diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 43fb3ed..0615aa8 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -4,7 +4,7 @@ on:
 
 env:
   DOCKER_BUILDKIT: "1"
-  K8S_OPENAPI_ENABLED_VERSION: "1.31"
+  K8S_OPENAPI_ENABLED_VERSION: "1.32"
 
 jobs:
   lint:
@@ -30,7 +30,7 @@ jobs:
       with:
         toolchain: 1.89.0
         command: install
-        args: --locked cargo-deny --version=0.16.2
+        args: --locked cargo-deny --version=0.19.0
     - uses: actions-rs/cargo@v1
       with:
         toolchain: 1.89.0
diff --git a/Cargo.toml b/Cargo.toml
index b9cedf1..a60423c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -13,15 +13,15 @@ include = ["src/**/*", "LICENSE", "README.md", "CHANGELOG.md"]
 [dependencies]
 async-trait = "0.1"
 futures = "0.3"
-kube = { version = "2.0.1", default-features = false, features = ["client"] }
-kube-runtime = "2.0.1"
+kube = { version = "3.0.0", default-features = false, features = ["client"] }
+kube-runtime = "3.0.0"
 rand = "0.9.2"
 serde = "1"
 thiserror = "2.0.17"
 tracing = "0.1"
 
 [dev-dependencies]
-k8s-openapi = { version = "0.26.0", default-features = false, features = ["v1_31"] }
+k8s-openapi = { version = "0.27.0", default-features = false, features = ["v1_32"] }
 tokio = "1"
 
 [package.metadata.docs.rs]
diff --git a/deny.toml b/deny.toml
index 9e3b3ad..c16d002 100644
--- a/deny.toml
+++ b/deny.toml
@@ -16,8 +16,6 @@ multiple-versions = "deny"
 skip = [
     { name = "thiserror", version = "1.0.69" },
     { name = "thiserror-impl", version = "1.0.69" },
-    # waiting on https://github.com/kube-rs/kube/pull/1826 to merge
-    { name = "hashbrown", version = "0.15.5" },
 ]
 
 # Use `tracing` instead.