diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7645891..3c61f0f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,4 +18,4 @@ jobs:
   # and MSRV is read from rust-version. Anything that needed configuring would be
   # a behaviour change smuggled in by an adoption PR, so there is nothing here.
   ci:
-    uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@a62ab10603151071744cec0b4e3638aa6406d4e4
+    uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@f9802dca64a95eb881fd05dd3f4f16e53b97f2b3
diff --git a/Cargo.lock b/Cargo.lock
index 01d05a9..3e53766 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -438,9 +438,9 @@ dependencies = [
 
 [[package]]
 name = "uuid"
-version = "1.23.4"
+version = "1.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf80a72845275afea99e7f2b434723d3bc7e38470fcd1c7ed39a599c73319a53"
+checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f"
 dependencies = [
  "js-sys",
  "wasm-bindgen",
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
index be83c3c..493e9e2 100644
--- a/supply-chain/audits.toml
+++ b/supply-chain/audits.toml
@@ -9,23 +9,41 @@ user-id = 347968 # Albert Hui (h4x0r)
 start = "2026-06-13"
 end = "2027-08-01"
 
+[[trusted.ewf]]
+criteria = "safe-to-deploy"
+user-id = 347968 # Albert Hui (h4x0r)
+start = "2026-03-05"
+end = "2027-08-07"
+
+[[trusted.forensic-vfs]]
+criteria = "safe-to-deploy"
+user-id = 347968 # Albert Hui (h4x0r)
+start = "2026-07-07"
+end = "2027-08-07"
+
 [[trusted.forensicnomicon]]
 criteria = "safe-to-deploy"
 user-id = 347968 # Albert Hui (h4x0r)
 start = "2026-06-05"
-end = "2027-08-01"
+end = "2027-08-07"
 
 [[trusted.forensicnomicon-core]]
 criteria = "safe-to-deploy"
 user-id = 347968 # Albert Hui (h4x0r)
 start = "2026-06-28"
-end = "2027-08-01"
+end = "2027-08-07"
 
 [[trusted.forensicnomicon-data]]
 criteria = "safe-to-deploy"
 user-id = 347968 # Albert Hui (h4x0r)
 start = "2026-06-28"
-end = "2027-08-01"
+end = "2027-08-07"
+
+[[trusted.jsonguard]]
+criteria = "safe-to-deploy"
+user-id = 347968 # Albert Hui (h4x0r)
+start = "2026-05-21"
+end = "2027-08-07"
 
 [[trusted.lnk-core]]
 criteria = "safe-to-deploy"
@@ -39,6 +57,18 @@ user-id = 347968 # Albert Hui (h4x0r)
 start = "2026-06-13"
 end = "2027-08-01"
 
+[[trusted.safe-decode]]
+criteria = "safe-to-deploy"
+user-id = 347968 # Albert Hui (h4x0r)
+start = "2026-08-02"
+end = "2027-08-07"
+
+[[trusted.safe-read]]
+criteria = "safe-to-deploy"
+user-id = 347968 # Albert Hui (h4x0r)
+start = "2026-07-15"
+end = "2027-08-07"
+
 [[trusted.segb-core]]
 criteria = "safe-to-deploy"
 user-id = 347968 # Albert Hui (h4x0r)
@@ -69,6 +99,12 @@ user-id = 347968 # Albert Hui (h4x0r)
 start = "2026-06-13"
 end = "2027-08-01"
 
+[[trusted.state-history-forensic]]
+criteria = "safe-to-deploy"
+user-id = 347968 # Albert Hui (h4x0r)
+start = "2026-06-16"
+end = "2027-08-07"
+
 [[trusted.winreg-artifacts]]
 criteria = "safe-to-deploy"
 user-id = 347968 # Albert Hui (h4x0r)
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 3a76a17..c8597ee 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -144,7 +144,7 @@ version = "1.0.24"
 criteria = "safe-to-deploy"
 
 [[exemptions.uuid]]
-version = "1.23.4"
+version = "1.20.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.wasm-bindgen]]
@@ -166,7 +166,3 @@ criteria = "safe-to-deploy"
 [[exemptions.web-time]]
 version = "1.1.0"
 criteria = "safe-to-deploy"
-
-[[exemptions.zmij]]
-version = "1.0.21"
-criteria = "safe-to-deploy"
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index 2b32ca2..3713c86 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -327,3 +327,21 @@ who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 criteria = "safe-to-deploy"
 delta = "1.0.94 -> 1.0.106"
 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
+
+[[audits.mozilla.audits.zmij]]
+who = "Benjamin VanderSloot <bvandersloot@mozilla.com>"
+criteria = "safe-to-deploy"
+version = "1.0.20"
+notes = """
+A lot of unsafe code here, included as a dependency of serde_json.
+The testing is very thorough, validating all 32-bit floats, and 100m
+random 64-bit floats. No unsafe imports.
+"""
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
+
+[[audits.mozilla.audits.zmij]]
+who = "Ben Dean-Kawamura <bdk@mozilla.com>"
+criteria = "safe-to-deploy"
+delta = "1.0.20 -> 1.0.21"
+notes = "Almost no code changes.  No new unsafe code."
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"