diff --git a/Cargo.lock b/Cargo.lock
index 22d1240eb..31771bfe9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -273,7 +273,7 @@ dependencies = [
  "proc-macro-crate",
  "proc-macro2",
  "quote",
- "syn 3.0.6",
+ "syn 3.0.8",
 ]
 
 [[package]]
@@ -387,9 +387,9 @@ dependencies = [
 
 [[package]]
 name = "cc"
-version = "1.6.0"
+version = "1.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f74872d07caf508b30a21f6836e7d7016a2eaf7d9ff4f48deaa58cd8a0407630"
+checksum = "6651c9ed80effdc7db0ff72512157f901af5e3549e341e24b1dd4887d836d838"
 dependencies = [
  "find-msvc-tools",
  "jobserver",
diff --git a/dev/verify-msrv.sh b/dev/verify-msrv.sh
index acaf67cce..167587417 100755
--- a/dev/verify-msrv.sh
+++ b/dev/verify-msrv.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 set -Eeuo pipefail
-cargo install -q jaq
+cargo install -q --locked --version 3.1.1 jaq
 for CRATE in "$@"; do
     VERSION=$(cargo metadata --format-version=1 2>/dev/null | jaq --raw-output '.packages[] | select(.name == "'$CRATE'").rust_version')
     if ! rustup toolchain list | grep -q "$VERSION"; then
diff --git a/dev/verify-version.sh b/dev/verify-version.sh
index f2ff9e002..92713c579 100755
--- a/dev/verify-version.sh
+++ b/dev/verify-version.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeuo pipefail
-cargo install -q jaq
+cargo install -q --locked --version 3.1.1 jaq
 
 EXPECTED="$1"
 EXPECTED="${EXPECTED#refs/heads/release/}"