diff --git a/Cargo.lock b/Cargo.lock
index 4e3f9e7..51e5b7f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -768,9 +768,9 @@ checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
 
 [[package]]
 name = "lru"
-version = "0.18.5"
+version = "0.19.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ef9ac18847474e638e3702b76c65d4eb93428471a74778ef0f1be711717f89b5"
+checksum = "4a9f71e3591c7ec44d3e563e87bf14ddc2bada8519dca046e5b0e560cd004e2d"
 
 [[package]]
 name = "lru-slab"
diff --git a/Cargo.toml b/Cargo.toml
index 3b6a50e..1441cf5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -21,7 +21,7 @@ clap = { version = "4.5", features = ["derive", "env"] }
 flate2 = "1"
 # default-features off drops the `hashbrown` backend (and its allocator-api2 /
 # foldhash / equivalent deps); the std `HashMap` backend is plenty for this.
-lru = { version = "0.18", default-features = false }
+lru = { version = "0.19", default-features = false }
 prometheus = { version = "0.14", default-features = false }
 # LFS objects use an HTTPS API; reqwest fetches them over rustls+ring (no native-tls,
 # so the binary stays statically linked). serde_json rewrites the batch JSON; sha2