diff --git a/Cargo.lock b/Cargo.lock
index 671cd7b1464..90e79882f7a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -417,6 +417,20 @@ dependencies = [
  "thiserror 1.0.69",
 ]
 
+[[package]]
+name = "cargo_metadata"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "afc309ed89476c8957c50fb818f56fe894db857866c3e163335faa91dc34eb85"
+dependencies = [
+ "camino",
+ "cargo-platform",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+]
+
 [[package]]
 name = "cc"
 version = "1.1.31"
@@ -1062,7 +1076,7 @@ checksum = "bf47f1dcacf93614a4181e308b8341f5bf5d4f7ae2f67cc5a078df8e7023ea63"
 dependencies = [
  "ahash",
  "camino",
- "cargo_metadata",
+ "cargo_metadata 0.18.1",
  "cfg-if",
  "debug-ignore",
  "fixedbitset",
@@ -1713,7 +1727,7 @@ dependencies = [
  "bytes",
  "camino",
  "camino-tempfile",
- "cargo_metadata",
+ "cargo_metadata 0.19.0",
  "cfg-if",
  "chrono",
  "color-eyre",
diff --git a/Cargo.toml b/Cargo.toml
index f7472d8e339..16060ce7379 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -23,7 +23,7 @@ bstr = { version = "1.11.0", default-features = false, features = ["std"] }
 bytes = "1.9.0"
 camino = "1.1.9"
 camino-tempfile = "1.1.1"
-cargo_metadata = "0.18.1"
+cargo_metadata = "0.19.0"
 # We specify default-no-update here because if users just run:
 #
 # cargo build --no-default-features --features default-no-update