diff --git a/Cargo.toml b/Cargo.toml
index fc9b48a90ac..5217104ebb6 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -20,16 +20,16 @@ path = "src/cargo/lib.rs"
 atty = "0.2"
 crates-io = { path = "src/crates-io", version = "0.16" }
 crossbeam = "0.3"
-crypto-hash = "0.3"
-curl = "0.4.6"
-env_logger = "0.5"
+crypto-hash = "0.3.1"
+curl = "0.4.12"
+env_logger = "0.5.4"
 failure = "0.1.1"
 filetime = "0.2"
 flate2 = "1.0"
 fs2 = "0.4"
 git2 = "0.7.0"
-git2-curl = "0.8"
-glob = "0.2"
+git2-curl = "0.8.1"
+glob = "0.2.11"
 hex = "0.3"
 home = "0.3"
 ignore = "0.4"
@@ -37,7 +37,7 @@ lazy_static = "1.0.0"
 jobserver = "0.1.9"
 lazycell = "0.6"
 libc = "0.2"
-libgit2-sys = "0.7"
+libgit2-sys = "0.7.1"
 log = "0.4"
 num_cpus = "1.0"
 same-file = "1"
@@ -47,10 +47,10 @@ serde_derive = "1.0"
 serde_ignored = "0.0.4"
 serde_json = "1.0"
 shell-escape = "0.1"
-tar = { version = "0.4", default-features = false }
+tar = { version = "0.4.15", default-features = false }
 tempfile = "3.0"
 termcolor = "0.3"
-toml = "0.4"
+toml = "0.4.2"
 url = "1.1"
 clap = "2.31.2"