diff --git a/Cargo.lock b/Cargo.lock
index b70d214a6619..8b8d567e4f85 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -281,9 +281,9 @@ dependencies = [
 
 [[package]]
 name = "bumpalo"
-version = "3.16.0"
+version = "3.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "79296716171880943b8470b5f8d03aa55eb2e645a4874bdbb28adb49162e012c"
+checksum = "c81d250916401487680ed13b8b675660281dcfc3ab0121fe44c94bcab9eae2fb"
 dependencies = [
  "allocator-api2",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 29205a84b717..73a30e6bb959 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -360,6 +360,7 @@ json-from-wast = "0.245.0"
 # --------------------------
 arbitrary = "1.4.2"
 backtrace = "0.3.75"
+bumpalo = "3.20.0"
 mutatis = "0.3.2"
 cc = "1.2.41"
 object = { version = "0.38.1", default-features = false, features = ['read_core', 'elf'] }
diff --git a/cranelift/codegen/Cargo.toml b/cranelift/codegen/Cargo.toml
index 1bcb6905145f..103b13fa51dd 100644
--- a/cranelift/codegen/Cargo.toml
+++ b/cranelift/codegen/Cargo.toml
@@ -22,7 +22,7 @@ features = ["all-arch"]
 
 [dependencies]
 anyhow = { workspace = true, optional = true, features = ['std'] }
-bumpalo = "3"
+bumpalo = { workspace = true }
 capstone = { workspace = true, optional = true }
 cranelift-assembler-x64 = { workspace = true }
 cranelift-codegen-shared = { path = "./shared", version = "0.130.0" }
@@ -83,7 +83,7 @@ trace-log = ["regalloc2/trace-log"]
 
 # By default, an ISLE term is compiled into a single Rust function, but it can be
 # significantly inefficient for large terms (e.g. `simplify` with hundreds of rules).
-# This is because the generated Rust code for such terms is large, and `rustc` takes quadratically longer to compile huge functions. 
+# This is because the generated Rust code for such terms is large, and `rustc` takes quadratically longer to compile huge functions.
 # This feature splits large match arms in such ISLE terms into closures, for compiling ISLE terms more efficiently.
 # However, this can degrade Cranelift compilation times, introducing ABI boundaries between the closures.
 # Therefore, we recommend enabling this feature only for debugging/development purposes.
diff --git a/crates/wasmtime/Cargo.toml b/crates/wasmtime/Cargo.toml
index 90662273edd5..a77f986ec74a 100644
--- a/crates/wasmtime/Cargo.toml
+++ b/crates/wasmtime/Cargo.toml
@@ -50,7 +50,7 @@ rayon = { workspace = true, optional = true }
 object = { workspace = true, features = ['unaligned'] }
 async-trait = { workspace = true, optional = true }
 encoding_rs = { version = "0.8.31", optional = true }
-bumpalo = "3.11.0"
+bumpalo = { workspace = true }
 fxprof-processed-profile = { version = "0.8.1", optional = true }
 gimli = { workspace = true, optional = true }
 addr2line = { workspace = true, optional = true }
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index d3368a31a05f..3d028dda99bc 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -566,8 +566,8 @@ user-login = "BurntSushi"
 user-name = "Andrew Gallant"
 
 [[publisher.bumpalo]]
-version = "3.16.0"
-when = "2024-04-08"
+version = "3.20.0"
+when = "2026-02-18"
 user-id = 696
 user-login = "fitzgen"
 user-name = "Nick Fitzgerald"