diff --git a/Cargo.lock b/Cargo.lock
index 331a1ec9bf095..0082fb402fb83 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -83,6 +83,54 @@ version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4b46cbb362ab8752921c97e041f5e366ee6297bd428a31275b9fcf1e380f7299"
 
+[[package]]
+name = "anstream"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d664a92ecae85fd0a7392615844904654d1d5f5514837f471ddef4a057aba1b6"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7079075b41f533b8c61d2a4d073c4676e1f8b249ff94a393b0595db304e0dd87"
+
+[[package]]
+name = "anstyle-parse"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c75ac65da39e5fe5ab759307499ddad880d724eed2f6ce5b5e8a26f4f387928c"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e28923312444cdd728e4738b3f9c9cac739500909bb3d3c94b43551b16517648"
+dependencies = [
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cd54b81ec8d6180e24654d0b371ad22fc3dd083b6ff8ba325b72e00c87660a7"
+dependencies = [
+ "anstyle",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "anyhow"
 version = "1.0.66"
@@ -1097,33 +1145,49 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "3.2.24"
+version = "3.2.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eef2b3ded6a26dfaec672a742c93c8cf6b689220324da509ec5caa20de55dc83"
+checksum = "4ea181bf566f71cb9a5d17a59e1871af638180a18fb0035c92ae62b705207123"
 dependencies = [
- "atty",
  "bitflags 1.3.2",
- "clap_derive",
- "clap_lex",
+ "clap_lex 0.2.2",
  "indexmap 1.9.1",
- "once_cell",
- "strsim",
- "termcolor",
- "terminal_size",
  "textwrap",
 ]
 
+[[package]]
+name = "clap"
+version = "4.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52bdc885e4cacc7f7c9eedc1ef6da641603180c783c41a15c264944deeaab642"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb7fb5e4e979aec3be7791562fcba452f94ad85e954da024396433e0e25a79e9"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex 0.6.0",
+ "strsim",
+ "terminal_size 0.3.0",
+]
+
 [[package]]
 name = "clap_derive"
-version = "3.2.24"
+version = "4.4.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d756c5824fc5c0c1ee8e36000f576968dbcb2081def956c83fad6f40acd46f96"
+checksum = "cf9804afaaf59a91e75b022a30fb7229a7901f60c755489cc61c9b423b836442"
 dependencies = [
  "heck",
- "proc-macro-error",
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 2.0.39",
 ]
 
 [[package]]
@@ -1135,6 +1199,12 @@ dependencies = [
  "os_str_bytes",
 ]
 
+[[package]]
+name = "clap_lex"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "702fc72eb24e5a1e48ce58027a675bc24edd52096d5397d4aea7c6dd9eca0bd1"
+
 [[package]]
 name = "cmake"
 version = "0.1.48"
@@ -1154,6 +1224,12 @@ dependencies = [
  "unicode-width",
 ]
 
+[[package]]
+name = "colorchoice"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acbf1af155f9b9ef647e42cdc158db4b64a1b61f743629225fde6f3e0be2a7c7"
+
 [[package]]
 name = "columnation"
 version = "0.1.0"
@@ -1328,7 +1404,7 @@ dependencies = [
  "atty",
  "cast",
  "ciborium",
- "clap",
+ "clap 3.2.25",
  "criterion-plot",
  "futures",
  "itertools",
@@ -3361,7 +3437,7 @@ version = "0.3.0"
 dependencies = [
  "assert_cmd",
  "axum",
- "clap",
+ "clap 4.4.13",
  "csv",
  "dirs",
  "hyper",
@@ -3599,7 +3675,7 @@ dependencies = [
  "axum",
  "bytes",
  "bytesize",
- "clap",
+ "clap 4.4.13",
  "futures",
  "hyper",
  "hyper-openssl",
@@ -3706,7 +3782,7 @@ name = "mz-catalog-debug"
 version = "0.81.0-dev"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.4.13",
  "mz-adapter",
  "mz-build-info",
  "mz-catalog",
@@ -3791,7 +3867,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "bytesize",
- "clap",
+ "clap 4.4.13",
  "crossbeam-channel",
  "dec",
  "differential-dataflow",
@@ -3857,7 +3933,7 @@ version = "0.81.0-dev"
 dependencies = [
  "anyhow",
  "axum",
- "clap",
+ "clap 4.4.13",
  "fail",
  "futures",
  "mz-alloc",
@@ -3892,7 +3968,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "bytesize",
- "clap",
+ "clap 4.4.13",
  "crossbeam-channel",
  "dec",
  "differential-dataflow",
@@ -4063,7 +4139,7 @@ dependencies = [
  "bytesize",
  "cc",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "datadriven",
  "fail",
  "fallible-iterator",
@@ -4261,7 +4337,7 @@ dependencies = [
  "anyhow",
  "axum",
  "base64 0.13.1",
- "clap",
+ "clap 4.4.13",
  "derivative",
  "futures",
  "jsonwebtoken",
@@ -4303,7 +4379,7 @@ name = "mz-frontegg-mock"
 version = "0.0.0"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.4.13",
  "hyper",
  "jsonwebtoken",
  "mz-frontegg-auth",
@@ -4345,7 +4421,7 @@ dependencies = [
  "anyhow",
  "byteorder",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "criterion",
  "differential-dataflow",
  "itertools",
@@ -4375,7 +4451,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "crossbeam",
  "fancy-regex",
  "futures",
@@ -4531,7 +4607,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "fail",
  "futures",
  "k8s-openapi",
@@ -4583,7 +4659,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "async-trait",
- "clap",
+ "clap 4.4.13",
  "futures-core",
  "http",
  "humantime",
@@ -4609,7 +4685,7 @@ dependencies = [
  "atty",
  "bytes",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "compact_bytes",
  "console-subscriber",
  "ctor",
@@ -4704,7 +4780,7 @@ dependencies = [
  "async-stream",
  "async-trait",
  "bytes",
- "clap",
+ "clap 4.4.13",
  "criterion",
  "datadriven",
  "differential-dataflow",
@@ -4832,7 +4908,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "bytes",
- "clap",
+ "clap 4.4.13",
  "datadriven",
  "fallible-iterator",
  "mz-ore",
@@ -5185,7 +5261,7 @@ dependencies = [
  "aws-config",
  "aws-sdk-s3",
  "bytefmt",
- "clap",
+ "clap 4.4.13",
  "futures",
  "indicatif",
  "mz-aws-util",
@@ -5227,7 +5303,7 @@ name = "mz-server-core"
 version = "0.0.0"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.4.13",
  "futures",
  "mz-ore",
  "openssl",
@@ -5245,7 +5321,7 @@ dependencies = [
  "anyhow",
  "async-stream",
  "async-trait",
- "clap",
+ "clap 4.4.13",
  "crossbeam-channel",
  "futures",
  "http",
@@ -5288,7 +5364,7 @@ dependencies = [
  "aws-sdk-sts",
  "bitflags 1.3.2",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "datadriven",
  "enum-kinds",
  "fail",
@@ -5403,7 +5479,7 @@ dependencies = [
  "anyhow",
  "bytes",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "dec",
  "fallible-iterator",
  "futures",
@@ -5505,7 +5581,7 @@ name = "mz-stash-debug"
 version = "0.81.0-dev"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.4.13",
  "futures",
  "mz-adapter",
  "mz-build-info",
@@ -5554,7 +5630,7 @@ dependencies = [
  "bytes",
  "bytesize",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "crossbeam-channel",
  "csv-core",
  "datadriven",
@@ -5832,7 +5908,7 @@ dependencies = [
  "byteorder",
  "bytes",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "flate2",
  "futures",
  "globset",
@@ -6560,7 +6636,7 @@ dependencies = [
  "async-trait",
  "axum",
  "bytes",
- "clap",
+ "clap 4.4.13",
  "differential-dataflow",
  "futures",
  "humantime",
@@ -8422,13 +8498,23 @@ dependencies = [
  "windows-sys 0.48.0",
 ]
 
+[[package]]
+name = "terminal_size"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21bebf2b7c9e0a515f6e0f8c51dc0f8e4696391e6f1ff30379559f8365fb0df7"
+dependencies = [
+ "rustix 0.38.21",
+ "windows-sys 0.48.0",
+]
+
 [[package]]
 name = "textwrap"
 version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "222a222a5bfe1bba4a77b45ec488a741b3cb8872e5e499451fd7d0129c9c7c3d"
 dependencies = [
- "terminal_size",
+ "terminal_size 0.2.6",
 ]
 
 [[package]]
@@ -9471,7 +9557,7 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e686886bc078bc1b0b600cac0147aadb815089b6e4da64016cbd754b6342700f"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.48.0",
 ]
 
 [[package]]
@@ -9495,7 +9581,16 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.48.0",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.0",
 ]
 
 [[package]]
@@ -9513,6 +9608,21 @@ dependencies = [
  "windows_x86_64_msvc 0.48.0",
 ]
 
+[[package]]
+name = "windows-targets"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a18201040b24831fbb9e4eb208f8892e1f50a37feb53cc7ff887feb8f50e7cd"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.0",
+ "windows_aarch64_msvc 0.52.0",
+ "windows_i686_gnu 0.52.0",
+ "windows_i686_msvc 0.52.0",
+ "windows_x86_64_gnu 0.52.0",
+ "windows_x86_64_gnullvm 0.52.0",
+ "windows_x86_64_msvc 0.52.0",
+]
+
 [[package]]
 name = "windows_aarch64_gnullvm"
 version = "0.42.2"
@@ -9525,6 +9635,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "91ae572e1b79dba883e0d315474df7305d12f569b400fcf90581b06062f7e1bc"
 
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7764e35d4db8a7921e09562a0304bf2f93e0a51bfccee0bd0bb0b666b015ea"
+
 [[package]]
 name = "windows_aarch64_msvc"
 version = "0.42.2"
@@ -9537,6 +9653,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b2ef27e0d7bdfcfc7b868b317c1d32c641a6fe4629c171b8928c7b08d98d7cf3"
 
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbaa0368d4f1d2aaefc55b6fcfee13f41544ddf36801e793edbbfd7d7df075ef"
+
 [[package]]
 name = "windows_i686_gnu"
 version = "0.42.2"
@@ -9549,6 +9671,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "622a1962a7db830d6fd0a69683c80a18fda201879f0f447f065a3b7467daa241"
 
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a28637cb1fa3560a16915793afb20081aba2c92ee8af57b4d5f28e4b3e7df313"
+
 [[package]]
 name = "windows_i686_msvc"
 version = "0.42.2"
@@ -9561,6 +9689,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4542c6e364ce21bf45d69fdd2a8e455fa38d316158cfd43b3ac1c5b1b19f8e00"
 
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ffe5e8e31046ce6230cc7215707b816e339ff4d4d67c65dffa206fd0f7aa7b9a"
+
 [[package]]
 name = "windows_x86_64_gnu"
 version = "0.42.2"
@@ -9573,6 +9707,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ca2b8a661f7628cbd23440e50b05d705db3686f894fc9580820623656af974b1"
 
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d6fa32db2bc4a2f5abeacf2b69f7992cd09dca97498da74a151a3132c26befd"
+
 [[package]]
 name = "windows_x86_64_gnullvm"
 version = "0.42.2"
@@ -9585,6 +9725,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7896dbc1f41e08872e9d5e8f8baa8fdd2677f29468c4e156210174edc7f7b953"
 
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a657e1e9d3f514745a572a6846d3c7aa7dbe1658c056ed9c3344c4109a6949e"
+
 [[package]]
 name = "windows_x86_64_msvc"
 version = "0.42.2"
@@ -9597,6 +9743,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1a515f5799fe4961cb532f983ce2b23082366b898e52ffbce459c86f67c8378a"
 
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dff9641d1cd4be8d1a070daf9e3773c5f67e78b4d9d42263020c057706765c04"
+
 [[package]]
 name = "winnow"
 version = "0.5.4"
@@ -9636,7 +9788,7 @@ dependencies = [
  "bytes",
  "cc",
  "chrono",
- "clap",
+ "clap 4.4.13",
  "console",
  "criterion",
  "crossbeam-deque",
diff --git a/src/balancerd/Cargo.toml b/src/balancerd/Cargo.toml
index 54a66c64af252..5acd5e0183cc6 100644
--- a/src/balancerd/Cargo.toml
+++ b/src/balancerd/Cargo.toml
@@ -12,7 +12,7 @@ async-trait = "0.1.68"
 axum = { version = "0.6.20" }
 bytes = "1.3.0"
 bytesize = "1.1.0"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 futures = "0.3.25"
 hyper = { version = "0.14.23", features = ["http1", "server"] }
 hyper-openssl = "0.9.2"
diff --git a/src/catalog-debug/Cargo.toml b/src/catalog-debug/Cargo.toml
index f173b452ed079..348d04d91ae7c 100644
--- a/src/catalog-debug/Cargo.toml
+++ b/src/catalog-debug/Cargo.toml
@@ -8,7 +8,7 @@ publish = false
 
 [dependencies]
 anyhow = "1.0.66"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 mz-adapter = { path = "../adapter" }
 mz-build-info = { path = "../build-info" }
 mz-catalog = { path = "../catalog" }
diff --git a/src/cluster/Cargo.toml b/src/cluster/Cargo.toml
index c81ea3293d2aa..b750e8b705223 100644
--- a/src/cluster/Cargo.toml
+++ b/src/cluster/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 anyhow = "1.0.66"
 async-trait = "0.1.68"
 bytesize = "1.1.0"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 crossbeam-channel = "0.5.8"
 dec = { version = "0.4.8", features = ["serde"] }
 differential-dataflow = "0.12.0"
diff --git a/src/clusterd/Cargo.toml b/src/clusterd/Cargo.toml
index f71c37a6061a6..442cbdbf402f3 100644
--- a/src/clusterd/Cargo.toml
+++ b/src/clusterd/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 axum = "0.6.20"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.25"
 mz-alloc = { path = "../alloc" }
diff --git a/src/compute/Cargo.toml b/src/compute/Cargo.toml
index 6fd94dee4c169..bba134c3a4379 100644
--- a/src/compute/Cargo.toml
+++ b/src/compute/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 anyhow = "1.0.66"
 async-trait = "0.1.68"
 bytesize = "1.1.0"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 crossbeam-channel = "0.5.8"
 dec = { version = "0.4.8", features = ["serde"] }
 differential-dataflow = "0.12.0"
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index 01c4bdacecedc..6f97262395dc9 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -20,7 +20,7 @@ base64 = "0.13.1"
 bytes = "1.3.0"
 bytesize = "1.1.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["wrap_help", "env", "derive"] }
+clap = { version = "4.4.13", features = ["wrap_help", "env", "derive"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.25"
 headers = "0.3.8"
diff --git a/src/frontegg-auth/Cargo.toml b/src/frontegg-auth/Cargo.toml
index 372d0e9f001ed..49b87c28f0993 100644
--- a/src/frontegg-auth/Cargo.toml
+++ b/src/frontegg-auth/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 base64 = "0.13.1"
-clap = { version = "3.2.24", features = ["wrap_help", "env", "derive"] }
+clap = { version = "4.4.13", features = ["wrap_help", "env", "derive"] }
 derivative = "2.2.0"
 futures = "0.3.25"
 jsonwebtoken = "8.2.0"
diff --git a/src/frontegg-mock/Cargo.toml b/src/frontegg-mock/Cargo.toml
index 773a3f2784607..6c6de77b5f224 100644
--- a/src/frontegg-mock/Cargo.toml
+++ b/src/frontegg-mock/Cargo.toml
@@ -8,7 +8,7 @@ publish = false
 
 [dependencies]
 anyhow = { version = "1.0.66", features = ["backtrace"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 hyper = { version = "0.14.23", features = ["http1", "server"] }
 jsonwebtoken = "8.2.0"
 mz-frontegg-auth = { path = "../frontegg-auth" }
diff --git a/src/interchange/Cargo.toml b/src/interchange/Cargo.toml
index 606f72793a53c..8e32348dc2672 100644
--- a/src/interchange/Cargo.toml
+++ b/src/interchange/Cargo.toml
@@ -15,7 +15,7 @@ harness = false
 anyhow = "1.0.66"
 byteorder = "1.4.3"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 differential-dataflow = "0.12.0"
 itertools = "0.10.5"
 once_cell = "1.16.0"
diff --git a/src/kafka-util/Cargo.toml b/src/kafka-util/Cargo.toml
index f955f07b17740..122d87957606b 100644
--- a/src/kafka-util/Cargo.toml
+++ b/src/kafka-util/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 crossbeam = "0.8.2"
 fancy-regex = "0.11.0"
 futures = "0.3.25"
diff --git a/src/mz/Cargo.toml b/src/mz/Cargo.toml
index 3305f12da5bda..971e4ec369683 100644
--- a/src/mz/Cargo.toml
+++ b/src/mz/Cargo.toml
@@ -8,7 +8,7 @@ rust-version.workspace = true
 
 [dependencies]
 axum = { version = "0.6.20" }
-clap = { version = "3.2.24", features = [ "derive" ] }
+clap = { version = "4.4.13", features = [ "derive" ] }
 csv = "1.2.1"
 dirs = "5.0.0"
 indicatif = "0.17.2"
diff --git a/src/orchestrator-kubernetes/Cargo.toml b/src/orchestrator-kubernetes/Cargo.toml
index b2fd61dfc89a3..7303419462a96 100644
--- a/src/orchestrator-kubernetes/Cargo.toml
+++ b/src/orchestrator-kubernetes/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 anyhow = "1.0.66"
 async-trait = "0.1.68"
 chrono = { version = "0.4.23", default-features = false }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.25"
 maplit = "1.0.2"
diff --git a/src/orchestrator-tracing/Cargo.toml b/src/orchestrator-tracing/Cargo.toml
index 68715ac7b2651..0574f1daea3b2 100644
--- a/src/orchestrator-tracing/Cargo.toml
+++ b/src/orchestrator-tracing/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 async-trait = "0.1.68"
-clap = { version = "3.2.24", features = ["env", "derive"] }
+clap = { version = "4.4.13", features = ["env", "derive"] }
 futures-core = "0.3.21"
 http = "0.2.8"
 humantime = { version = "2.1.0", optional = true }
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index be4e75ce18fb2..2444941829352 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -20,7 +20,7 @@ bytes = { version = "1.3.0", optional = true }
 chrono = { version = "0.4.23", default-features = false, features = [
   "std",
 ], optional = true }
-clap = { version = "3.2.24", features = ["env"], optional = true }
+clap = { version = "4.4.13", features = ["env"], optional = true }
 compact_bytes = { version = "0.1.1", optional = true }
 ctor = { version = "0.1.26", optional = true }
 either = "1.8.0"
diff --git a/src/persist-cli/Cargo.toml b/src/persist-cli/Cargo.toml
index 38e490c96e443..85b296674d26d 100644
--- a/src/persist-cli/Cargo.toml
+++ b/src/persist-cli/Cargo.toml
@@ -18,7 +18,7 @@ anyhow = { version = "1.0.66", features = ["backtrace"] }
 async-trait = "0.1.68"
 axum = { version = "0.6.20" }
 bytes = { version = "1.3.0", features = ["serde"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 differential-dataflow = "0.12.0"
 futures = "0.3.25"
 humantime = "2.1.0"
diff --git a/src/persist-client/Cargo.toml b/src/persist-client/Cargo.toml
index f2ec8038b47c9..3ca4b1323118d 100644
--- a/src/persist-client/Cargo.toml
+++ b/src/persist-client/Cargo.toml
@@ -29,7 +29,7 @@ anyhow = { version = "1.0.66", features = ["backtrace"] }
 async-stream = "0.3.3"
 async-trait = "0.1.68"
 bytes = { version = "1.3.0", features = ["serde"] }
-clap = { version = "3.2.24", features = [ "derive" ] }
+clap = { version = "4.4.13", features = [ "derive" ] }
 differential-dataflow = "0.12.0"
 futures = "0.3.25"
 futures-util = "0.3"
diff --git a/src/pgtest/Cargo.toml b/src/pgtest/Cargo.toml
index 9a2bc85c6ca67..ce1fa2ae6a913 100644
--- a/src/pgtest/Cargo.toml
+++ b/src/pgtest/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 [dependencies]
 anyhow = "1.0.66"
 bytes = "1.3.0"
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 datadriven = "0.6.0"
 fallible-iterator = "0.2.0"
 mz-ore = { path = "../ore", features = ["cli"] }
diff --git a/src/s3-datagen/Cargo.toml b/src/s3-datagen/Cargo.toml
index 58043799b1b13..808ceb230ed6a 100644
--- a/src/s3-datagen/Cargo.toml
+++ b/src/s3-datagen/Cargo.toml
@@ -11,7 +11,7 @@ anyhow = "1.0.66"
 aws-config = { version = "1.1.1", default-features = false }
 aws-sdk-s3 = { version = "1.8.0", default-features = false, features = ["rt-tokio"] }
 bytefmt = "0.1.7"
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 futures = "0.3.25"
 indicatif = "0.17.2"
 mz-aws-util = { path = "../aws-util", features = ["s3"] }
diff --git a/src/server-core/Cargo.toml b/src/server-core/Cargo.toml
index 2b7b106b9b8f5..5ce597175b5f2 100644
--- a/src/server-core/Cargo.toml
+++ b/src/server-core/Cargo.toml
@@ -8,7 +8,7 @@ publish = false
 
 [dependencies]
 anyhow = "1.0.66"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 openssl = { version = "0.10.48", features = ["vendored"] }
 socket2 = "0.5.3"
 tokio-stream = "0.1.11"
diff --git a/src/service/Cargo.toml b/src/service/Cargo.toml
index 76ec78423ecee..89eb3b8a7beac 100644
--- a/src/service/Cargo.toml
+++ b/src/service/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 anyhow = "1.0.66"
 async-stream = "0.3.3"
 async-trait = "0.1.68"
-clap = { version = "3.2.24", features = ["env", "derive"] }
+clap = { version = "4.4.13", features = ["env", "derive"] }
 crossbeam-channel = "0.5.8"
 futures = "0.3.25"
 http = "0.2.8"
diff --git a/src/sql/Cargo.toml b/src/sql/Cargo.toml
index 1356e0cb5a15a..d56c3d98ff595 100644
--- a/src/sql/Cargo.toml
+++ b/src/sql/Cargo.toml
@@ -12,7 +12,7 @@ array-concat = "0.5.2"
 aws-sdk-sts = { version = "1.7.0", default-features = false, features = ["rt-tokio"] }
 bitflags = "1.3.2"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 enum-kinds = "0.5.1"
 fail = { version = "0.5.1", features = ["failpoints"] }
 globset = "0.4.9"
diff --git a/src/sqllogictest/Cargo.toml b/src/sqllogictest/Cargo.toml
index fba228b4b6dd7..c3b0b46a80019 100644
--- a/src/sqllogictest/Cargo.toml
+++ b/src/sqllogictest/Cargo.toml
@@ -10,7 +10,7 @@ publish = false
 anyhow = "1.0.66"
 bytes = "1.3.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 dec = "0.4.8"
 fallible-iterator = "0.2.0"
 futures = "0.3.25"
diff --git a/src/stash-debug/Cargo.toml b/src/stash-debug/Cargo.toml
index fad4f81c3f938..678e317a7f760 100644
--- a/src/stash-debug/Cargo.toml
+++ b/src/stash-debug/Cargo.toml
@@ -8,7 +8,7 @@ publish = false
 
 [dependencies]
 anyhow = "1.0.66"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 futures = "0.3.25"
 mz-adapter = { path = "../adapter" }
 mz-catalog = { path = "../catalog" }
diff --git a/src/storage/Cargo.toml b/src/storage/Cargo.toml
index 48a740143c896..7713a8f43f352 100644
--- a/src/storage/Cargo.toml
+++ b/src/storage/Cargo.toml
@@ -18,7 +18,7 @@ bytes = { version = "1.3.0", features = ["serde"] }
 bytesize = "1.1.0"
 bincode = "1"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 crossbeam-channel = "0.5.8"
 csv-core = { version = "0.1.10" }
 dec = "0.4.8"
@@ -99,7 +99,7 @@ tonic-build = "0.9.2"
 [dev-dependencies]
 async-trait = "0.1.68"
 axum = { version = "0.6.20" }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.4.13", features = ["derive", "env"] }
 datadriven = { version = "0.6.0", features = ["async"] }
 humantime = "2.1.0"
 mz-http-util = { path = "../http-util" }
diff --git a/src/testdrive/Cargo.toml b/src/testdrive/Cargo.toml
index 4b97057feee2a..f156580e21049 100644
--- a/src/testdrive/Cargo.toml
+++ b/src/testdrive/Cargo.toml
@@ -18,7 +18,7 @@ aws-types = "1.1.1"
 byteorder = "1.4.3"
 bytes = "1.3.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.4.13", features = ["derive"] }
 flate2 = "1.0.24"
 futures = "0.3.25"
 globset = "0.4.9"
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index f373f6fe95b87..b096c09fd428b 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -29,7 +29,7 @@ bstr = { version = "0.2.14" }
 byteorder = { version = "1.4.3" }
 bytes = { version = "1.4.0", features = ["serde"] }
 chrono = { version = "0.4.25", default-features = false, features = ["alloc", "clock", "serde"] }
-clap = { version = "3.2.24", features = ["derive", "env", "wrap_help"] }
+clap = { version = "4.4.13", features = ["derive", "env", "wrap_help"] }
 console = { version = "0.15.5", default-features = false, features = ["ansi-parsing", "unicode-width"] }
 criterion = { version = "0.4.0", features = ["async_tokio", "html_reports"] }
 crossbeam-deque = { version = "0.8.3" }
@@ -140,7 +140,7 @@ byteorder = { version = "1.4.3" }
 bytes = { version = "1.4.0", features = ["serde"] }
 cc = { version = "1.0.83", default-features = false, features = ["parallel"] }
 chrono = { version = "0.4.25", default-features = false, features = ["alloc", "clock", "serde"] }
-clap = { version = "3.2.24", features = ["derive", "env", "wrap_help"] }
+clap = { version = "4.4.13", features = ["derive", "env", "wrap_help"] }
 console = { version = "0.15.5", default-features = false, features = ["ansi-parsing", "unicode-width"] }
 criterion = { version = "0.4.0", features = ["async_tokio", "html_reports"] }
 crossbeam-deque = { version = "0.8.3" }