SubnetRecord) -> SubnetRecordProto {
         SubnetRecordBuilder::new()
             .with_membership(record.membership)
diff --git a/rs/messaging/src/routing/demux.rs b/rs/messaging/src/routing/demux.rs
index 5b412ae13af..d270d54972d 100644
--- a/rs/messaging/src/routing/demux.rs
+++ b/rs/messaging/src/routing/demux.rs
@@ -46,7 +46,7 @@ impl<'a> DemuxImpl<'a> {
     }
 }
 
-impl<'a> Demux for DemuxImpl<'a> {
+impl Demux for DemuxImpl<'_> {
     fn process_payload(
         &self,
         state: ReplicatedState,
diff --git a/rs/messaging/tests/queue_tests.rs b/rs/messaging/tests/queue_tests.rs
index a800f92b97f..2107d111210 100644
--- a/rs/messaging/tests/queue_tests.rs
+++ b/rs/messaging/tests/queue_tests.rs
@@ -204,7 +204,7 @@ impl SubnetPairProxy {
         do_until_or_panic(MAX_TICKS, |_| {
             let exit_condition = self
                 .local_output_queue_snapshot()
-                .map_or(false, |q| q.len() >= min_num_messages);
+                .is_some_and(|q| q.len() >= min_num_messages);
             if !exit_condition {
                 self.local_env.tick();
             }
diff --git a/rs/monitoring/metrics/src/histogram_vec_timer.rs b/rs/monitoring/metrics/src/histogram_vec_timer.rs
index b54d6a5affa..23eb54ec4e9 100644
--- a/rs/monitoring/metrics/src/histogram_vec_timer.rs
+++ b/rs/monitoring/metrics/src/histogram_vec_timer.rs
@@ -72,7 +72,7 @@ impl<'a, const LABEL_COUNT: usize> HistogramVecTimer<'a, LABEL_COUNT> {
     }
 }
 
-impl<'a, const LABEL_COUNT: usize> Drop for HistogramVecTimer<'a, LABEL_COUNT> {
+impl<const LABEL_COUNT: usize> Drop for HistogramVecTimer<'_, LABEL_COUNT> {
     fn drop(&mut self) {
         self.hist
             .with_label_values(self.label_values())
diff --git a/rs/nervous_system/common/src/memory_manager_upgrade_storage.rs b/rs/nervous_system/common/src/memory_manager_upgrade_storage.rs
index 2b2af6c8f47..4d4a92df5dd 100644
--- a/rs/nervous_system/common/src/memory_manager_upgrade_storage.rs
+++ b/rs/nervous_system/common/src/memory_manager_upgrade_storage.rs
@@ -190,7 +190,7 @@ impl<'a, M: Memory> SizeAwareWriter<'a, M> {
 }
 
 // Unsafe implementation required by BufMut
-unsafe impl<'a, M: Memory> BufMut for SizeAwareWriter<'a, M> {
+unsafe impl<M: Memory> BufMut for SizeAwareWriter<'_, M> {
     fn remaining_mut(&self) -> usize {
         // This function needs to return the number of bytes that can be written, not just to the
         // internal buffer, but to the underlying memory.
@@ -304,7 +304,7 @@ impl<'a, M: Memory> SizeAwareReader<'a, M> {
     }
 }
 
-impl<'a, M: Memory> Buf for SizeAwareReader<'a, M> {
+impl<M: Memory> Buf for SizeAwareReader<'_, M> {
     fn remaining(&self) -> usize {
         // Our implementation only reads from stable memory up until the size indicated by size bytes
         let total_written_memory = self.memory_used();
diff --git a/rs/nervous_system/integration_tests/tests/sns_release_qualification.rs b/rs/nervous_system/integration_tests/tests/sns_release_qualification.rs
index c6900c233af..5a771b2cd16 100644
--- a/rs/nervous_system/integration_tests/tests/sns_release_qualification.rs
+++ b/rs/nervous_system/integration_tests/tests/sns_release_qualification.rs
@@ -31,7 +31,7 @@ use sns_upgrade_test_utils::test_sns_upgrade;
 /// since there is sometimes a dependency between them, so we test them in both orders.
 ///
 /// Note: FI canisters are considered fully tested elsewhere, and have stable APIs.
-
+///
 /// Deployment tests
 
 #[tokio::test]
diff --git a/rs/nns/governance/canbench/canbench_results.yml b/rs/nns/governance/canbench/canbench_results.yml
index 98282e4d781..34b92de91ce 100644
--- a/rs/nns/governance/canbench/canbench_results.yml
+++ b/rs/nns/governance/canbench/canbench_results.yml
@@ -1,109 +1,109 @@
 benches:
   add_neuron_active_maximum:
     total:
-      instructions: 42559874
+      instructions: 42470580
       heap_increase: 1
       stable_memory_increase: 0
     scopes: {}
   add_neuron_active_typical:
     total:
-      instructions: 2160611
+      instructions: 2156095
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   add_neuron_inactive_maximum:
     total:
-      instructions: 112126649
+      instructions: 111969854
       heap_increase: 1
       stable_memory_increase: 0
     scopes: {}
   add_neuron_inactive_typical:
     total:
-      instructions: 8465215
+      instructions: 8450397
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   cascading_vote_all_heap:
     total:
-      instructions: 35565672
+      instructions: 34764213
       heap_increase: 0
       stable_memory_increase: 128
     scopes: {}
   cascading_vote_heap_neurons_stable_index:
     total:
-      instructions: 61721390
+      instructions: 60897882
       heap_increase: 0
       stable_memory_increase: 128
     scopes: {}
   cascading_vote_stable_everything:
     total:
-      instructions: 188861073
+      instructions: 188426120
       heap_increase: 0
       stable_memory_increase: 128
     scopes: {}
   cascading_vote_stable_neurons_with_heap_index:
     total:
-      instructions: 162571959
+      instructions: 162159055
       heap_increase: 0
       stable_memory_increase: 128
     scopes: {}
   centralized_following_all_stable:
     total:
-      instructions: 78285442
+      instructions: 78085489
       heap_increase: 0
       stable_memory_increase: 128
     scopes: {}
   compute_ballots_for_new_proposal_with_stable_neurons:
     total:
-      instructions: 2197226
+      instructions: 2152483
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   draw_maturity_from_neurons_fund_heap:
     total:
-      instructions: 7549569
+      instructions: 7455504
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   draw_maturity_from_neurons_fund_stable:
     total:
-      instructions: 12303773
+      instructions: 12275909
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   list_active_neurons_fund_neurons_heap:
     total:
-      instructions: 436248
+      instructions: 424238
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   list_active_neurons_fund_neurons_stable:
     total:
-      instructions: 2755320
+      instructions: 2742494
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   list_neurons_heap:
     total:
-      instructions: 4700995
+      instructions: 4717287
       heap_increase: 9
       stable_memory_increase: 0
     scopes: {}
   list_neurons_ready_to_unstake_maturity_heap:
     total:
-      instructions: 158257
+      instructions: 158253
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   list_neurons_ready_to_unstake_maturity_stable:
     total:
-      instructions: 41326673
+      instructions: 41328019
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   list_neurons_stable:
     total:
-      instructions: 113166221
+      instructions: 113419930
       heap_increase: 5
       stable_memory_increase: 0
     scopes: {}
@@ -115,49 +115,49 @@ benches:
     scopes: {}
   list_ready_to_spawn_neuron_ids_stable:
     total:
-      instructions: 41298569
+      instructions: 41299922
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   neuron_data_validation_heap:
     total:
-      instructions: 407871691
+      instructions: 406681837
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   neuron_data_validation_stable:
     total:
-      instructions: 363603468
+      instructions: 362505461
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   neuron_metrics_calculation_heap:
     total:
-      instructions: 1457674
+      instructions: 1471252
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   neuron_metrics_calculation_stable:
     total:
-      instructions: 2982336
+      instructions: 2994858
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   range_neurons_performance:
     total:
-      instructions: 56494134
+      instructions: 56426715
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
   single_vote_all_stable:
     total:
-      instructions: 2802680
+      instructions: 2801395
       heap_increase: 0
       stable_memory_increase: 128
     scopes: {}
   update_recent_ballots_stable_memory:
     total:
-      instructions: 273777
+      instructions: 273152
       heap_increase: 0
       stable_memory_increase: 0
     scopes: {}
diff --git a/rs/nns/governance/src/governance.rs b/rs/nns/governance/src/governance.rs
index a4add42fe8a..52c74392d00 100644
--- a/rs/nns/governance/src/governance.rs
+++ b/rs/nns/governance/src/governance.rs
@@ -1057,7 +1057,7 @@ impl Proposal {
     fn allowed_when_resources_are_low(&self) -> bool {
         self.action
             .as_ref()
-            .map_or(false, |a| a.allowed_when_resources_are_low())
+            .is_some_and(|a| a.allowed_when_resources_are_low())
     }
 
     fn omit_large_fields(self) -> Self {
@@ -1177,7 +1177,7 @@ impl ProposalData {
     pub fn is_manage_neuron(&self) -> bool {
         self.proposal
             .as_ref()
-            .map_or(false, Proposal::is_manage_neuron)
+            .is_some_and(Proposal::is_manage_neuron)
     }
 
     pub fn reward_status(
@@ -5308,6 +5308,8 @@ impl Governance {
     }
 
     fn validate_proposal(&self, proposal: &Proposal) -> Result<Action, GovernanceError> {
+        // TODO: Jira ticket NNS1-3555
+        #[allow(non_local_definitions)]
         impl From<String> for GovernanceError {
             fn from(message: String) -> Self {
                 Self::new_with_message(ErrorType::InvalidProposal, message)
diff --git a/rs/nns/governance/src/known_neuron_index.rs b/rs/nns/governance/src/known_neuron_index.rs
index bc22e08b3d1..15c52982e92 100644
--- a/rs/nns/governance/src/known_neuron_index.rs
+++ b/rs/nns/governance/src/known_neuron_index.rs
@@ -8,7 +8,6 @@ use ic_stable_structures::{Memory, StableBTreeMap, Storable};
 /// Note that the index only cares about the uniqueness of the names, not the ids -
 /// the caller should make sure the name-id is removed from the index when a neuron
 /// is removed or its name is changed.
-
 pub struct KnownNeuronIndex<M: Memory> {
     known_neuron_name_to_id: StableBTreeMap<KnownNeuronName, NeuronId, M>,
 }
diff --git a/rs/nns/integration_tests/test_canisters/governance_mem_test_canister.rs b/rs/nns/integration_tests/test_canisters/governance_mem_test_canister.rs
index e5563e66753..f2029ba9131 100644
--- a/rs/nns/integration_tests/test_canisters/governance_mem_test_canister.rs
+++ b/rs/nns/integration_tests/test_canisters/governance_mem_test_canister.rs
@@ -1,3 +1,6 @@
+// TODO: Jira ticket NNS1-3556
+#![allow(static_mut_refs)]
+
 //! This is a special-purpose canister to create a large Governance proto and
 //! serialize it to stable memory in a format that is compatible with the real
 //! governance canister.
diff --git a/rs/nns/test_utils/src/itest_helpers.rs b/rs/nns/test_utils/src/itest_helpers.rs
index 7d84cf9cb1c..e4e08e82c4c 100644
--- a/rs/nns/test_utils/src/itest_helpers.rs
+++ b/rs/nns/test_utils/src/itest_helpers.rs
@@ -505,10 +505,7 @@ pub async fn set_up_genesis_token_canister(
 }
 
 /// Compiles the ledger canister, builds it's initial payload and installs it
-pub async fn install_ledger_canister<'runtime, 'a>(
-    canister: &mut Canister<'runtime>,
-    args: LedgerCanisterInitPayload,
-) {
+pub async fn install_ledger_canister(canister: &mut Canister<'_>, args: LedgerCanisterInitPayload) {
     install_rust_canister(
         canister,
         "ledger-canister",
diff --git a/rs/orchestrator/BUILD.bazel b/rs/orchestrator/BUILD.bazel
index 4d992a490ca..02a2db1cc45 100644
--- a/rs/orchestrator/BUILD.bazel
+++ b/rs/orchestrator/BUILD.bazel
@@ -87,12 +87,12 @@ rust_binary(
 
 rust_test(
     name = "orchestrator_test",
-    crate = ":lib",
-    data = [
+    compile_data = [
         "testdata/nftables_assigned_replica.conf.golden",
         "testdata/nftables_boundary_node.conf.golden",
         "//ic-os/components:ic/generate-ic-config/ic.json5.template",
     ],
+    crate = ":lib",
     deps = [
         # Keep sorted.
         "//rs/crypto/temp_crypto",
diff --git a/rs/orchestrator/src/registration.rs b/rs/orchestrator/src/registration.rs
index 75230b930fe..db86313f532 100644
--- a/rs/orchestrator/src/registration.rs
+++ b/rs/orchestrator/src/registration.rs
@@ -550,7 +550,7 @@ pub(crate) fn is_time_to_rotate_in_subnet(
     let now = SystemTime::now();
     timestamps
         .iter()
-        .all(|ts| now.duration_since(*ts).map_or(false, |d| d >= gamma))
+        .all(|ts| now.duration_since(*ts).is_ok_and(|d| d >= gamma))
 }
 
 pub(crate) fn http_config_to_endpoint(
diff --git a/rs/p2p/consensus_manager/src/receiver.rs b/rs/p2p/consensus_manager/src/receiver.rs
index 2d1a7e31ae1..ec9c4476548 100644
--- a/rs/p2p/consensus_manager/src/receiver.rs
+++ b/rs/p2p/consensus_manager/src/receiver.rs
@@ -553,12 +553,8 @@ where
         });
 
         for peers_sender in self.active_assembles.values() {
-            peers_sender.send_if_modified(|set| {
-                nodes_leaving_topology
-                    .iter()
-                    .map(|n| set.remove(*n))
-                    .any(|r| r)
-            });
+            peers_sender
+                .send_if_modified(|set| nodes_leaving_topology.iter().any(|n| set.remove(*n)));
         }
         debug_assert!(
             self.slot_table.len() <= self.topology_watcher.borrow().iter().count(),
diff --git a/rs/phantom_newtype/src/displayer.rs b/rs/phantom_newtype/src/displayer.rs
index 1c8ed820e4b..aca27709e9e 100644
--- a/rs/phantom_newtype/src/displayer.rs
+++ b/rs/phantom_newtype/src/displayer.rs
@@ -34,7 +34,7 @@ where
     }
 }
 
-impl<'a, T, Displayer> fmt::Display for DisplayProxy<'a, T, Displayer>
+impl<T, Displayer> fmt::Display for DisplayProxy<'_, T, Displayer>
 where
     Displayer: DisplayerOf<T>,
 {
diff --git a/rs/pocket_ic_server/tests/bitcoin_integration_tests.rs b/rs/pocket_ic_server/tests/bitcoin_integration_tests.rs
index 876becbd392..3a36651f1d6 100644
--- a/rs/pocket_ic_server/tests/bitcoin_integration_tests.rs
+++ b/rs/pocket_ic_server/tests/bitcoin_integration_tests.rs
@@ -94,7 +94,7 @@ rpcauth=ic-btc-integration:cdf2741387f3a12438f69092f0fdad8e$62081498c98bee09a0dc
     let data_dir_path = tmp_dir.path().join("data");
     create_dir(data_dir_path.clone()).unwrap();
 
-    Command::new(bitcoind_path)
+    let mut bitcoin_d_process = Command::new(bitcoind_path)
         .arg(format!("-conf={}", conf_path.display()))
         .arg(format!("-datadir={}", data_dir_path.display()))
         .spawn()
@@ -191,4 +191,8 @@ rpcauth=ic-btc-integration:cdf2741387f3a12438f69092f0fdad8e$62081498c98bee09a0dc
             n += 1;
         }
     }
+
+    // Kill the task to avoid zombie process.
+    bitcoin_d_process.kill().unwrap();
+    bitcoin_d_process.wait().unwrap();
 }
diff --git a/rs/pocket_ic_server/tests/spec_test.rs b/rs/pocket_ic_server/tests/spec_test.rs
index 037013ecb23..567c79cf324 100644
--- a/rs/pocket_ic_server/tests/spec_test.rs
+++ b/rs/pocket_ic_server/tests/spec_test.rs
@@ -90,7 +90,8 @@ fn setup_and_run_ic_ref_test(
         cmd.arg("--key-file").arg(key_path);
     }
 
-    cmd.stdout(Stdio::inherit())
+    let mut process = cmd
+        .stdout(Stdio::inherit())
         .stderr(Stdio::inherit())
         .spawn()
         .expect("httpbin binary crashed");
@@ -196,6 +197,9 @@ fn setup_and_run_ic_ref_test(
         included_tests,
         32,
     );
+
+    process.kill().unwrap();
+    process.wait().unwrap();
 }
 
 #[test]
diff --git a/rs/prep/src/subnet_configuration.rs b/rs/prep/src/subnet_configuration.rs
index c7ef379feab..6e518b7c4c9 100644
--- a/rs/prep/src/subnet_configuration.rs
+++ b/rs/prep/src/subnet_configuration.rs
@@ -169,7 +169,6 @@ pub fn duration_to_millis(unit_delay: Duration) -> u64 {
 /// The configuration for app subnets is used for new app subnets with at most
 /// 13 nodes. App subnets with more than 13 nodes will be deployed with the NNS
 /// subnet configs.
-
 pub fn get_default_config_params(subnet_type: SubnetType, nodes_num: usize) -> SubnetConfigParams {
     let use_app_config =
         subnet_type == SubnetType::Application && nodes_num <= ic_limits::SMALL_APP_SUBNET_MAX_SIZE;
diff --git a/rs/protobuf/src/proxy.rs b/rs/protobuf/src/proxy.rs
index 51bf54ba2d2..ef4942c068a 100644
--- a/rs/protobuf/src/proxy.rs
+++ b/rs/protobuf/src/proxy.rs
@@ -132,7 +132,7 @@ impl ProxyDecodeError {
         T: Error + Eq + 'static,
     {
         self.source()
-            .map_or(false, |err| err.downcast_ref() == Some(&other_err))
+            .is_some_and(|err| err.downcast_ref() == Some(&other_err))
     }
 }
 
diff --git a/rs/recovery/BUILD.bazel b/rs/recovery/BUILD.bazel
index 1364ceed55c..e135f4024a3 100644
--- a/rs/recovery/BUILD.bazel
+++ b/rs/recovery/BUILD.bazel
@@ -60,8 +60,8 @@ rust_library(
     name = "recovery",
     srcs = glob(["src/**/*.rs"]),
     aliases = ALIASES,
+    compile_data = ["ic_public_key.pem"],
     crate_name = "ic_recovery",
-    data = ["ic_public_key.pem"],
     proc_macro_deps = MACRO_DEPENDENCIES,
     version = "0.1.0",
     visibility = [
@@ -88,7 +88,7 @@ rust_binary(
 
 rust_test(
     name = "recovery_test",
+    compile_data = ["ic_public_key.pem"],
     crate = ":recovery",
-    data = ["ic_public_key.pem"],
     deps = DEPENDENCIES + DEV_DEPENDENCIES,
 )
diff --git a/rs/recovery/subnet_splitting/BUILD.bazel b/rs/recovery/subnet_splitting/BUILD.bazel
index 7250b6d7f43..60a21945820 100644
--- a/rs/recovery/subnet_splitting/BUILD.bazel
+++ b/rs/recovery/subnet_splitting/BUILD.bazel
@@ -64,7 +64,7 @@ rust_binary(
 
 rust_test(
     name = "subnet_splitting_tool_test",
+    compile_data = ["test_data/fake_expected_manifests.data"],
     crate = "subnet_splitting",
-    data = ["test_data/fake_expected_manifests.data"],
     deps = DEPENDENCIES + DEV_DEPENDENCIES,
 )
diff --git a/rs/registry/admin/src/main.rs b/rs/registry/admin/src/main.rs
index 45c97e64c7d..b4b508219c4 100644
--- a/rs/registry/admin/src/main.rs
+++ b/rs/registry/admin/src/main.rs
@@ -5989,7 +5989,7 @@ struct GovernanceCanisterClient(NnsCanisterClient);
 struct RootCanisterClient(NnsCanisterClient);
 
 fn is_mainnet(url: &Url) -> bool {
-    url.domain().map_or(false, |domain| {
+    url.domain().is_some_and(|domain| {
         IC_DOMAINS
             .iter()
             .any(|&ic_domain| domain.contains(ic_domain))
diff --git a/rs/registry/nns_data_provider/src/certification.rs b/rs/registry/nns_data_provider/src/certification.rs
index 79df4bd3b0e..efd31d9325f 100644
--- a/rs/registry/nns_data_provider/src/certification.rs
+++ b/rs/registry/nns_data_provider/src/certification.rs
@@ -231,7 +231,7 @@ where
 
         struct ProtobufVisitor<T: prost::Message>(PhantomData<T>);
 
-        impl<'de, T: prost::Message + Default> serde::de::Visitor<'de> for ProtobufVisitor<T> {
+        impl<T: prost::Message + Default> serde::de::Visitor<'_> for ProtobufVisitor<T> {
             type Value = Protobuf<T>;
 
             fn expecting(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
diff --git a/rs/replica_tests/src/lib.rs b/rs/replica_tests/src/lib.rs
index 49a3f2e3919..c21a123df43 100644
--- a/rs/replica_tests/src/lib.rs
+++ b/rs/replica_tests/src/lib.rs
@@ -753,7 +753,7 @@ pub struct UniversalCanisterWithStateMachine<'a> {
     canister_id: CanisterId,
 }
 
-impl<'a> UniversalCanisterWithStateMachine<'a> {
+impl UniversalCanisterWithStateMachine<'_> {
     pub fn canister_id(&self) -> CanisterId {
         self.canister_id
     }
diff --git a/rs/replicated_state/src/canister_state/queues.rs b/rs/replicated_state/src/canister_state/queues.rs
index 41e32ba85c4..8aa1624fb42 100644
--- a/rs/replicated_state/src/canister_state/queues.rs
+++ b/rs/replicated_state/src/canister_state/queues.rs
@@ -983,7 +983,7 @@ impl CanisterQueues {
             if self
                 .canister_queues
                 .get(sender)
-                .map_or(false, |(input_queue, _)| input_queue.len() != 0)
+                .is_some_and(|(input_queue, _)| input_queue.len() != 0)
             {
                 self.input_schedule.reschedule(*sender, input_queue_type);
                 break;
diff --git a/rs/replicated_state/src/page_map.rs b/rs/replicated_state/src/page_map.rs
index ee6a474152b..580cfad7848 100644
--- a/rs/replicated_state/src/page_map.rs
+++ b/rs/replicated_state/src/page_map.rs
@@ -133,7 +133,7 @@ struct WriteBuffer<'a> {
     start_index: PageIndex,
 }
 
-impl<'a> WriteBuffer<'a> {
+impl WriteBuffer<'_> {
     fn apply_to_file(&mut self, file: &mut File, path: &Path) -> Result<(), PersistenceError> {
         use std::io::{Seek, SeekFrom};
 
@@ -356,7 +356,7 @@ pub enum MemoryMapOrData<'a> {
     Data(&'a [u8]),
 }
 
-impl<'a> MemoryInstructions<'a> {
+impl MemoryInstructions<'_> {
     // Filters and cuts any instructions that do not fall into `new_range`.
     pub fn restrict_to_range(&mut self, new_range: &Range<PageIndex>) {
         self.range = PageIndex::new(std::cmp::max(self.range.start.get(), new_range.start.get()))
diff --git a/rs/replicated_state/src/page_map/page_allocator/page_bytes.rs b/rs/replicated_state/src/page_map/page_allocator/page_bytes.rs
index 360278efc5c..3c5720c6542 100644
--- a/rs/replicated_state/src/page_map/page_allocator/page_bytes.rs
+++ b/rs/replicated_state/src/page_map/page_allocator/page_bytes.rs
@@ -19,7 +19,7 @@ where
 
 struct PageBytesVisitor;
 
-impl<'de> Visitor<'de> for PageBytesVisitor {
+impl Visitor<'_> for PageBytesVisitor {
     type Value = PageBytes;
 
     fn expecting(&self, formatter: &mut std::fmt::Formatter) -> std::fmt::Result {
diff --git a/rs/rosetta-api/icp/src/convert.rs b/rs/rosetta-api/icp/src/convert.rs
index d15d8496331..f24984635b5 100644
--- a/rs/rosetta-api/icp/src/convert.rs
+++ b/rs/rosetta-api/icp/src/convert.rs
@@ -36,7 +36,6 @@ use std::convert::{TryFrom, TryInto};
 
 /// This module converts from ledger_canister data structures to Rosetta data
 /// structures
-
 pub fn to_rosetta_core_transaction(
     transaction_index: BlockIndex,
     transaction: Transaction,
diff --git a/rs/rosetta-api/icp/src/ledger_client/handle_neuron_info.rs b/rs/rosetta-api/icp/src/ledger_client/handle_neuron_info.rs
index 33afba58fad..7032f59820c 100644
--- a/rs/rosetta-api/icp/src/ledger_client/handle_neuron_info.rs
+++ b/rs/rosetta-api/icp/src/ledger_client/handle_neuron_info.rs
@@ -15,7 +15,7 @@ pub fn handle_neuron_info(
     // Check the response from governance call.
     let response: Result<Neuron, GovernanceError> = candid::decode_one(bytes.as_ref())
         .map_err(|err| format!("Could not decode NEURON_INFO response: {}", err))?;
-    return match response {
+    match response {
         Err(e) => Ok(Err(ApiError::InvalidRequest(
             false,
             format!("Could not retrieve neuron information: {}", e.error_message).into(),
@@ -32,9 +32,9 @@ pub fn handle_neuron_info(
                 hotkeys: neuron.hot_keys,
                 staked_maturity_e8s: neuron.staked_maturity_e8s_equivalent,
             });
-            return Ok(Ok(Some(output)));
+            Ok(Ok(Some(output)))
         }
-    };
+    }
 }
 
 fn neuron_state(neuron: &Neuron) -> models::NeuronState {
diff --git a/rs/rosetta-api/icp/tests/integration_tests/tests/tests.rs b/rs/rosetta-api/icp/tests/integration_tests/tests/tests.rs
index 537b0f2c413..9da29d50400 100644
--- a/rs/rosetta-api/icp/tests/integration_tests/tests/tests.rs
+++ b/rs/rosetta-api/icp/tests/integration_tests/tests/tests.rs
@@ -411,7 +411,7 @@ fn matches_blockchain_is_empty_error(error: &rosetta_core::miscellaneous::Error)
             .as_ref()
             .unwrap()
             .get("error_message")
-            .map_or(false, |e| {
+            .is_some_and( |e| {
                 e == "Blockchain is empty" || e == "Block not found: 0" || e == "RosettaBlocks was activated and there are no RosettaBlocks in the database yet. The synch is ongoing, please wait until the first RosettaBlock is written to the database."
             })
 }
diff --git a/rs/rosetta-api/icrc1/src/construction_api/types.rs b/rs/rosetta-api/icrc1/src/construction_api/types.rs
index d7d9dc9c12e..9bc343418db 100644
--- a/rs/rosetta-api/icrc1/src/construction_api/types.rs
+++ b/rs/rosetta-api/icrc1/src/construction_api/types.rs
@@ -40,19 +40,19 @@ pub struct SignedTransaction<'a> {
     pub envelopes: Vec<Envelope<'a>>,
 }
 
-impl<'a> std::fmt::Display for SignedTransaction<'a> {
+impl std::fmt::Display for SignedTransaction<'_> {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(f, "{}", hex::encode(serde_cbor::ser::to_vec(self).unwrap()))
     }
 }
 
-impl<'a> FromStr for SignedTransaction<'a> {
+impl FromStr for SignedTransaction<'_> {
     type Err = anyhow::Error;
     fn from_str(s: &str) -> Result<Self, Self::Err> {
         serde_cbor::from_slice(hex::decode(s)?.as_slice()).map_err(|err| anyhow!("{:?}", err))
     }
 }
-impl<'a> SignedTransaction<'a> {
+impl SignedTransaction<'_> {
     pub fn get_lowest_ingress_expiry(&self) -> Option<u64> {
         self.envelopes
             .iter()
diff --git a/rs/rust_canisters/canister_test/src/canister.rs b/rs/rust_canisters/canister_test/src/canister.rs
index 035fa531ee2..89e395bf1d6 100644
--- a/rs/rust_canisters/canister_test/src/canister.rs
+++ b/rs/rust_canisters/canister_test/src/canister.rs
@@ -532,7 +532,7 @@ pub struct Canister<'a> {
     wasm: Option<Wasm>,
 }
 
-impl<'a> Canister<'a> {
+impl Canister<'_> {
     pub fn is_runtime_local(&self) -> bool {
         match self.runtime {
             Runtime::Remote(_) => false,
@@ -542,7 +542,7 @@ impl<'a> Canister<'a> {
     }
 }
 
-impl<'a> fmt::Debug for Canister<'a> {
+impl fmt::Debug for Canister<'_> {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
         write!(f, "client-side view of canister {}", self.canister_id)
     }
@@ -891,7 +891,7 @@ pub struct Install<'a> {
     pub num_cycles: Option<u128>,
 }
 
-impl<'a> Query<'a> {
+impl Query<'_> {
     pub async fn bytes(&self, payload: Vec<u8>) -> Result<Vec<u8>, String> {
         let canister = self.canister;
         match canister.runtime {
@@ -972,7 +972,7 @@ impl<'a> Query<'a> {
     }
 }
 
-impl<'a> Update<'a> {
+impl Update<'_> {
     pub async fn bytes(&self, payload: Vec<u8>) -> Result<Vec<u8>, String> {
         let canister = self.canister;
         match canister.runtime {
diff --git a/rs/rust_canisters/dfn_candid/src/lib.rs b/rs/rust_canisters/dfn_candid/src/lib.rs
index 7c31d2e8b82..c292858a37b 100644
--- a/rs/rust_canisters/dfn_candid/src/lib.rs
+++ b/rs/rust_canisters/dfn_candid/src/lib.rs
@@ -116,7 +116,7 @@ impl<A1: DeserializeOwned + CandidType + HasCandidDecoderConfig> FromWire
 /// this is a private mirror of the type in dfn_core::api which generates the
 /// serialization/deserialization for it without putting a dependency on candid
 /// in dfn_core
-
+///
 /// This is a bit of a weird type witness. Candid is multi arity in both inputs
 /// and outputs the outputs don't fit in well with rust. To make writing candid
 /// nicer we assume that every function is going to try and return one value, if
diff --git a/rs/rust_canisters/dfn_core/src/stable.rs b/rs/rust_canisters/dfn_core/src/stable.rs
index 68dbfe1b541..d4cfd4df04b 100644
--- a/rs/rust_canisters/dfn_core/src/stable.rs
+++ b/rs/rust_canisters/dfn_core/src/stable.rs
@@ -11,7 +11,6 @@ const PAGE_SIZE: f64 = 64.0 * 1024.0;
 /// +--------+-----------------+-------->
 /// | length |     content     |  junk
 /// +--------+-----------------+-------->
-
 const LENGTH_BYTES: u32 = 4;
 
 pub fn stable64_size() -> u64 {
diff --git a/rs/rust_canisters/memory_test/src/main.rs b/rs/rust_canisters/memory_test/src/main.rs
index 8c09b785fbf..6014e0207cc 100644
--- a/rs/rust_canisters/memory_test/src/main.rs
+++ b/rs/rust_canisters/memory_test/src/main.rs
@@ -423,7 +423,7 @@ fn copy() {
     let step = operation.step.unwrap_or(ELEMENT_SIZE) / ELEMENT_SIZE;
     let value = operation.value.unwrap_or_else(|| rand(0, u8::MAX));
     // Address can't exceed 4GiB WASM memory
-    let len = (operation.size as usize + ELEMENT_SIZE - 1) / ELEMENT_SIZE;
+    let len = (operation.size as usize).div_ceil(ELEMENT_SIZE);
     assert!(2 * len <= MEMORY_LEN);
     MEMORY.with(|memory| {
         let mut memory_ref = memory.borrow_mut();
diff --git a/rs/rust_canisters/pmap/canister/main.rs b/rs/rust_canisters/pmap/canister/main.rs
index 9bf061382c9..fbfbe9a8784 100644
--- a/rs/rust_canisters/pmap/canister/main.rs
+++ b/rs/rust_canisters/pmap/canister/main.rs
@@ -1,3 +1,6 @@
+// TODO: EXC-1841
+#![allow(static_mut_refs)]
+
 use dfn_core::api::print;
 use dfn_macro::{query, update};
 use std::ptr::{addr_of, addr_of_mut};
diff --git a/rs/rust_canisters/random_traffic_test/src/main.rs b/rs/rust_canisters/random_traffic_test/src/main.rs
index ce928a0553e..dad560394f6 100644
--- a/rs/rust_canisters/random_traffic_test/src/main.rs
+++ b/rs/rust_canisters/random_traffic_test/src/main.rs
@@ -265,7 +265,7 @@ async fn handle_call(msg: Message) -> Vec<u8> {
     fn should_make_downstream_call() -> bool {
         RNG.with_borrow_mut(|rng| {
             WeightedIndex::new([CALL_WEIGHT.get(), REPLY_WEIGHT.get()])
-                .map_or(false, |dist| dist.sample(rng) == 0)
+                .is_ok_and(|dist| dist.sample(rng) == 0)
         })
     }
 
diff --git a/rs/sns/cli/src/lib.rs b/rs/sns/cli/src/lib.rs
index fd5f82d58c2..76e6e001616 100644
--- a/rs/sns/cli/src/lib.rs
+++ b/rs/sns/cli/src/lib.rs
@@ -509,6 +509,8 @@ impl NnsGovernanceCanister {
         proposer: &NeuronIdOrSubaccount,
         proposal: &Proposal,
     ) -> Result<MakeProposalResponse, anyhow::Error> {
+        // TODO: Jira ticket NNS1-3555
+        #[allow(non_local_definitions)]
         impl Request for ManageNeuron {
             type Response = ManageNeuronResponse;
             const METHOD_NAME: &'static str = "manage_neuron";
@@ -599,13 +601,13 @@ enum RunCommandError<'a> {
     },
 }
 
-impl<'a> Display for RunCommandError<'a> {
+impl Display for RunCommandError<'_> {
     fn fmt(&self, formatter: &mut std::fmt::Formatter) -> std::fmt::Result {
         write!(formatter, "{}", self.new_report())
     }
 }
 
-impl<'a> RunCommandError<'a> {
+impl RunCommandError<'_> {
     fn new_report(&self) -> String {
         match self {
             RunCommandError::UnableToRunCommand { command, error } => {
diff --git a/rs/sns/governance/canister/canister.rs b/rs/sns/governance/canister/canister.rs
index f29c9e353b0..6c883c86b6e 100644
--- a/rs/sns/governance/canister/canister.rs
+++ b/rs/sns/governance/canister/canister.rs
@@ -1,3 +1,6 @@
+// TODO: Jira ticket NNS1-3556
+#![allow(static_mut_refs)]
+
 use async_trait::async_trait;
 use ic_base_types::{CanisterId, PrincipalId};
 use ic_canister_log::log;
diff --git a/rs/sns/governance/src/proposal.rs b/rs/sns/governance/src/proposal.rs
index eb99082247a..a620fe0d804 100644
--- a/rs/sns/governance/src/proposal.rs
+++ b/rs/sns/governance/src/proposal.rs
@@ -100,7 +100,7 @@ impl Proposal {
     pub(crate) fn allowed_when_resources_are_low(&self) -> bool {
         self.action
             .as_ref()
-            .map_or(false, |a| a.allowed_when_resources_are_low())
+            .is_some_and(|a| a.allowed_when_resources_are_low())
     }
 
     /// Returns a clone of self, except that "large blob fields" are replaced
diff --git a/rs/sns/integration_tests/test_canisters/sns_governance_mem_test_canister.rs b/rs/sns/integration_tests/test_canisters/sns_governance_mem_test_canister.rs
index bce4a43db4b..26f7306e4a9 100644
--- a/rs/sns/integration_tests/test_canisters/sns_governance_mem_test_canister.rs
+++ b/rs/sns/integration_tests/test_canisters/sns_governance_mem_test_canister.rs
@@ -1,3 +1,6 @@
+// TODO: Jira ticket NNS1-3556
+#![allow(static_mut_refs)]
+
 //! This is a special-purpose canister to create a large Governance proto and
 //! serialize it to stable memory in a format that is compatible with the real
 //! governance canister.
diff --git a/rs/sns/swap/canister/canister.rs b/rs/sns/swap/canister/canister.rs
index 1e9b1484caf..4c047678fc6 100644
--- a/rs/sns/swap/canister/canister.rs
+++ b/rs/sns/swap/canister/canister.rs
@@ -1,3 +1,6 @@
+// TODO: Jira ticket NNS1-3556
+#![allow(static_mut_refs)]
+
 use ic_base_types::{CanisterId, PrincipalId};
 use ic_canister_log::log;
 use ic_canisters_http_types::{HttpRequest, HttpResponse, HttpResponseBuilder};
diff --git a/rs/sns/swap/src/swap.rs b/rs/sns/swap/src/swap.rs
index e4f58e45e0c..324424faa2e 100644
--- a/rs/sns/swap/src/swap.rs
+++ b/rs/sns/swap/src/swap.rs
@@ -2535,7 +2535,7 @@ impl Swap {
         if request
             .subaccount
             .as_ref()
-            .map_or(false, |subaccount| subaccount.len() != 32)
+            .is_some_and(|subaccount| subaccount.len() != 32)
         {
             return NewSaleTicketResponse::err_invalid_subaccount();
         }
@@ -3768,7 +3768,7 @@ impl<'a> SwapDigest<'a> {
     }
 }
 
-impl<'a> fmt::Debug for SwapDigest<'a> {
+impl fmt::Debug for SwapDigest<'_> {
     fn fmt(&self, formatter: &mut fmt::Formatter) -> fmt::Result {
         let Swap {
             lifecycle,
diff --git a/rs/sns/test_utils/src/icrc1.rs b/rs/sns/test_utils/src/icrc1.rs
index 5076c3d8f5c..e50faeb55f4 100644
--- a/rs/sns/test_utils/src/icrc1.rs
+++ b/rs/sns/test_utils/src/icrc1.rs
@@ -9,15 +9,15 @@ use icrc_ledger_types::icrc1::{
 };
 use num_traits::ToPrimitive;
 
-pub async fn balance_of<'a>(canister: &Canister<'a>, account: Account) -> Result<u64, String> {
+pub async fn balance_of(canister: &Canister<'_>, account: Account) -> Result<u64, String> {
     canister
         .query_("icrc1_balance_of", candid_one, account)
         .await
         .map(|n: Nat| n.0.to_u64().unwrap())
 }
 
-pub async fn transfer<'a>(
-    canister: &Canister<'a>,
+pub async fn transfer(
+    canister: &Canister<'_>,
     sender: &Sender,
     args: TransferArg,
 ) -> Result<BlockIndex, String> {
diff --git a/rs/sns/test_utils/src/itest_helpers.rs b/rs/sns/test_utils/src/itest_helpers.rs
index db114b9d9be..f21aee316ac 100644
--- a/rs/sns/test_utils/src/itest_helpers.rs
+++ b/rs/sns/test_utils/src/itest_helpers.rs
@@ -1395,10 +1395,7 @@ pub async fn set_up_governance_canister(
 }
 
 /// Compiles the ledger canister, builds it's initial payload and installs it
-pub async fn install_ledger_canister<'runtime, 'a>(
-    canister: &mut Canister<'runtime>,
-    args: LedgerArgument,
-) {
+pub async fn install_ledger_canister(canister: &mut Canister<'_>, args: LedgerArgument) {
     install_rust_canister_with_memory_allocation(
         canister,
         "ic-icrc1-ledger",
@@ -1417,10 +1414,7 @@ pub async fn set_up_ledger_canister(runtime: &'_ Runtime, args: LedgerInitArgs)
 }
 
 /// Compiles the ledger index canister, builds it's initial payload and installs it
-pub async fn install_index_ng_canister<'runtime, 'a>(
-    canister: &mut Canister<'runtime>,
-    args: Option<IndexArg>,
-) {
+pub async fn install_index_ng_canister(canister: &mut Canister<'_>, args: Option<IndexArg>) {
     install_rust_canister_with_memory_allocation(
         canister,
         "ic-icrc1-index-ng",
diff --git a/rs/starter/src/main.rs b/rs/starter/src/main.rs
index c3a30475a92..970b03ae284 100644
--- a/rs/starter/src/main.rs
+++ b/rs/starter/src/main.rs
@@ -205,7 +205,7 @@ fn main() -> Result<()> {
         .arg("--config-file")
         .args([config_path.to_str().unwrap()]);
     info!(log, "Executing {:?}", cmd);
-    cmd.exec();
+    let _ = cmd.exec();
 
     Ok(())
 }
diff --git a/rs/state_layout/src/state_layout.rs b/rs/state_layout/src/state_layout.rs
index 1261b0bb98f..a84b8814350 100644
--- a/rs/state_layout/src/state_layout.rs
+++ b/rs/state_layout/src/state_layout.rs
@@ -112,14 +112,14 @@ impl AccessPolicy for WriteOnly {
 
 impl WritePolicy for WriteOnly {}
 
-impl<'a, T> AccessPolicy for RwPolicy<'a, T> {
+impl<T> AccessPolicy for RwPolicy<'_, T> {
     fn check_dir(p: &Path) -> Result<(), LayoutError> {
         WriteOnly::check_dir(p)
     }
 }
 
-impl<'a, T> ReadPolicy for RwPolicy<'a, T> {}
-impl<'a, T> WritePolicy for RwPolicy<'a, T> {}
+impl<T> ReadPolicy for RwPolicy<'_, T> {}
+impl<T> WritePolicy for RwPolicy<'_, T> {}
 
 pub type CompleteCheckpointLayout = CheckpointLayout<ReadOnly>;
 
diff --git a/rs/state_machine_tests/src/lib.rs b/rs/state_machine_tests/src/lib.rs
index 2001e69a856..89545047162 100644
--- a/rs/state_machine_tests/src/lib.rs
+++ b/rs/state_machine_tests/src/lib.rs
@@ -3591,7 +3591,7 @@ impl StateMachine {
         let canister_state = replicated_state
             .canister_state_mut(&canister_id)
             .unwrap_or_else(|| panic!("Canister {} does not exist", canister_id));
-        let size = (data.len() + WASM_PAGE_SIZE_IN_BYTES - 1) / WASM_PAGE_SIZE_IN_BYTES;
+        let size = data.len().div_ceil(WASM_PAGE_SIZE_IN_BYTES);
         let memory = Memory::new(PageMap::from(data), NumWasmPages::new(size));
         canister_state
             .execution_state
diff --git a/rs/state_machine_tests/tests/tests.rs b/rs/state_machine_tests/tests/tests.rs
index fadf407ef62..6501f493fda 100644
--- a/rs/state_machine_tests/tests/tests.rs
+++ b/rs/state_machine_tests/tests/tests.rs
@@ -40,6 +40,10 @@ fn test() {
         time.duration_since(SystemTime::UNIX_EPOCH).unwrap(),
         Duration::from_nanos(1_620_329_630_000_000_000)
     );
+
+    // Kill the task to avoid zombie process.
+    child.kill().unwrap();
+    child.wait().unwrap();
 }
 
 fn call_state_machine<T: DeserializeOwned>(
diff --git a/rs/state_manager/src/manifest.rs b/rs/state_manager/src/manifest.rs
index 4530c25e47b..bc53ef5786f 100644
--- a/rs/state_manager/src/manifest.rs
+++ b/rs/state_manager/src/manifest.rs
@@ -286,7 +286,7 @@ fn write_chunk_hash(hasher: &mut Sha256, chunk_info: &ChunkInfo, version: StateS
 /// Returns the number of chunks of size `max_chunk_size` required to cover a
 /// file of size `size_bytes`.
 fn count_chunks(size_bytes: u64, max_chunk_size: u32) -> usize {
-    (size_bytes as usize + max_chunk_size as usize - 1) / max_chunk_size as usize
+    (size_bytes as usize).div_ceil(max_chunk_size as usize)
 }
 
 /// Checks if the manifest was computed using specified max_chunk_size.
diff --git a/rs/state_manager/src/manifest/tests/computation.rs b/rs/state_manager/src/manifest/tests/computation.rs
index 53b7856a836..ab706b8c9fe 100644
--- a/rs/state_manager/src/manifest/tests/computation.rs
+++ b/rs/state_manager/src/manifest/tests/computation.rs
@@ -401,8 +401,7 @@ fn test_validate_sub_manifest() {
     let meta_manifest = build_meta_manifest(&manifest);
 
     let encoded_manifest = encode_manifest(&manifest);
-    let num =
-        (encoded_manifest.len() + DEFAULT_CHUNK_SIZE as usize - 1) / DEFAULT_CHUNK_SIZE as usize;
+    let num = encoded_manifest.len().div_ceil(DEFAULT_CHUNK_SIZE as usize);
     assert!(
         num > 1,
         "This test does not cover the case where the encoded manifest is divided into multiple pieces."
diff --git a/rs/state_manager/src/tip.rs b/rs/state_manager/src/tip.rs
index 0ae8a522a1b..96c6d114eb2 100644
--- a/rs/state_manager/src/tip.rs
+++ b/rs/state_manager/src/tip.rs
@@ -847,7 +847,7 @@ fn merge_to_base(
         merge_candidate.is_some()
     });
 
-    return rewritten.iter().any(|b| *b);
+    rewritten.iter().any(|b| *b)
 }
 
 fn serialize_to_tip(
diff --git a/rs/tests/boundary_nodes/api_bn_decentralization_test.rs b/rs/tests/boundary_nodes/api_bn_decentralization_test.rs
index b5c0e7f6d28..4b98b9d8fdb 100644
--- a/rs/tests/boundary_nodes/api_bn_decentralization_test.rs
+++ b/rs/tests/boundary_nodes/api_bn_decentralization_test.rs
@@ -511,14 +511,10 @@ async fn assert_api_bns_present_in_state_tree(
                 .sorted_by(|a, b| Ord::cmp(&a.domain, &b.domain))
                 .collect::<Vec<_>>();
 
-            let are_expected_bns = api_bns_sorted
-                .iter()
-                .enumerate()
-                .map(|(idx, bn)| {
-                    bn.domain == expected_api_bns[idx].domain
-                        && bn.ipv6_address == expected_api_bns[idx].ipv6_address
-                })
-                .all(|is_match| is_match);
+            let are_expected_bns = api_bns_sorted.iter().enumerate().all(|(idx, bn)| {
+                bn.domain == expected_api_bns[idx].domain
+                    && bn.ipv6_address == expected_api_bns[idx].ipv6_address
+            });
 
             if !are_expected_bns {
                 bail!("Expected API BNs haven't yet appeared in the state tree ...");
diff --git a/rs/tests/ckbtc/src/lib.rs b/rs/tests/ckbtc/src/lib.rs
index 93746c04726..896e5920f6f 100644
--- a/rs/tests/ckbtc/src/lib.rs
+++ b/rs/tests/ckbtc/src/lib.rs
@@ -524,7 +524,7 @@ pub async fn install_bitcoin_canister_with_network(
     bitcoin_canister.canister_id()
 }
 
-pub async fn install_icrc1_ledger<'a>(canister: &mut Canister<'a>, args: &LedgerArgument) {
+pub async fn install_icrc1_ledger(canister: &mut Canister<'_>, args: &LedgerArgument) {
     install_rust_canister_from_path(
         canister,
         get_dependency_path(env::var("LEDGER_WASM_PATH").expect("LEDGER_WASM_PATH not set")),
diff --git a/rs/tests/ckbtc/src/utils.rs b/rs/tests/ckbtc/src/utils.rs
index 25b2674f871..9d5c1ed9f69 100644
--- a/rs/tests/ckbtc/src/utils.rs
+++ b/rs/tests/ckbtc/src/utils.rs
@@ -85,8 +85,8 @@ pub fn generate_blocks(btc_client: &Client, logger: &Logger, nb_blocks: u64, add
 
 /// Wait for the expected balance to be available at the given btc address.
 /// Timeout after SHORT_TIMEOUT if the expected balance is not reached.
-pub async fn wait_for_bitcoin_balance<'a>(
-    canister: &UniversalCanister<'a>,
+pub async fn wait_for_bitcoin_balance(
+    canister: &UniversalCanister<'_>,
     logger: &Logger,
     expected_balance_in_satoshis: u64,
     btc_address: &Address,
@@ -107,7 +107,7 @@ pub async fn wait_for_bitcoin_balance<'a>(
 
 /// Wait for the expected balance to be available at the given account.
 /// Timeout after SHORT_TIMEOUT if the expected balance is not reached.
-pub async fn wait_for_ledger_balance<'a>(
+pub async fn wait_for_ledger_balance(
     ledger_agent: &Icrc1Agent,
     logger: &Logger,
     expected_balance: Nat,
@@ -422,10 +422,7 @@ pub fn get_btc_client(env: &TestEnv) -> Client {
     .unwrap()
 }
 
-pub async fn get_bitcoin_balance<'a>(
-    canister: &UniversalCanister<'a>,
-    btc_address: &Address,
-) -> u64 {
+pub async fn get_bitcoin_balance(canister: &UniversalCanister<'_>, btc_address: &Address) -> u64 {
     canister
         .update(wasm().call(management::bitcoin_get_balance(
             btc_address.to_string(),
diff --git a/rs/tests/consensus/backup/common.rs b/rs/tests/consensus/backup/common.rs
index 14269ae7650..5ad31158aef 100644
--- a/rs/tests/consensus/backup/common.rs
+++ b/rs/tests/consensus/backup/common.rs
@@ -383,6 +383,7 @@ fn test(env: TestEnv, binary_version: String, target_version: String) {
         "Restart and wait for cold storage and divergence to happen"
     );
     child.kill().expect("Error killing backup process");
+    child.wait().expect("Error waiting for backup process");
 
     let checkpoint =
         some_checkpoint_dir(&backup_dir, &subnet_id).expect("Checkpoint doesn't exist");
@@ -453,6 +454,7 @@ fn test(env: TestEnv, binary_version: String, target_version: String) {
 
     info!(log, "Kill child process");
     child.kill().expect("Error killing backup process");
+    child.wait().expect("Error waiting for backup process");
 
     assert!(hash_mismatch);
     info!(log, "There was a divergence of the state");
diff --git a/rs/tests/consensus/catch_up_test_common/src/lib.rs b/rs/tests/consensus/catch_up_test_common/src/lib.rs
index 8470db27b08..55e0dfb101f 100644
--- a/rs/tests/consensus/catch_up_test_common/src/lib.rs
+++ b/rs/tests/consensus/catch_up_test_common/src/lib.rs
@@ -1,4 +1,4 @@
-/// Common test function for a couple of catch up tests.
+//! Common test function for a couple of catch up tests.
 
 const DKG_INTERVAL: u64 = 150;
 const CATCH_UP_RETRIES: u64 = 40;
diff --git a/rs/tests/consensus/orchestrator/rotate_ecdsa_idkg_key_test.rs b/rs/tests/consensus/orchestrator/rotate_ecdsa_idkg_key_test.rs
index 69bf064dea9..86a5eb0aa8c 100644
--- a/rs/tests/consensus/orchestrator/rotate_ecdsa_idkg_key_test.rs
+++ b/rs/tests/consensus/orchestrator/rotate_ecdsa_idkg_key_test.rs
@@ -242,7 +242,7 @@ fn test(env: TestEnv) {
 
     assert!(last_rotation
         .duration_since(first_rotation)
-        .map_or(false, |d| d + gamma <= delta));
+        .is_ok_and(|d| d + gamma <= delta));
 
     // Ensure signing still works
     for (key_id, public_key) in public_keys {
diff --git a/rs/tests/consensus/orchestrator/unstuck_subnet_test.rs b/rs/tests/consensus/orchestrator/unstuck_subnet_test.rs
index 97cb79cd63b..6759722b0c9 100644
--- a/rs/tests/consensus/orchestrator/unstuck_subnet_test.rs
+++ b/rs/tests/consensus/orchestrator/unstuck_subnet_test.rs
@@ -205,7 +205,7 @@ fn test(test_env: TestEnv) {
 
 fn have_sha_errors(session: &Session) -> bool {
     let cmd = "journalctl | grep -c 'FileHashMismatchError'".to_string();
-    execute_bash_command(session, cmd).map_or(false, |res| res.trim().parse::<i32>().unwrap() > 0)
+    execute_bash_command(session, cmd).is_ok_and(|res| res.trim().parse::<i32>().unwrap() > 0)
 }
 
 fn main() -> Result<()> {
diff --git a/rs/tests/consensus/subnet_recovery/common.rs b/rs/tests/consensus/subnet_recovery/common.rs
index 4106012edd8..4d824815b05 100644
--- a/rs/tests/consensus/subnet_recovery/common.rs
+++ b/rs/tests/consensus/subnet_recovery/common.rs
@@ -573,7 +573,7 @@ fn halt_subnet(
                     message.cursor
                 ),
             );
-            if res.map_or(false, |r| r.trim().parse::<i32>().unwrap() > 0) {
+            if res.is_ok_and(|r| r.trim().parse::<i32>().unwrap() > 0) {
                 Ok(())
             } else {
                 bail!("Did not find log entry that consensus is halted.")
@@ -660,7 +660,7 @@ fn corrupt_latest_cup(subnet: &SubnetSnapshot, recovery: &Recovery, logger: &Log
                     message.cursor
                 ),
             );
-            if res.map_or(false, |r| r.trim().parse::<i32>().unwrap() > 0) {
+            if res.is_ok_and( |r| r.trim().parse::<i32>().unwrap() > 0) {
                 Ok(())
             } else {
                 bail!("Did not find log entry that cup is corrupted.")
diff --git a/rs/tests/cross_chain/ic_xc_cketh_test.rs b/rs/tests/cross_chain/ic_xc_cketh_test.rs
index 9c03cb331f9..4f0d3ee2436 100644
--- a/rs/tests/cross_chain/ic_xc_cketh_test.rs
+++ b/rs/tests/cross_chain/ic_xc_cketh_test.rs
@@ -871,7 +871,7 @@ struct LedgerCanister<'a> {
     canister: Canister<'a>,
 }
 
-impl<'a> LedgerCanister<'a> {
+impl LedgerCanister<'_> {
     fn principal(&self) -> Principal {
         self.canister.canister_id().get().0
     }
@@ -881,7 +881,7 @@ struct CkEthMinterCanister<'a> {
     canister: Canister<'a>,
 }
 
-impl<'a> CkEthMinterCanister<'a> {
+impl CkEthMinterCanister<'_> {
     async fn minter_address(&self) -> String {
         self.canister
             .update_("minter_address", candid, ())
@@ -919,7 +919,7 @@ struct LedgerSuiteOrchestratorCanister<'a> {
     canister: Canister<'a>,
 }
 
-impl<'a> LedgerSuiteOrchestratorCanister<'a> {
+impl LedgerSuiteOrchestratorCanister<'_> {
     async fn upgrade(&mut self, arg: LedgerSuiteOrchestratorUpgradeArg) {
         self.canister
             .upgrade_to_self_binary(Encode!(&OrchestratorArg::UpgradeArg(arg)).unwrap())
diff --git a/rs/tests/cross_chain/ic_xc_ledger_suite_orchestrator_test.rs b/rs/tests/cross_chain/ic_xc_ledger_suite_orchestrator_test.rs
index 43b52e7de9c..29031a79058 100644
--- a/rs/tests/cross_chain/ic_xc_ledger_suite_orchestrator_test.rs
+++ b/rs/tests/cross_chain/ic_xc_ledger_suite_orchestrator_test.rs
@@ -251,12 +251,12 @@ async fn install_nns_controlled_canister<'a>(
     canister
 }
 
-async fn upgrade_ledger_suite_orchestrator_by_nns_proposal<'a>(
+async fn upgrade_ledger_suite_orchestrator_by_nns_proposal(
     logger: &slog::Logger,
     governance_canister: &Canister<'_>,
     root_canister: &Canister<'_>,
     canister_wasm: CanisterModule,
-    orchestrator: &LedgerOrchestratorCanister<'a>,
+    orchestrator: &LedgerOrchestratorCanister<'_>,
     upgrade_arg: OrchestratorArg,
 ) {
     use ic_canister_client::Sender;
@@ -431,7 +431,7 @@ struct LedgerOrchestratorCanister<'a> {
     canister: Canister<'a>,
 }
 
-impl<'a> LedgerOrchestratorCanister<'a> {
+impl LedgerOrchestratorCanister<'_> {
     async fn call_canister_ids(&self, contract: Erc20Contract) -> Option<ManagedCanisterIds> {
         self.canister
             .query_("canister_ids", dfn_candid::candid, (contract,))
diff --git a/rs/tests/driver/src/driver/simulate_network.rs b/rs/tests/driver/src/driver/simulate_network.rs
index 006961bc3af..2947e35578f 100644
--- a/rs/tests/driver/src/driver/simulate_network.rs
+++ b/rs/tests/driver/src/driver/simulate_network.rs
@@ -192,7 +192,7 @@ impl ProductionSubnetTopology {
 
 /// Query:
 /// https://victoria.ch1-obs1.dfinity.network/select/0/vmui/#/?g0.expr=sum+by+%28ic_node%2Cpeer%29+%28quic_transport_quinn_path_rtt_seconds%7Bic_subnet%3D%22uzr34-akd3s-xrdag-3ql62-ocgoh-ld2ao-tamcv-54e7j-krwgb-2gm4z-oqe%22%7D%29&g0.range_input=21h24m51s870ms&g0.end_input=2024-08-20T08%3A22%3A07&g0.relative_time=none&g0.tenantID=0
-pub const UZR_34_RTT: [(u64, u64, f64); 756] = [
+pub static UZR_34_RTT: [(u64, u64, f64); 756] = [
     (1, 2, 0.15598),
     (1, 3, 0.37478),
     (1, 4, 0.13583),
@@ -952,7 +952,7 @@ pub const UZR_34_RTT: [(u64, u64, f64); 756] = [
 ];
 /// Query:
 /// https://victoria.ch1-obs1.dfinity.network/select/0/vmui/#/?g0.expr=sum+by+%28ic_node%2Cpeer%29+%28%0A++rate%28quic_transport_quinn_path_lost_packets%7Bic_subnet%3D%22uzr34-akd3s-xrdag-3ql62-ocgoh-ld2ao-tamcv-54e7j-krwgb-2gm4z-oqe%22%7D%5B7d%5D%29+%2F%0A++rate%28quic_transport_quinn_path_sent_packets%7Bic_subnet%3D%22uzr34-akd3s-xrdag-3ql62-ocgoh-ld2ao-tamcv-54e7j-krwgb-2gm4z-oqe%22%7D%5B7d%5D%29%0A%29&g0.range_input=13d14h36m59s549ms&g0.end_input=2024-06-23T20%3A59%3A19&g0.tab=1&g0.relative_time=none&g0.tenantID=0
-pub const UZR_34_PACKET_LOSS: [(u64, u64, f64); 756] = [
+pub static UZR_34_PACKET_LOSS: [(u64, u64, f64); 756] = [
     (1, 2, 0.0015710290841178466),
     (1, 3, 0.000604650481546998),
     (1, 4, 0.0014703598418393934),
diff --git a/rs/tests/driver/src/util/delegations.rs b/rs/tests/driver/src/util/delegations.rs
index a8a779a5552..e6e0e003959 100644
--- a/rs/tests/driver/src/util/delegations.rs
+++ b/rs/tests/driver/src/util/delegations.rs
@@ -124,7 +124,7 @@ pub struct AgentWithDelegation<'a> {
     pub polling_timeout: Duration,
 }
 
-impl<'a> AgentWithDelegation<'a> {
+impl AgentWithDelegation<'_> {
     async fn send_http_request(
         &self,
         method: &str,
diff --git a/rs/tests/financial_integrations/icrc1_agent_test.rs b/rs/tests/financial_integrations/icrc1_agent_test.rs
index 8eda3c764e4..7dc06bb5aaf 100644
--- a/rs/tests/financial_integrations/icrc1_agent_test.rs
+++ b/rs/tests/financial_integrations/icrc1_agent_test.rs
@@ -400,7 +400,7 @@ fn mleaf<B: AsRef<[u8]>>(blob: B) -> MixedHashTree {
     MixedHashTree::Leaf(blob.as_ref().to_vec())
 }
 
-pub async fn install_icrc1_ledger<'a>(canister: &mut Canister<'a>, args: &LedgerArgument) {
+pub async fn install_icrc1_ledger(canister: &mut Canister<'_>, args: &LedgerArgument) {
     install_rust_canister_from_path(
         canister,
         get_dependency_path(env::var("LEDGER_WASM_PATH").expect("LEDGER_WASM_PATH not set")),
diff --git a/rs/tests/nns/sns/lib/src/sns_aggregator.rs b/rs/tests/nns/sns/lib/src/sns_aggregator.rs
index 8e1e1bd5397..bafb8e76c3b 100644
--- a/rs/tests/nns/sns/lib/src/sns_aggregator.rs
+++ b/rs/tests/nns/sns/lib/src/sns_aggregator.rs
@@ -143,9 +143,9 @@ impl AggregatorClient {
         format!("/{AGGREGATOR_CANISTER_VERSION}{AGGREGATOR_CANISTER_PATH}")
     }
 
-    async fn http_get_request<'agent>(
+    async fn http_get_request(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
         relative_url: String,
     ) -> Result<HttpResponse> {
         let (response,) = canister
@@ -171,9 +171,9 @@ impl AggregatorClient {
         }
     }
 
-    pub async fn http_get_favicon<'agent>(
+    pub async fn http_get_favicon(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
     ) -> Result<Vec<u8>> {
         let url = "/favicon.ico".to_string();
         Self::http_get_request(log, canister, url)
@@ -181,9 +181,9 @@ impl AggregatorClient {
             .map(|res| res.body)
     }
 
-    pub async fn http_get_asset<'agent>(
+    pub async fn http_get_asset(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
     ) -> Result<Vec<u8>> {
         let url = Self::aggregator_http_endpoint();
         Self::http_get_request(log, canister, url)
@@ -191,9 +191,9 @@ impl AggregatorClient {
             .map(|res| res.body)
     }
 
-    pub async fn extract_first_sns_sale_config<'agent>(
+    pub async fn extract_first_sns_sale_config(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
     ) -> Result<Value> {
         let asset_bytes = Self::http_get_asset(log, canister).await.unwrap();
         let asset: Value = serde_json::from_slice(asset_bytes.as_slice())?;
@@ -219,9 +219,9 @@ impl AggregatorClient {
         }
     }
 
-    async fn sub_asset<'agent, P>(
+    async fn sub_asset<P>(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
         extract_sub_asset: &P,
         timeout: Duration,
     ) -> RequestOutcome<Value, String>
@@ -263,9 +263,9 @@ impl AggregatorClient {
         )
     }
 
-    pub async fn first_sns_asset<'agent>(
+    pub async fn first_sns_asset(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
         timeout: Duration,
     ) -> RequestOutcome<Value, String> {
         let extract_sub_asset = move |asset| {
@@ -275,9 +275,9 @@ impl AggregatorClient {
         Self::sub_asset(log, canister, &extract_sub_asset, timeout).await
     }
 
-    pub async fn first_swap_params<'agent>(
+    pub async fn first_swap_params(
         log: &Logger,
-        canister: &HttpRequestCanister<'agent>,
+        canister: &HttpRequestCanister<'_>,
         timeout: Duration,
     ) -> RequestOutcome<Value, String> {
         let extract_sub_asset = move |asset| {
diff --git a/rs/tla_instrumentation/local_key/src/lib.rs b/rs/tla_instrumentation/local_key/src/lib.rs
index 803bb734775..c63de2a48c7 100644
--- a/rs/tla_instrumentation/local_key/src/lib.rs
+++ b/rs/tla_instrumentation/local_key/src/lib.rs
@@ -185,7 +185,7 @@ impl<T: 'static> LocalKey<T> {
             slot: &'a mut Option<T>,
         }
 
-        impl<'a, T: 'static> Drop for Guard<'a, T> {
+        impl<T: 'static> Drop for Guard<'_, T> {
             fn drop(&mut self) {
                 // This should not panic.
                 //
@@ -414,7 +414,7 @@ where
         struct TransparentOption<'a, T> {
             value: &'a Option<T>,
         }
-        impl<'a, T: fmt::Debug> fmt::Debug for TransparentOption<'a, T> {
+        impl<T: fmt::Debug> fmt::Debug for TransparentOption<'_, T> {
             fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
                 match self.value.as_ref() {
                     Some(value) => value.fmt(f),
diff --git a/rs/tree_deserializer/src/types.rs b/rs/tree_deserializer/src/types.rs
index bcd8b5a1c69..80dbd207a10 100644
--- a/rs/tree_deserializer/src/types.rs
+++ b/rs/tree_deserializer/src/types.rs
@@ -52,7 +52,7 @@ impl<'de> serde::Deserialize<'de> for Leb128EncodedU64 {
     {
         struct LebU64Visitor;
 
-        impl<'de> serde::de::Visitor<'de> for LebU64Visitor {
+        impl serde::de::Visitor<'_> for LebU64Visitor {
             type Value = Leb128EncodedU64;
 
             fn expecting(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
diff --git a/rs/types/types/src/consensus/idkg.rs b/rs/types/types/src/consensus/idkg.rs
index 27aefe53f93..e5908ea7968 100644
--- a/rs/types/types/src/consensus/idkg.rs
+++ b/rs/types/types/src/consensus/idkg.rs
@@ -251,7 +251,7 @@ impl IDkgPayload {
     pub fn iter_pre_signature_ids<'a>(
         &'a self,
         key_id: &'a IDkgMasterPublicKeyId,
-    ) -> impl Iterator<Item = PreSigId> + '_ {
+    ) -> impl Iterator<Item = PreSigId> + 'a {
         let available_pre_signature_ids = self
             .available_pre_signatures
             .iter()
diff --git a/rs/types/types/src/crypto/hash/domain_separator.rs b/rs/types/types/src/crypto/hash/domain_separator.rs
index 228e3c29981..2dfce357301 100644
--- a/rs/types/types/src/crypto/hash/domain_separator.rs
+++ b/rs/types/types/src/crypto/hash/domain_separator.rs
@@ -162,6 +162,6 @@ fn ic_request_domain_variable_is_sound_and_consistent_with_the_enum_variant() {
     );
     assert_eq!(
         DOMAIN_IC_REQUEST[0] as usize,
-        DomainSeparator::IcRequest.as_str().as_bytes().len()
+        DomainSeparator::IcRequest.as_str().len()
     );
 }
diff --git a/rs/types/types/src/ingress.rs b/rs/types/types/src/ingress.rs
index 3985fcd80ab..02b88bd81cf 100644
--- a/rs/types/types/src/ingress.rs
+++ b/rs/types/types/src/ingress.rs
@@ -108,7 +108,7 @@ impl IngressStatus {
         match self {
             IngressStatus::Known { state, .. } => match state {
                 IngressState::Completed(result) => result.memory_bytes(),
-                IngressState::Failed(error) => error.description().as_bytes().len(),
+                IngressState::Failed(error) => error.description().len(),
                 _ => 0,
             },
             IngressStatus::Unknown => 0,
@@ -180,7 +180,7 @@ impl MemoryDiskBytes for WasmResult {
     fn memory_bytes(&self) -> usize {
         match self {
             WasmResult::Reply(bytes) => bytes.len(),
-            WasmResult::Reject(string) => string.as_bytes().len(),
+            WasmResult::Reject(string) => string.len(),
         }
     }
 
diff --git a/rs/types/types/src/messages/ingress_messages.rs b/rs/types/types/src/messages/ingress_messages.rs
index 212bb2d285b..a4c3184e5f8 100644
--- a/rs/types/types/src/messages/ingress_messages.rs
+++ b/rs/types/types/src/messages/ingress_messages.rs
@@ -235,7 +235,7 @@ impl<'de> Deserialize<'de> for SignedIngress {
     fn deserialize<D: serde::de::Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error> {
         struct BytesVisitor;
 
-        impl<'de> serde::de::Visitor<'de> for BytesVisitor {
+        impl serde::de::Visitor<'_> for BytesVisitor {
             type Value = Vec<u8>;
 
             fn expecting(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
diff --git a/rs/types/types/src/messages/message_id.rs b/rs/types/types/src/messages/message_id.rs
index 2a7829614df..37eb6f4cea1 100644
--- a/rs/types/types/src/messages/message_id.rs
+++ b/rs/types/types/src/messages/message_id.rs
@@ -32,7 +32,7 @@ impl<'a> Deserialize<'a> for MessageId {
     fn deserialize<D: Deserializer<'a>>(deserializer: D) -> Result<Self, D::Error> {
         struct MessageIdVisitor;
 
-        impl<'de> serde::de::Visitor<'de> for MessageIdVisitor {
+        impl serde::de::Visitor<'_> for MessageIdVisitor {
             type Value = MessageId;
 
             fn expecting(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
diff --git a/rs/utils/src/thread.rs b/rs/utils/src/thread.rs
index 54c6a5459f5..41e9485c842 100644
--- a/rs/utils/src/thread.rs
+++ b/rs/utils/src/thread.rs
@@ -11,7 +11,7 @@ where
 {
     let mut items: Vec<(S, Option<T>)> = items.map(|i| (i, None)).collect();
     let threads = thread_pool.thread_count() as usize;
-    let items_per_thread = ((items.len() + threads - 1) / threads).max(1);
+    let items_per_thread = items.len().div_ceil(threads).max(1);
     thread_pool.scoped(|scope| {
         for items in items.chunks_mut(items_per_thread) {
             scope.execute(move || {
diff --git a/rs/utils/validate_eq/src/lib.rs b/rs/utils/validate_eq/src/lib.rs
index 0795f8c2368..f95750c2ec4 100644
--- a/rs/utils/validate_eq/src/lib.rs
+++ b/rs/utils/validate_eq/src/lib.rs
@@ -6,7 +6,6 @@ use std::fmt::Debug;
 ///
 /// Gigantic fields such as PageMaps that are unfeasible to compare in production are meant to
 /// be exempted from comparison.
-
 pub trait ValidateEq {
     fn validate_eq(&self, rhs: &Self) -> Result<(), String>;
 }
diff --git a/rs/utils/validate_eq_derive/src/lib.rs b/rs/utils/validate_eq_derive/src/lib.rs
index 1b9f87e7513..cc07d8788c7 100644
--- a/rs/utils/validate_eq_derive/src/lib.rs
+++ b/rs/utils/validate_eq_derive/src/lib.rs
@@ -13,7 +13,6 @@ use syn::Data::Struct;
 ///   - Ignore ignores the field.
 ///   - None (default) compares fields using PartialEq and reports their name in case of
 ///     divergence.
-
 enum ValidateEqFieldAttr {
     /// Compare using .eq() and return field name if it diverges.
     CompareWithPartialEq,
diff --git a/rs/workload_generator/src/content_length.rs b/rs/workload_generator/src/content_length.rs
index dcecd4f3fac..80081ed8003 100644
--- a/rs/workload_generator/src/content_length.rs
+++ b/rs/workload_generator/src/content_length.rs
@@ -51,7 +51,7 @@ impl Add for ContentLength {
     }
 }
 
-impl<'a> Add for &'a ContentLength {
+impl Add for &ContentLength {
     type Output = ContentLength;
 
     fn add(self, rhs: &ContentLength) -> ContentLength {
@@ -59,7 +59,7 @@ impl<'a> Add for &'a ContentLength {
     }
 }
 
-impl<'a> Add<&'a ContentLength> for ContentLength {
+impl Add<&ContentLength> for ContentLength {
     type Output = ContentLength;
 
     fn add(self, rhs: &ContentLength) -> ContentLength {
@@ -67,7 +67,7 @@ impl<'a> Add<&'a ContentLength> for ContentLength {
     }
 }
 
-impl<'a> Add<ContentLength> for &'a ContentLength {
+impl Add<ContentLength> for &ContentLength {
     type Output = ContentLength;
 
     fn add(self, rhs: ContentLength) -> ContentLength {
diff --git a/rust-toolchain.toml b/rust-toolchain.toml
index 34a2c4859a4..f1f8df773bb 100644
--- a/rust-toolchain.toml
+++ b/rust-toolchain.toml
@@ -1,5 +1,5 @@
 [toolchain]
-channel = "1.82.0"
+channel = "1.84.0"
 targets = ["wasm32-unknown-unknown"]
 profile = "default"
 components = ["rls"]