diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 97774561..fba62504 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -686,7 +686,7 @@ version = "3.3.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.test_bin]]
-version = "0.5.0"
+version = "0.6.1"
 criteria = "safe-to-run"
 
 [[exemptions.thiserror]]
@@ -945,8 +945,12 @@ criteria = "safe-to-deploy"
 version = "0.8.50"
 criteria = "safe-to-run"
 
+[[exemptions.zeroize]]
+version = "1.9.0"
+criteria = "safe-to-deploy"
+
 [[exemptions.zeroize_derive]]
-version = "1.4.3"
+version = "1.5.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.zmij]]
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index 84cf6f3e..d04f1f73 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -573,11 +573,6 @@ criteria = "safe-to-deploy"
 delta = "0.243.0 -> 0.244.0"
 notes = "The Bytecode Alliance is the author of this crate"
 
-[[audits.bytecode-alliance.audits.zeroize]]
-who = "Pat Hickey <p.hickey@f5.com>"
-criteria = "safe-to-deploy"
-delta = "1.8.1 -> 1.8.2"
-
 [[audits.embark-studios.audits.cfg_aliases]]
 who = "Johan Andersson <opensource@embark-studios.com>"
 criteria = "safe-to-deploy"
@@ -2096,16 +2091,6 @@ criteria = "safe-to-deploy"
 delta = "0.1.1 -> 0.2.0"
 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
 
-[[audits.mozilla.audits.zeroize]]
-who = "Benjamin Beurdouche <beurdouche@mozilla.com>"
-criteria = "safe-to-deploy"
-version = "1.8.1"
-notes = """
-This code DOES contain unsafe code required to internally call volatiles
-for deleting data. This is expected and documented behavior.
-"""
-aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
-
 [[audits.zcash.audits.aho-corasick]]
 who = "Jack Grigg <jack@electriccoin.co>"
 criteria = "safe-to-deploy"