diff --git a/tools/checksum_updater/Cargo.lock b/tools/checksum_updater/Cargo.lock
index 3438c2d3..5fd71a87 100644
--- a/tools/checksum_updater/Cargo.lock
+++ b/tools/checksum_updater/Cargo.lock
@@ -1705,9 +1705,9 @@ dependencies = [
 
 [[package]]
 name = "tempfile"
-version = "3.24.0"
+version = "3.25.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "655da9c7eb6305c55742045d5a8d2037996d61d8de95806335c7c86ce0f82e9c"
+checksum = "0136791f7c95b1f6dd99f9cc786b91bb81c3800b639b3478e561ddb7be95e5f1"
 dependencies = [
  "fastrand",
  "getrandom 0.3.4",
diff --git a/tools/checksum_updater/Cargo.toml b/tools/checksum_updater/Cargo.toml
index 9026a3b8..5085c8ef 100644
--- a/tools/checksum_updater/Cargo.toml
+++ b/tools/checksum_updater/Cargo.toml
@@ -29,7 +29,7 @@ regex = "1.12"
 futures = "0.3"
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
-tempfile = "3.24"
+tempfile = "3.25"
 async-trait = "0.1"
 wit-bindgen = "0.52.0"  # WIT binding generation for macro usage (MUST match CLI version in wasm_toolchain.bzl)
 uuid = { version = "1.20", default-features = false }  # UUID generation for user service (deterministic, no getrandom dependency)