diff --git a/Cargo.toml b/Cargo.toml
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -33,12 +33,71 @@
 homepage = "https://comm.app"
 
 [workspace.dependencies]
+actix = "0.13.1"
+actix-cors = "0.6"
+actix-http = "3.4.0"
+actix-multipart = "0.6"
+actix-web = "4.3"
+actix-web-actors = "4.2.0"
+actix-web-httpauth = "0.8.0"
+aead = "0.5"
+aes-gcm = "0.10"
+anyhow = "1.0.74"
+argon2 = "0.4"
+async-stream = "0.3.2"
 aws-config = "0.55.3"
 aws-sdk-dynamodb = "0.27.0"
+aws-sdk-s3 = "0.27"
+aws-sdk-secretsmanager = "0.27"
+aws-types = "0.55"
+base64 = "0.21.2"
+bincode = "1.3.3"
+bytes = "1.4"
+bytesize = "1.1.0"
 chrono = "0.4.38"
+clap = "4.4"
+derive_more = "0.99.17"
+ed25519-dalek = "1"
+futures = "0.3.30"
+futures-core = "0.3"
+futures-util = "0.3.28"
+hex = "0.4.3"
+http = "0.2.9"
+hyper = "0.14"
+hyper-tungstenite = "0.11"
+lapin = "2.2.1"
+lazy_static = "1.4.0"
+log = "0.4"
+maud = "0.25"
+napi = { version = "2.10.1", default-features = false }
+napi-build = "2.0.1"
+napi-derive = { version = "2.9.1", default-features = false }
+num-derive = "0.4"
+num-traits = "0.2"
+num_cpus = "1.13.1"
+once_cell = "1.17"
+opaque-ke = "2.0"
+postmark = "0.8"
+prost = "0.11"
+regex = "1.10.3"
+reqwest = { version = "0.11.18", default-features = false }
 serde = { version = "1.0.202", features = ["derive"] }
 serde_json = "1.0.117"
+serde_repr = "0.1"
+sha2 = "0.10.2"
+siwe = "0.3"
 tokio = "1.37.0"
+tokio-stream = "0.1.14"
+tokio-tungstenite = "0.18.0"
+tokio-tungstenite-wasm = "0.2.1"
 tonic = "0.8.3"
+tonic-web = "0.9.1"
+tower-http = "0.4"
 tracing = "0.1.40"
+tracing-actix-web = "0.7.3"
+tracing-futures = "0.2"
+tracing-log = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+url = "2.5"
+uuid = "1.3"
+wasm-bindgen = "0.2"
diff --git a/keyserver/addons/rust-node-addon/Cargo.toml b/keyserver/addons/rust-node-addon/Cargo.toml
--- a/keyserver/addons/rust-node-addon/Cargo.toml
+++ b/keyserver/addons/rust-node-addon/Cargo.toml
@@ -10,25 +10,22 @@
 
 [dependencies]
 # Default enable napi4 feature, see https://nodejs.org/api/n-api.html#node-api-version-matrix
-napi = { version = "2.10.1", default-features = false, features = [
-  "napi4",
-  "tokio_rt",
-] }
-napi-derive = { version = "2.9.1", default-features = false }
-tonic = { version = "0.9.1", features = ["tls"]}
-tokio = { version = "1.0", features = ["macros", "rt-multi-thread"] }
-tokio-stream = "0.1"
-tracing = "0.1"
-tracing-subscriber = { version = "0.3.16", features = ["env-filter"] }
-comm-opaque2 = {path = "../../../shared/comm-opaque2"}
+napi = { workspace = true, features = ["napi4", "tokio_rt"] }
+napi-derive = { workspace = true }
+tonic = { version = "0.9.1", features = ["tls"] }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
+tokio-stream = { workspace = true }
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
+comm-opaque2 = { path = "../../../shared/comm-opaque2" }
 grpc_clients = { path = "../../../shared/grpc_clients" }
-lazy_static = "1.4"
-serde_json = "1.0"
-serde = { version = "1.0", features = ["derive"] }
+lazy_static = { workspace = true }
+serde_json = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
 
 [build-dependencies]
-napi-build = "2.0.1"
-regex = "1"
+napi-build = { workspace = true }
+regex = { workspace = true }
 
 [profile.release]
 lto = true
diff --git a/services/backup/Cargo.toml b/services/backup/Cargo.toml
--- a/services/backup/Cargo.toml
+++ b/services/backup/Cargo.toml
@@ -7,34 +7,34 @@
 homepage.workspace = true
 
 [dependencies]
-anyhow = "1.0"
-async-stream = "0.3"
-aws-config = "0.55"
-aws-sdk-dynamodb = "0.27"
-aws-types = "0.55"
-chrono = "0.4.31"
-clap = { version = "4.0", features = ["derive", "env"] }
+anyhow = { workspace = true }
+async-stream = { workspace = true }
+aws-config = { workspace = true }
+aws-sdk-dynamodb = { workspace = true }
+aws-types = { workspace = true }
+chrono = { workspace = true }
+clap = { workspace = true, features = ["derive", "env"] }
 comm-lib = { path = "../../shared/comm-lib", features = [
   "http",
   "blob-client",
   "aws",
   "grpc_clients",
 ] }
-once_cell = "1.17"
-tokio = { version = "1.24", features = ["rt-multi-thread", "macros"] }
-tokio-stream = "0.1"
-tracing = "0.1"
-tracing-futures = { version = "0.2", features = ["futures-03"] }
-tracing-subscriber = { version = "0.3", features = ["env-filter"] }
-uuid = { version = "1.2", features = ["v4"] }
-actix-web = "4.3"
-tracing-actix-web = "0.7.3"
-reqwest = "0.11.18"
-derive_more = "0.99"
-actix-multipart = "0.6"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = { version = "1.0" }
-actix-web-actors = "4.2.0"
-actix = "0.13.1"
-actix-http = "3.4.0"
-bincode = "1.3.3"
+once_cell = { workspace = true }
+tokio = { workspace = true, features = ["rt-multi-thread", "macros"] }
+tokio-stream = { workspace = true }
+tracing = { workspace = true }
+tracing-futures = { workspace = true, features = ["futures-03"] }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
+uuid = { workspace = true, features = ["v4"] }
+actix-web = { workspace = true }
+tracing-actix-web = { workspace = true }
+reqwest = { workspace = true }
+derive_more = { workspace = true }
+actix-multipart = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
+actix-web-actors = { workspace = true }
+actix = { workspace = true }
+actix-http = { workspace = true }
+bincode = { workspace = true }
diff --git a/services/blob/Cargo.toml b/services/blob/Cargo.toml
--- a/services/blob/Cargo.toml
+++ b/services/blob/Cargo.toml
@@ -7,31 +7,31 @@
 homepage.workspace = true
 
 [dependencies]
-actix-multipart = "0.6"
-actix-web = "4.3"
-anyhow = "1.0"
-async-stream = "0.3"
-aws-config = "0.55"
-aws-sdk-dynamodb = "0.27"
-aws-sdk-s3 = "0.27"
-chrono = "0.4.31"
-clap = { version = "4.0", features = ["derive", "env"] }
+actix-multipart = { workspace = true }
+actix-web = { workspace = true }
+anyhow = { workspace = true }
+async-stream = { workspace = true }
+aws-config = { workspace = true }
+aws-sdk-dynamodb = { workspace = true }
+aws-sdk-s3 = { workspace = true }
+chrono = { workspace = true }
+clap = { workspace = true, features = ["derive", "env"] }
 comm-lib = { path = "../../shared/comm-lib", features = [
   "http",
   "aws",
   "grpc_clients",
 ] }
-derive_more = "0.99"
-http = "0.2"
-once_cell = "1.17"
-prost = "0.11"
-regex = "1.10.3"
-serde = { version = "1.0", features = ["derive"] }
-tokio = { version = "1.24", features = ["rt-multi-thread"] }
-tokio-stream = "0.1"
+derive_more = { workspace = true }
+http = { workspace = true }
+once_cell = { workspace = true }
+prost = { workspace = true }
+regex = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+tokio = { workspace = true, features = ["rt-multi-thread"] }
+tokio-stream = { workspace = true }
 tonic = "0.8"
-tracing = "0.1"
-tracing-actix-web = "0.7.3"
-tracing-futures = { version = "0.2", features = ["futures-03"] }
-tracing-subscriber = { version = "0.3", features = ["env-filter"] }
-serde_json = "1.0.95"
+tracing = { workspace = true }
+tracing-actix-web = { workspace = true }
+tracing-futures = { workspace = true, features = ["futures-03"] }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
+serde_json = { workspace = true }
diff --git a/services/commtest/Cargo.toml b/services/commtest/Cargo.toml
--- a/services/commtest/Cargo.toml
+++ b/services/commtest/Cargo.toml
@@ -9,28 +9,28 @@
 comm-opaque2 = { path = "../../shared/comm-opaque2" }
 grpc_clients = { path = "../../shared/grpc_clients" }
 backup_client = { path = "../../shared/backup_client" }
-base64 = "0.21.2"
-ed25519-dalek = "1"
+base64 = { workspace = true }
+ed25519-dalek = { workspace = true }
 tonic = "0.8"
-tokio = { version = "1.24", features = ["macros", "rt-multi-thread"] }
-prost = "0.11"
-async-stream = "0.3.2"
-derive_more = "0.99.16"
-bytesize = "1.1.0"
-lazy_static = "1.4.0"
-num_cpus = "1.13.1"
-sha2 = "0.10.2"
-hex = "0.4.3"
-tokio-tungstenite = "0.18.0"
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
+prost = { workspace = true }
+async-stream = { workspace = true }
+derive_more = { workspace = true }
+bytesize = { workspace = true }
+lazy_static = { workspace = true }
+num_cpus = { workspace = true }
+sha2 = { workspace = true }
+hex = { workspace = true }
+tokio-tungstenite = { workspace = true }
 tunnelbroker_messages = { path = "../../shared/tunnelbroker_messages" }
-url = "2.3.1"
-futures-util = "0.3.28"
-serde_json = "1.0.96"
+url = { workspace = true }
+futures-util = { workspace = true }
+serde_json = { workspace = true }
 rand = "0.7.3"
-reqwest = { version = "0.11", features = ["json", "multipart", "stream"] }
-serde = "1.0"
+reqwest = { workspace = true, features = ["json", "multipart", "stream"] }
+serde = { workspace = true }
 comm-lib = { path = "../../shared/comm-lib" }
-uuid = { version = "1.2", features = ["v4"] }
+uuid = { workspace = true, features = ["v4"] }
 
 [build-dependencies]
 tonic-build = "0.8"
diff --git a/services/feature-flags/Cargo.toml b/services/feature-flags/Cargo.toml
--- a/services/feature-flags/Cargo.toml
+++ b/services/feature-flags/Cargo.toml
@@ -7,19 +7,19 @@
 homepage.workspace = true
 
 [dependencies]
-actix-web = "4.3"
-anyhow = "1.0"
-aws-config = "0.55"
-aws-types = "0.55"
-aws-sdk-dynamodb = "0.27"
-clap = { version = "4.0", features = ["derive", "env"] }
+actix-web = { workspace = true }
+anyhow = { workspace = true }
+aws-config = { workspace = true }
+aws-types = { workspace = true }
+aws-sdk-dynamodb = { workspace = true }
+clap = { workspace = true, features = ["derive", "env"] }
 comm-lib = { path = "../../shared/comm-lib", features = [
   "aws",
   "grpc_clients",
 ] }
-http = "0.2"
-once_cell = "1.17"
-serde = { version = "1.0", features = ["derive"] }
-tokio = { version = "1.24", features = ["rt-multi-thread", "macros"] }
-tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+http = { workspace = true }
+once_cell = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+tokio = { workspace = true, features = ["rt-multi-thread", "macros"] }
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
diff --git a/services/identity/Cargo.toml b/services/identity/Cargo.toml
--- a/services/identity/Cargo.toml
+++ b/services/identity/Cargo.toml
@@ -7,41 +7,41 @@
 
 [dependencies]
 tonic = "0.9.1"
-prost = "0.11"
-futures-util = "0.3"
-tokio = { version = "1.24", features = ["macros", "rt-multi-thread"] }
-ed25519-dalek = "1"
-clap = { version = "4.4", features = ["derive", "env"] }
-derive_more = "0.99"
+prost = { workspace = true }
+futures-util = { workspace = true }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
+ed25519-dalek = { workspace = true }
+clap = { workspace = true, features = ["derive", "env"] }
+derive_more = { workspace = true }
 comm-lib = { path = "../../shared/comm-lib", features = [
   "aws",
   "grpc_clients",
 ] }
-tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
-chrono = "0.4.31"
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter", "json"] }
+chrono = { workspace = true }
 rand = "0.8"
 constant_time_eq = "0.2.2"
-siwe = "0.3"
+siwe = { workspace = true }
 comm-opaque2 = { path = "../../shared/comm-opaque2" }
 grpc_clients = { path = "../../shared/grpc_clients" }
-hyper = "0.14"
-hyper-tungstenite = "0.11"
-once_cell = "1.17"
-hex = "0.4"
-tonic-web = "0.9.1"
-serde = { version = "1.0.159", features = ["derive"] }
-serde_json = "1.0.95"
+hyper = { workspace = true }
+hyper-tungstenite = { workspace = true }
+once_cell = { workspace = true }
+hex = { workspace = true }
+tonic-web = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
 tunnelbroker_messages = { path = "../../shared/tunnelbroker_messages" }
 identity_search_messages = { path = "../../shared/identity_search_messages" }
-uuid = { version = "1.3", features = ["v4"] }
-base64 = "0.21.2"
-regex = "1"
-tower-http = { version = "0.4", features = ["cors"] }
-http = "0.2"
-reqwest = { version = "0.11", features = ["json"] }
-futures = "0.3.30"
-url = "2.5"
+uuid = { workspace = true, features = ["v4"] }
+base64 = { workspace = true }
+regex = { workspace = true }
+tower-http = { workspace = true, features = ["cors"] }
+http = { workspace = true }
+reqwest = { workspace = true, features = ["json"] }
+futures = { workspace = true }
+url = { workspace = true }
 
 [build-dependencies]
 tonic-build = "0.9.1"
diff --git a/services/reports/Cargo.toml b/services/reports/Cargo.toml
--- a/services/reports/Cargo.toml
+++ b/services/reports/Cargo.toml
@@ -7,12 +7,12 @@
 homepage.workspace = true
 
 [dependencies]
-actix-web = "4.3"
-anyhow = "1.0"
-aws-config = "0.55"
-aws-sdk-dynamodb = "0.27"
-chrono = { version = "0.4.31", features = ["serde"] }
-clap = { version = "4.0", features = ["derive", "env"] }
+actix-web = { workspace = true }
+anyhow = { workspace = true }
+aws-config = { workspace = true }
+aws-sdk-dynamodb = { workspace = true }
+chrono = { workspace = true, features = ["serde"] }
+clap = { workspace = true, features = ["derive", "env"] }
 comm-lib = { path = "../../shared/comm-lib", features = [
   "blob-client",
   "http",
@@ -20,20 +20,20 @@
   "aws",
   "grpc_clients",
 ] }
-derive_more = "0.99"
-http = "0.2"
-maud = "0.25"
-num-traits = "0.2"
-num-derive = "0.4"
-once_cell = "1.17"
-postmark = { version = "0.8", features = ["reqwest"] }
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-serde_repr = "0.1"
-tokio = { version = "1.32", features = ["macros", "rt-multi-thread"] }
-tokio-stream = "0.1"
-tracing = "0.1"
-tracing-log = "0.1"
-tracing-subscriber = { version = "0.3", features = ["env-filter"] }
-tracing-actix-web = "0.7.3"
-uuid = { version = "1.2", features = ["v4"] }
+derive_more = { workspace = true }
+http = { workspace = true }
+maud = { workspace = true }
+num-traits = { workspace = true }
+num-derive = { workspace = true }
+once_cell = { workspace = true }
+postmark = { workspace = true, features = ["reqwest"] }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
+serde_repr = { workspace = true }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
+tokio-stream = { workspace = true }
+tracing = { workspace = true }
+tracing-log = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
+tracing-actix-web = { workspace = true }
+uuid = { workspace = true, features = ["v4"] }
diff --git a/services/tunnelbroker/Cargo.toml b/services/tunnelbroker/Cargo.toml
--- a/services/tunnelbroker/Cargo.toml
+++ b/services/tunnelbroker/Cargo.toml
@@ -8,28 +8,28 @@
 homepage.workspace = true
 
 [dependencies]
-anyhow = "1.0"
-clap = { version = "4.2", features = ["derive", "env"] }
+anyhow = { workspace = true }
+clap = { workspace = true, features = ["derive", "env"] }
 comm-lib = { path = "../../shared/comm-lib", features = [
   "aws",
   "grpc_clients",
 ] }
-futures-util = "0.3"
+futures-util = { workspace = true }
 grpc_clients = { path = "../../shared/grpc_clients" }
-hyper = "0.14"
-hyper-tungstenite = "0.11"
-once_cell = "1.17"
-prost = "0.11"
-serde_json = "1.0"
-tokio = { version = "1.24", features = ["rt-multi-thread"] }
+hyper = { workspace = true }
+hyper-tungstenite = { workspace = true }
+once_cell = { workspace = true }
+prost = { workspace = true }
+serde_json = { workspace = true }
+tokio = { workspace = true, features = ["rt-multi-thread"] }
 tonic = "0.8"
-tracing = "0.1"
-tracing-subscriber = { version = "0.3.16", features = ["env-filter"] }
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
 tunnelbroker_messages = { path = "../../shared/tunnelbroker_messages" }
-derive_more = "0.99.17"
-lapin = "2.2.1"
-chrono = "0.4.31"
-uuid = { version = "1.2", features = ["v4"] }
+derive_more = { workspace = true }
+lapin = { workspace = true }
+chrono = { workspace = true }
+uuid = { workspace = true, features = ["v4"] }
 
 [build-dependencies]
 tonic-build = "0.8"
diff --git a/shared/backup_client/Cargo.toml b/shared/backup_client/Cargo.toml
--- a/shared/backup_client/Cargo.toml
+++ b/shared/backup_client/Cargo.toml
@@ -7,20 +7,17 @@
 
 [dependencies]
 comm-lib = { path = "../comm-lib" }
-reqwest = { version = "0.11", default-features = false, features = [
-  "multipart",
-  "stream",
-] }
-url = "2.3.1"
-derive_more = "0.99"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = { version = "1.0" }
-async-stream = "0.3.2"
-sha2 = "0.10"
-hex = "0.4.3"
-tokio-tungstenite-wasm = "0.2.1"
-futures-util = "0.3"
-bincode = "1.3.3"
+reqwest = { workspace = true, features = ["multipart", "stream"] }
+url = { workspace = true }
+derive_more = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
+async-stream = { workspace = true }
+sha2 = { workspace = true }
+hex = { workspace = true }
+tokio-tungstenite-wasm = { workspace = true }
+futures-util = { workspace = true }
+bincode = { workspace = true }
 
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
 tokio = "1.24"
@@ -36,4 +33,7 @@
 [features]
 default = ["native-tls"]
 native-tls = ["reqwest/native-tls", "tokio-tungstenite/native-tls"]
-rustls-tls-webpki-roots = ["reqwest/rustls-tls-webpki-roots", "tokio-tungstenite/rustls-tls-webpki-roots"]
+rustls-tls-webpki-roots = [
+  "reqwest/rustls-tls-webpki-roots",
+  "tokio-tungstenite/rustls-tls-webpki-roots",
+]
diff --git a/shared/comm-lib/Cargo.toml b/shared/comm-lib/Cargo.toml
--- a/shared/comm-lib/Cargo.toml
+++ b/shared/comm-lib/Cargo.toml
@@ -28,41 +28,41 @@
 web = ["uuid/js"]
 
 [dependencies]
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-base64 = "0.21"
-chrono = "0.4.31"
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
+base64 = { workspace = true }
+chrono = { workspace = true }
 constant_time_eq = "0.3"
-derive_more = "0.99"
+derive_more = { workspace = true }
 grpc_clients = { path = "../grpc_clients", optional = true }
 rand = "0.8"
-tokio = "1.32"
-tracing = "0.1"
-anyhow = "1.0.74"
-hex = "0.4"
-uuid = { version = "1.2", features = ["v4"] }
-sha2 = "0.10"
+tokio = { workspace = true }
+tracing = { workspace = true }
+anyhow = { workspace = true }
+hex = { workspace = true }
+uuid = { workspace = true, features = ["v4"] }
+sha2 = { workspace = true }
 # aws dependencies
-aws-config = { version = "0.55", optional = true }
-aws-sdk-dynamodb = { version = "0.27", optional = true }
-aws-sdk-secretsmanager = { version = "0.27", optional = true }
+aws-config = { workspace = true, optional = true }
+aws-sdk-dynamodb = { workspace = true, optional = true }
+aws-sdk-secretsmanager = { workspace = true, optional = true }
 # blob client dependencies
-bytes = { version = "1.4", optional = true }
-futures-core = { version = "0.3", optional = true }
-futures-util = { version = "0.3", optional = true }
-reqwest = { version = "0.11", features = [
+bytes = { workspace = true, optional = true }
+futures-core = { workspace = true, optional = true }
+futures-util = { workspace = true, optional = true }
+reqwest = { workspace = true, features = [
   "json",
   "multipart",
   "stream",
 ], optional = true }
 # http dependencies
-actix-cors = { version = "0.6", optional = true }
-actix-web = { version = "4.3", optional = true }
-http = { version = "0.2.9", optional = true }
-actix-web-httpauth = { version = "0.8.0", optional = true }
-actix-multipart = { version = "0.6", optional = true }
-tokio-stream = { version = "0.1.14", optional = true }
+actix-cors = { workspace = true, optional = true }
+actix-web = { workspace = true, optional = true }
+http = { workspace = true, optional = true }
+actix-web-httpauth = { workspace = true, optional = true }
+actix-multipart = { workspace = true, optional = true }
+tokio-stream = { workspace = true, optional = true }
 # crypto dependencies
-aes-gcm = { version = "0.10", optional = true }
-aead = { version = "0.5", features = ["bytes"], optional = true }
-once_cell = "1.17"
+aes-gcm = { workspace = true, optional = true }
+aead = { workspace = true, features = ["bytes"], optional = true }
+once_cell = { workspace = true }
diff --git a/shared/comm-opaque2/Cargo.toml b/shared/comm-opaque2/Cargo.toml
--- a/shared/comm-opaque2/Cargo.toml
+++ b/shared/comm-opaque2/Cargo.toml
@@ -6,10 +6,10 @@
 homepage.workspace = true
 
 [dependencies]
-argon2 = "0.4"
-log = "0.4"
-opaque-ke = { version = "2.0", features = [ "argon2" ] }
+argon2 = { workspace = true }
+log = { workspace = true }
+opaque-ke = { workspace = true, features = ["argon2"] }
 rand = "0.8"
 tonic = { version = "0.9.1", default-features = false }
-wasm-bindgen = "0.2"
-serde = { version = "1.0.197", features = ["derive"] }
+wasm-bindgen = { workspace = true }
+serde = { workspace = true, features = ["derive"] }
diff --git a/shared/grpc_clients/Cargo.toml b/shared/grpc_clients/Cargo.toml
--- a/shared/grpc_clients/Cargo.toml
+++ b/shared/grpc_clients/Cargo.toml
@@ -6,12 +6,12 @@
 homepage.workspace = true
 
 [dependencies]
-derive_more = "0.99"
-prost = "0.11"
+derive_more = { workspace = true }
+prost = { workspace = true }
 tonic = { version = "0.9.1", features = ["tls-webpki-roots"] }
-tracing = "0.1"
-tracing-subscriber = { version = "0.3.16", features = ["env-filter"] }
-serde = { version = "1.0", features = ["derive"] }
+tracing = { workspace = true }
+tracing-subscriber = { workspace = true, features = ["env-filter"] }
+serde = { workspace = true, features = ["derive"] }
 
 [build-dependencies]
 tonic-build = "0.9.1"
diff --git a/shared/identity_search_messages/Cargo.toml b/shared/identity_search_messages/Cargo.toml
--- a/shared/identity_search_messages/Cargo.toml
+++ b/shared/identity_search_messages/Cargo.toml
@@ -8,6 +8,6 @@
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-serde = { version = "1.0.159", features = ["derive"] }
-serde_json = "1.0.95"
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
 websocket_messages = { path = "../websocket_messages" }
diff --git a/shared/tunnelbroker_messages/Cargo.toml b/shared/tunnelbroker_messages/Cargo.toml
--- a/shared/tunnelbroker_messages/Cargo.toml
+++ b/shared/tunnelbroker_messages/Cargo.toml
@@ -8,6 +8,6 @@
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-serde = { version = "1.0.160", features = [ "derive" ] }
-serde_json = "1.0.96"
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
 websocket_messages = { path = "../websocket_messages" }
diff --git a/shared/websocket_messages/Cargo.toml b/shared/websocket_messages/Cargo.toml
--- a/shared/websocket_messages/Cargo.toml
+++ b/shared/websocket_messages/Cargo.toml
@@ -8,5 +8,5 @@
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-serde = { version = "1.0.160", features = [ "derive" ] }
-serde_json = "1.0.96"
+serde = { workspace = true, features = ["derive"] }
+serde_json = { workspace = true }
diff --git a/web/backup-client-wasm/Cargo.lock b/web/backup-client-wasm/Cargo.lock
--- a/web/backup-client-wasm/Cargo.lock
+++ b/web/backup-client-wasm/Cargo.lock
@@ -174,9 +174,9 @@
 
 [[package]]
 name = "chrono"
-version = "0.4.34"
+version = "0.4.38"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5bc015644b92d5890fab7489e49d21f879d5c990186827d42ec511919404f38b"
+checksum = "a21f936df1771bf62b77f047b726c4625ff2e8aa607c01ec06e5a05bd8463401"
 dependencies = [
  "android-tzdata",
  "iana-time-zone",
@@ -773,9 +773,9 @@
 
 [[package]]
 name = "serde"
-version = "1.0.197"
+version = "1.0.202"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3fb1c873e1b9b056a4dc4c0c198b24c3ffa059243875552b2bd0933b1aee4ce2"
+checksum = "226b61a0d411b2ba5ff6d7f73a476ac4f8bb900373459cd00fab8512828ba395"
 dependencies = [
  "serde_derive",
 ]
@@ -793,9 +793,9 @@
 
 [[package]]
 name = "serde_derive"
-version = "1.0.197"
+version = "1.0.202"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7eb0b34b42edc17f6b7cac84a52a1c5f0e1bb2227e997ca9011ea3dd34e8610b"
+checksum = "6048858004bcff69094cd972ed40a32500f153bd3be9f716b2eed2e8217c4838"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -804,9 +804,9 @@
 
 [[package]]
 name = "serde_json"
-version = "1.0.114"
+version = "1.0.117"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5f09b1bd632ef549eaa9f60a1f8de742bdbc698e6cee2095fc84dde5f549ae0"
+checksum = "455182ea6142b14f93f4bc5320a2b31c1f266b66a4a5c858b013302a5d8cbfc3"
 dependencies = [
  "itoa",
  "ryu",
@@ -952,9 +952,9 @@
 
 [[package]]
 name = "tokio"
-version = "1.36.0"
+version = "1.37.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61285f6515fa018fb2d1e46eb21223fff441ee8db5d0f1435e8ab4f5cdb80931"
+checksum = "1adbebffeca75fcfd058afa480fb6c0b81e165a0323f9c9d39c9697e37c46787"
 dependencies = [
  "backtrace",
  "bytes",