diff --git a/Cargo.lock b/Cargo.lock
index 67b6f80f4..513937ee1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -963,9 +963,9 @@ dependencies = [
 
 [[package]]
 name = "libsqlite3-sys"
-version = "0.36.0"
+version = "0.37.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "95b4103cffefa72eb8428cb6b47d6627161e51c2739fc5e3b734584157bc642a"
+checksum = "b1f111c8c41e7c61a49cd34e44c7619462967221a6443b0ec299e0ac30cfb9b1"
 dependencies = [
  "cc",
  "pkg-config",
@@ -1451,9 +1451,9 @@ dependencies = [
 
 [[package]]
 name = "rusqlite"
-version = "0.38.0"
+version = "0.39.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f1c93dd1c9683b438c392c492109cb702b8090b2bfc8fed6f6e4eb4523f17af3"
+checksum = "a0d2b0146dd9661bf67bb107c0bb2a55064d556eeb3fc314151b957f313bcd4e"
 dependencies = [
  "bitflags",
  "fallible-iterator",
diff --git a/Cargo.toml b/Cargo.toml
index cb61fc7d3..106a4a112 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,3 +4,10 @@ resolver = "2"
 
 [profile.release]
 lto = "fat"
+
+[workspace.dependencies]
+rusqlite = "0.39.0"
+tokio = { version = "1.43", features = ["full", "rt-multi-thread"] }
+regex = "1.11.1"
+nix = { version = "0.31.1", features = ["process"] }
+serde = { version = "1.0", features = ["derive"] }
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
index dc25948de..c187e65b4 100644
--- a/crates/cli/Cargo.toml
+++ b/crates/cli/Cargo.toml
@@ -8,20 +8,20 @@ edition = "2021"
 repository = "https://github.com/pkgxdev/pkgx"
 
 [dependencies]
-tokio = { version = "1.43", features = ["full", "rt-multi-thread"] }
-rusqlite = "0.38.0"
-regex = "1.11.1"
+tokio = { workspace = true }
+rusqlite = { workspace = true }
+regex = { workspace = true }
+nix = { workspace = true }
+serde = { workspace = true }
 indicatif = "0.18.3"
-nix = { version = "0.31.1", features = ["process"] }
 serde_json = "1.0.135"
-serde = { version = "1.0", features = ["derive"] }
 libpkgx = { version = "0.7.1", path = "../lib" }
 console = { version = "0.16", default-features = false, features = [
   "ansi-parsing",
 ] }
 
 [target.'cfg(not(target_os = "macos"))'.dependencies]
-rusqlite = { version = "0.38.0", features = ["bundled"] }
+rusqlite = { workspace = true, features = ["bundled"] }
 native-tls = { version = "0.2", features = ["vendored"] }
 # ^^ this is a transitive dependency
 # ^^ we vendor OpenSSL ∵ we want to be standalone and just work inside minimal docker images
diff --git a/crates/lib/Cargo.toml b/crates/lib/Cargo.toml
index e38107452..1ad91b6bc 100644
--- a/crates/lib/Cargo.toml
+++ b/crates/lib/Cargo.toml
@@ -11,26 +11,26 @@ repository = "https://github.com/pkgxdev/pkgx"
 crate-type = ["cdylib", "rlib"]
 
 [dependencies]
+tokio = { workspace = true }
+rusqlite = { workspace = true }
+regex = { workspace = true }
+nix = { workspace = true }
+serde = { workspace = true }
 anyhow = "1.0.95"
 dirs-next = "2.0"
 libsemverator = { version = "0.10.1", features = ["serde"] }
-serde = { version = "1.0", features = ["derive"] }
 serde_yaml = "0.9"
-tokio = { version = "1.43", features = ["full", "rt-multi-thread"] }
 tokio-stream = "0.1"
 strum = "0.28"
 strum_macros = "0.28"
-rusqlite = "0.38.0"
-regex = "1.11.1"
 reqwest = { version = "0.13", features = ["stream", "blocking"] }
 async-compression = { version = "0.4", features = ["tokio", "gzip", "xz"] }
 astral-tokio-tar = "0.6.0"
 tokio-util = { version = "0.7.13", features = ["compat"] }
 futures = "0.3.31"
 lazy_static = "1.5.0"
-nix = { version = "0.31.1", features = ["process"] }
 fs2 = "0.4.3"
 tempfile = "3.16.0"
 
 [target.'cfg(not(target_os = "macos"))'.dependencies]
-rusqlite = { version = "0.38.0", features = ["bundled"] }
+rusqlite = { workspace = true, features = ["bundled"] }