diff --git a/Cargo.lock b/Cargo.lock
index d975c78c4c7..c6293b16645 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5390,9 +5390,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.44.2"
+version = "1.45.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6b88822cbe49de4185e3a4cbf8321dd487cf5fe0c5c65695fef6346371e9c48"
+checksum = "75ef51a33ef1da925cea3e4eb122833cb377c61439ca401b770f54902b806779"
 dependencies = [
  "backtrace",
  "bytes",
diff --git a/Cargo.toml b/Cargo.toml
index 2731887763e..f1eb07faa6e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -85,7 +85,7 @@ strum = { version = "0.26", features = ["derive"] }
 syn = { version = "2.0.101", features = ["full"] }
 test-store = { path = "./store/test-store" }
 thiserror = "2.0.12"
-tokio = { version = "1.44.2", features = ["full"] }
+tokio = { version = "1.45.1", features = ["full"] }
 tonic = { version = "0.12.3", features = ["tls-roots", "gzip"] }
 tonic-build = { version = "0.12.3", features = ["prost"] }
 tower-http = { version = "0.5.2", features = ["cors"] }
diff --git a/graph/Cargo.toml b/graph/Cargo.toml
index 3703f03709d..bb4287b2c31 100644
--- a/graph/Cargo.toml
+++ b/graph/Cargo.toml
@@ -68,7 +68,7 @@ slog-envlogger = "2.1.0"
 slog-term = "2.7.0"
 petgraph = "0.8.1"
 tiny-keccak = "1.5.0"
-tokio = { version = "1.44.2", features = [
+tokio = { version = "1.45.1", features = [
     "time",
     "sync",
     "macros",
diff --git a/tests/Cargo.toml b/tests/Cargo.toml
index 42d3aaf7d48..cca7d4422a5 100644
--- a/tests/Cargo.toml
+++ b/tests/Cargo.toml
@@ -19,7 +19,7 @@ graph-runtime-wasm = { path = "../runtime/wasm" }
 serde = { workspace = true }
 serde_yaml = { workspace = true }
 slog = { version = "2.7.0", features = ["release_max_level_trace", "max_level_trace"] }
-tokio = { version = "1.44.2", features = ["rt", "macros", "process"] }
+tokio = { version = "1.45.1", features = ["rt", "macros", "process"] }
 # Once graph upgrades to web3 0.19, we don't need this anymore. The version
 # here needs to be kept in sync with the web3 version that the graph crate
 # uses until then