diff --git a/Cargo.lock b/Cargo.lock
index dde048a..f991ba5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1719,6 +1719,16 @@ dependencies = [
  "pin-project-lite",
 ]
 
+[[package]]
+name = "http-serde"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f056c8559e3757392c8d091e796416e4649d8e49e88b8d76df6c002f05027fd"
+dependencies = [
+ "http",
+ "serde",
+]
+
 [[package]]
 name = "httparse"
 version = "1.10.1"
@@ -2473,9 +2483,9 @@ dependencies = [
 
 [[package]]
 name = "octocrab"
-version = "0.49.9"
+version = "0.54.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ddbc3bb87e8c680febf16f56855bbd8b44a38e18c913334213ab34908e71a09"
+checksum = "432fad6f447c52acda76a7a0660f022b21f4c42f373bbdc29f04332ba19a89bf"
 dependencies = [
  "arc-swap",
  "async-trait",
@@ -2484,21 +2494,21 @@ dependencies = [
  "cargo_metadata",
  "cfg-if",
  "chrono",
- "either",
  "futures",
  "futures-util",
  "getrandom 0.2.17",
  "http",
  "http-body",
  "http-body-util",
+ "http-serde",
  "hyper",
  "hyper-rustls",
  "hyper-timeout",
  "hyper-util",
  "jsonwebtoken",
- "once_cell",
  "percent-encoding",
  "pin-project",
+ "rustls",
  "secrecy",
  "serde",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index dc82e08..8bc629f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -54,7 +54,7 @@ sqlx = { version = "0.8.1", default-features = false, features = ["runtime-tokio
 # GitHub API. Use Octocrab's AWS-LC JWT backend instead of its default
 # `rust_crypto` backend, which currently pulls the unfixed rsa 0.9 timing
 # advisory (RUSTSEC-2023-0071).
-octocrab = { version = "0.49", default-features = false, features = [
+octocrab = { version = "0.54", default-features = false, features = [
     "default-client",
     "follow-redirect",
     "jwt-aws-lc-rs",