diff --git a/Cargo.lock b/Cargo.lock
index f5b15c6..948e6f9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -26,12 +26,6 @@ version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d902e3d592a523def97af8f317b08ce16b7ab854c1985a0c671e6f15cebc236"
 
-[[package]]
-name = "arrayref"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
-
 [[package]]
 name = "arrayvec"
 version = "0.7.8"
@@ -46,11 +40,10 @@ checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
 
 [[package]]
 name = "blake3"
-version = "1.8.5"
+version = "1.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0aa83c34e62843d924f905e0f5c866eb1dd6545fc4d719e803d9ba6030371fce"
+checksum = "6d9e454fc11f76977dc803893aff6304ed33d6a26efae8696573bea74baa27ae"
 dependencies = [
- "arrayref",
  "arrayvec",
  "cc",
  "cfg-if",
diff --git a/Cargo.toml b/Cargo.toml
index 230d7cf..1abd261 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ default = []
 repository-tasks = []
 
 [dependencies]
-blake3 = { version = "=1.8.5", default-features = false, features = ["pure", "std"] }
+blake3 = { version = "=1.8.7", default-features = false, features = ["pure", "std"] }
 cap-fs-ext = { version = "=4.0.2", default-features = false, features = ["std"] }
 cap-std = { version = "=4.0.2", default-features = false }
 rustix = { version = "=1.1.4", default-features = false, features = ["fs", "std"] }
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index a108967..b800410 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -26,7 +26,7 @@ repository-tasks = [
 
 [dependencies]
 # Independent Golden File Worldline oracle recomputes BLAKE3 corpus witnesses.
-blake3 = { version = "=1.8.5", default-features = false, features = ["pure", "std"], optional = true }
+blake3 = { version = "=1.8.7", default-features = false, features = ["pure", "std"], optional = true }
 # Capability-relative, no-follow opens close source-scan replacement races.
 cap-fs-ext = { version = "=4.0.2", default-features = false, features = ["std"], optional = true }
 cap-std = { version = "=4.0.2", default-features = false, optional = true }