diff --git a/Cargo.lock b/Cargo.lock
index 0aa0866057e55..9fcaf0fe188f1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3884,7 +3884,7 @@ checksum = "d5da4d3249c4ebd1e6de32134fb82a720db3e7a978ad38e576d64e6a22c6e308"
 dependencies = [
  "async-trait",
  "futures",
- "k8s-openapi",
+ "k8s-openapi 0.22.0",
  "kube",
  "kube-runtime",
  "rand 0.8.5",
@@ -3906,6 +3906,19 @@ dependencies = [
  "serde_json",
 ]
 
+[[package]]
+name = "k8s-openapi"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c8847402328d8301354c94d605481f25a6bdc1ed65471fd96af8eca71141b13"
+dependencies = [
+ "base64 0.22.0",
+ "chrono",
+ "serde",
+ "serde-value",
+ "serde_json",
+]
+
 [[package]]
 name = "keyed_priority_queue"
 version = "0.4.1"
@@ -3921,9 +3934,9 @@ version = "0.92.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "231c5a5392d9e2a9b0d923199760d3f1dd73b95288f2871d16c7c90ba4954506"
 dependencies = [
- "k8s-openapi",
- "kube-client",
- "kube-core",
+ "k8s-openapi 0.22.0",
+ "kube-client 0.92.1",
+ "kube-core 0.92.1",
  "kube-derive",
  "kube-runtime",
 ]
@@ -3948,8 +3961,8 @@ dependencies = [
  "hyper-timeout 0.5.1",
  "hyper-util",
  "jsonpath-rust",
- "k8s-openapi",
- "kube-core",
+ "k8s-openapi 0.22.0",
+ "kube-core 0.92.1",
  "openssl",
  "pem",
  "rand 0.8.5",
@@ -3966,6 +3979,44 @@ dependencies = [
  "tracing",
 ]
 
+[[package]]
+name = "kube-client"
+version = "0.95.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "31c2355f5c9d8a11900e71a6fe1e47abd5ec45bf971eb4b162ffe97b46db9bb7"
+dependencies = [
+ "base64 0.22.0",
+ "bytes",
+ "chrono",
+ "either",
+ "futures",
+ "home",
+ "http 1.1.0",
+ "http-body 1.0.0",
+ "http-body-util",
+ "hyper 1.4.1",
+ "hyper-openssl",
+ "hyper-timeout 0.5.1",
+ "hyper-util",
+ "jsonpath-rust",
+ "k8s-openapi 0.23.0",
+ "kube-core 0.95.0",
+ "openssl",
+ "pem",
+ "rand 0.8.5",
+ "secrecy",
+ "serde",
+ "serde_json",
+ "serde_yaml",
+ "thiserror",
+ "tokio",
+ "tokio-tungstenite 0.24.0",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tracing",
+]
+
 [[package]]
 name = "kube-core"
 version = "0.92.1"
@@ -3976,13 +4027,30 @@ dependencies = [
  "form_urlencoded",
  "http 1.1.0",
  "json-patch",
- "k8s-openapi",
+ "k8s-openapi 0.22.0",
  "schemars",
  "serde",
  "serde_json",
  "thiserror",
 ]
 
+[[package]]
+name = "kube-core"
+version = "0.95.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3030bd91c9db544a50247e7d48d7db9cf633c172732dce13351854526b1e666"
+dependencies = [
+ "chrono",
+ "form_urlencoded",
+ "http 1.1.0",
+ "json-patch",
+ "k8s-openapi 0.23.0",
+ "serde",
+ "serde-value",
+ "serde_json",
+ "thiserror",
+]
+
 [[package]]
 name = "kube-derive"
 version = "0.92.1"
@@ -4012,8 +4080,8 @@ dependencies = [
  "hashbrown 0.14.5",
  "json-patch",
  "jsonptr",
- "k8s-openapi",
- "kube-client",
+ "k8s-openapi 0.22.0",
+ "kube-client 0.92.1",
  "parking_lot",
  "pin-project",
  "serde",
@@ -5063,7 +5131,7 @@ dependencies = [
  "async-trait",
  "chrono",
  "futures",
- "k8s-openapi",
+ "k8s-openapi 0.22.0",
  "kube",
  "mz-ore",
  "mz-repr",
@@ -5962,7 +6030,7 @@ dependencies = [
  "clap",
  "fail",
  "futures",
- "k8s-openapi",
+ "k8s-openapi 0.22.0",
  "kube",
  "maplit",
  "mz-cloud-resources",
@@ -6044,7 +6112,7 @@ dependencies = [
  "futures",
  "http 1.1.0",
  "k8s-controller",
- "k8s-openapi",
+ "k8s-openapi 0.22.0",
  "kube",
  "maplit",
  "mz-alloc",
@@ -10696,6 +10764,18 @@ dependencies = [
  "tungstenite 0.23.0",
 ]
 
+[[package]]
+name = "tokio-tungstenite"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edc5f74e248dc973e0dbb7b74c7e0d6fcc301c694ff50049504004ef4d0cdcd9"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite 0.24.0",
+]
+
 [[package]]
 name = "tokio-util"
 version = "0.7.4"
@@ -11057,6 +11137,24 @@ dependencies = [
  "utf-8",
 ]
 
+[[package]]
+name = "tungstenite"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18e5b8366ee7a95b16d32197d0b2604b43a0be89dc5fac9f8e96ccafbaedda8a"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http 1.1.0",
+ "httparse",
+ "log",
+ "rand 0.8.5",
+ "sha1",
+ "thiserror",
+ "utf-8",
+]
+
 [[package]]
 name = "twox-hash"
 version = "1.6.3"
@@ -11803,10 +11901,10 @@ dependencies = [
  "hyper-util",
  "indexmap 1.9.1",
  "insta",
- "k8s-openapi",
+ "k8s-openapi 0.22.0",
  "kube",
- "kube-client",
- "kube-core",
+ "kube-client 0.95.0",
+ "kube-core 0.92.1",
  "libc",
  "libz-sys",
  "linux-raw-sys",
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index 09895c0fc6f18..0bc6f6307d4d3 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -68,7 +68,7 @@ indexmap = { version = "1.9.1", default-features = false, features = ["std"] }
 insta = { version = "1.33.0", features = ["json"] }
 k8s-openapi = { version = "0.22.0", default-features = false, features = ["schemars", "v1_29"] }
 kube = { version = "0.92.1", default-features = false, features = ["client", "derive", "openssl-tls", "runtime", "ws"] }
-kube-client = { version = "0.92.1", default-features = false, features = ["jsonpatch", "openssl-tls", "ws"] }
+kube-client = { version = "0.95.0", default-features = false, features = ["jsonpatch", "openssl-tls", "ws"] }
 kube-core = { version = "0.92.1", default-features = false, features = ["jsonpatch", "schema", "ws"] }
 libc = { version = "0.2.169", features = ["extra_traits", "use_std"] }
 libz-sys = { version = "1.1.8", features = ["static"] }
@@ -203,7 +203,7 @@ indexmap = { version = "1.9.1", default-features = false, features = ["std"] }
 insta = { version = "1.33.0", features = ["json"] }
 k8s-openapi = { version = "0.22.0", default-features = false, features = ["schemars", "v1_29"] }
 kube = { version = "0.92.1", default-features = false, features = ["client", "derive", "openssl-tls", "runtime", "ws"] }
-kube-client = { version = "0.92.1", default-features = false, features = ["jsonpatch", "openssl-tls", "ws"] }
+kube-client = { version = "0.95.0", default-features = false, features = ["jsonpatch", "openssl-tls", "ws"] }
 kube-core = { version = "0.92.1", default-features = false, features = ["jsonpatch", "schema", "ws"] }
 libc = { version = "0.2.169", features = ["extra_traits", "use_std"] }
 libz-sys = { version = "1.1.8", features = ["static"] }