diff --git a/tools/checksum_updater/Cargo.lock b/tools/checksum_updater/Cargo.lock
index 9817b10b..11afe5ef 100644
--- a/tools/checksum_updater/Cargo.lock
+++ b/tools/checksum_updater/Cargo.lock
@@ -139,9 +139,9 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "bitflags"
-version = "2.11.0"
+version = "2.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
+checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
 
 [[package]]
 name = "block-buffer"
diff --git a/tools/checksum_updater/Cargo.toml b/tools/checksum_updater/Cargo.toml
index e6cbb2a3..7595a0b7 100644
--- a/tools/checksum_updater/Cargo.toml
+++ b/tools/checksum_updater/Cargo.toml
@@ -33,7 +33,7 @@ tempfile = "3.27"
 async-trait = "0.1"
 wit-bindgen = { version = "0.56.0", features = ["async"] }  # WIT binding generation; async feature for P3 support
 uuid = { version = "1.23", default-features = false }  # UUID generation for user service (deterministic, no getrandom dependency)
-bitflags = "2.6"  # Bitflags for WASI filesystem interfaces in generated bindings
+bitflags = "2.11"  # Bitflags for WASI filesystem interfaces in generated bindings
 
 [dev-dependencies]
 tokio-test = "0.4"