diff --git a/Cargo.lock b/Cargo.lock
index 34c74b7ba9bcc..5cf37c8c7600d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -83,6 +83,54 @@ version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4b46cbb362ab8752921c97e041f5e366ee6297bd428a31275b9fcf1e380f7299"
 
+[[package]]
+name = "anstream"
+version = "0.6.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d96bd03f33fe50a863e394ee9718a706f988b9079b20c3784fb726e7678b62fb"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8901269c6307e8d93993578286ac0edf7f195079ffff5ebdeea6a59ffb7e36bc"
+
+[[package]]
+name = "anstyle-parse"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c75ac65da39e5fe5ab759307499ddad880d724eed2f6ce5b5e8a26f4f387928c"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e28923312444cdd728e4738b3f9c9cac739500909bb3d3c94b43551b16517648"
+dependencies = [
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cd54b81ec8d6180e24654d0b371ad22fc3dd083b6ff8ba325b72e00c87660a7"
+dependencies = [
+ "anstyle",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "anyhow"
 version = "1.0.66"
@@ -1182,33 +1230,49 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "3.2.24"
+version = "3.2.25"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eef2b3ded6a26dfaec672a742c93c8cf6b689220324da509ec5caa20de55dc83"
+checksum = "4ea181bf566f71cb9a5d17a59e1871af638180a18fb0035c92ae62b705207123"
 dependencies = [
- "atty",
  "bitflags 1.3.2",
- "clap_derive",
- "clap_lex",
+ "clap_lex 0.2.2",
  "indexmap 1.9.1",
- "once_cell",
- "strsim",
- "termcolor",
- "terminal_size",
  "textwrap",
 ]
 
+[[package]]
+name = "clap"
+version = "4.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b230ab84b0ffdf890d5a10abdbc8b83ae1c4918275daea1ab8801f71536b2651"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae129e2e766ae0ec03484e609954119f123cc1fe650337e155d03b022f24f7b4"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex 0.7.0",
+ "strsim 0.11.0",
+ "terminal_size 0.3.0",
+]
+
 [[package]]
 name = "clap_derive"
-version = "3.2.24"
+version = "4.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d756c5824fc5c0c1ee8e36000f576968dbcb2081def956c83fad6f40acd46f96"
+checksum = "307bc0538d5f0f83b8248db3087aa92fe504e4691294d0c96c0eabc33f47ba47"
 dependencies = [
  "heck",
- "proc-macro-error",
  "proc-macro2",
  "quote",
- "syn 1.0.107",
+ "syn 2.0.39",
 ]
 
 [[package]]
@@ -1220,6 +1284,12 @@ dependencies = [
  "os_str_bytes",
 ]
 
+[[package]]
+name = "clap_lex"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "98cc8fbded0c607b7ba9dd60cd98df59af97e84d24e49c8557331cfc26d301ce"
+
 [[package]]
 name = "cmake"
 version = "0.1.48"
@@ -1239,6 +1309,12 @@ dependencies = [
  "unicode-width",
 ]
 
+[[package]]
+name = "colorchoice"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acbf1af155f9b9ef647e42cdc158db4b64a1b61f743629225fde6f3e0be2a7c7"
+
 [[package]]
 name = "columnation"
 version = "0.1.0"
@@ -1424,7 +1500,7 @@ dependencies = [
  "atty",
  "cast",
  "ciborium",
- "clap",
+ "clap 3.2.25",
  "criterion-plot",
  "futures",
  "itertools",
@@ -1645,7 +1721,7 @@ dependencies = [
  "ident_case",
  "proc-macro2",
  "quote",
- "strsim",
+ "strsim 0.10.0",
  "syn 2.0.39",
 ]
 
@@ -3532,7 +3608,7 @@ version = "0.3.0"
 dependencies = [
  "assert_cmd",
  "axum",
- "clap",
+ "clap 4.5.2",
  "csv",
  "dirs",
  "hyper",
@@ -3771,7 +3847,7 @@ dependencies = [
  "axum",
  "bytes",
  "bytesize",
- "clap",
+ "clap 4.5.2",
  "futures",
  "hyper",
  "hyper-openssl",
@@ -3884,7 +3960,7 @@ name = "mz-catalog-debug"
 version = "0.91.0-dev"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.5.2",
  "mz-adapter",
  "mz-build-info",
  "mz-catalog",
@@ -3971,7 +4047,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "bytesize",
- "clap",
+ "clap 4.5.2",
  "crossbeam-channel",
  "dec",
  "differential-dataflow",
@@ -4037,7 +4113,7 @@ version = "0.91.0-dev"
 dependencies = [
  "anyhow",
  "axum",
- "clap",
+ "clap 4.5.2",
  "fail",
  "futures",
  "mz-alloc",
@@ -4074,7 +4150,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "bytesize",
- "clap",
+ "clap 4.5.2",
  "core_affinity",
  "crossbeam-channel",
  "dec",
@@ -4278,7 +4354,7 @@ dependencies = [
  "bytesize",
  "cc",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "datadriven",
  "fail",
  "fallible-iterator",
@@ -4479,7 +4555,7 @@ name = "mz-fivetran-destination"
 version = "0.0.0"
 dependencies = [
  "async-compression",
- "clap",
+ "clap 4.5.2",
  "csv-async",
  "futures",
  "insta",
@@ -4519,7 +4595,7 @@ dependencies = [
  "anyhow",
  "axum",
  "base64 0.13.1",
- "clap",
+ "clap 4.5.2",
  "derivative",
  "futures",
  "jsonwebtoken",
@@ -4563,7 +4639,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "axum",
- "clap",
+ "clap 4.5.2",
  "hyper",
  "jsonwebtoken",
  "mz-frontegg-auth",
@@ -4605,7 +4681,7 @@ dependencies = [
  "anyhow",
  "byteorder",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "criterion",
  "differential-dataflow",
  "itertools",
@@ -4634,7 +4710,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "crossbeam",
  "fancy-regex",
  "futures",
@@ -4808,7 +4884,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "fail",
  "futures",
  "k8s-openapi",
@@ -4860,7 +4936,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "async-trait",
- "clap",
+ "clap 4.5.2",
  "futures-core",
  "http",
  "humantime",
@@ -4887,7 +4963,7 @@ dependencies = [
  "atty",
  "bytes",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "compact_bytes",
  "console-subscriber",
  "criterion",
@@ -5000,7 +5076,7 @@ dependencies = [
  "async-stream",
  "async-trait",
  "bytes",
- "clap",
+ "clap 4.5.2",
  "criterion",
  "datadriven",
  "differential-dataflow",
@@ -5141,7 +5217,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "bytes",
- "clap",
+ "clap 4.5.2",
  "datadriven",
  "fallible-iterator",
  "mz-ore",
@@ -5414,7 +5490,7 @@ dependencies = [
  "serde_json",
  "smallvec",
  "static_assertions",
- "strsim",
+ "strsim 0.10.0",
  "thiserror",
  "timely",
  "tokio-postgres",
@@ -5497,7 +5573,7 @@ dependencies = [
  "aws-config",
  "aws-sdk-s3",
  "bytefmt",
- "clap",
+ "clap 4.5.2",
  "futures",
  "indicatif",
  "mz-aws-util",
@@ -5539,7 +5615,7 @@ name = "mz-server-core"
 version = "0.0.0"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.5.2",
  "futures",
  "mz-ore",
  "openssl",
@@ -5557,7 +5633,7 @@ dependencies = [
  "anyhow",
  "async-stream",
  "async-trait",
- "clap",
+ "clap 4.5.2",
  "crossbeam-channel",
  "futures",
  "http",
@@ -5600,7 +5676,7 @@ dependencies = [
  "aws-sdk-sts",
  "bitflags 1.3.2",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "datadriven",
  "derivative",
  "dynfmt",
@@ -5721,7 +5797,7 @@ dependencies = [
  "anyhow",
  "bytes",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "dec",
  "fallible-iterator",
  "futures",
@@ -5825,7 +5901,7 @@ name = "mz-stash-debug"
 version = "0.91.0-dev"
 dependencies = [
  "anyhow",
- "clap",
+ "clap 4.5.2",
  "mz-build-info",
  "mz-ore",
  "mz-stash",
@@ -5866,7 +5942,7 @@ dependencies = [
  "bytes",
  "bytesize",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "crossbeam-channel",
  "csv-core",
  "datadriven",
@@ -6153,7 +6229,7 @@ dependencies = [
  "byteorder",
  "bytes",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "flate2",
  "futures",
  "globset",
@@ -6894,7 +6970,7 @@ dependencies = [
  "async-trait",
  "axum",
  "bytes",
- "clap",
+ "clap 4.5.2",
  "differential-dataflow",
  "futures",
  "humantime",
@@ -8613,6 +8689,12 @@ version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623"
 
+[[package]]
+name = "strsim"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ee073c9e4cd00e28217186dbe12796d692868f432bf2e97ee73bed0c56dfa01"
+
 [[package]]
 name = "subprocess"
 version = "0.2.9"
@@ -8830,13 +8912,23 @@ dependencies = [
  "windows-sys 0.48.0",
 ]
 
+[[package]]
+name = "terminal_size"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21bebf2b7c9e0a515f6e0f8c51dc0f8e4696391e6f1ff30379559f8365fb0df7"
+dependencies = [
+ "rustix 0.38.21",
+ "windows-sys 0.48.0",
+]
+
 [[package]]
 name = "textwrap"
 version = "0.16.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "222a222a5bfe1bba4a77b45ec488a741b3cb8872e5e499451fd7d0129c9c7c3d"
 dependencies = [
- "terminal_size",
+ "terminal_size 0.2.6",
 ]
 
 [[package]]
@@ -9893,7 +9985,7 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e686886bc078bc1b0b600cac0147aadb815089b6e4da64016cbd754b6342700f"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.48.0",
 ]
 
 [[package]]
@@ -9917,7 +10009,16 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
 dependencies = [
- "windows-targets",
+ "windows-targets 0.48.0",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.4",
 ]
 
 [[package]]
@@ -9935,6 +10036,21 @@ dependencies = [
  "windows_x86_64_msvc 0.48.0",
 ]
 
+[[package]]
+name = "windows-targets"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7dd37b7e5ab9018759f893a1952c9420d060016fc19a472b4bb20d1bdd694d1b"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.4",
+ "windows_aarch64_msvc 0.52.4",
+ "windows_i686_gnu 0.52.4",
+ "windows_i686_msvc 0.52.4",
+ "windows_x86_64_gnu 0.52.4",
+ "windows_x86_64_gnullvm 0.52.4",
+ "windows_x86_64_msvc 0.52.4",
+]
+
 [[package]]
 name = "windows_aarch64_gnullvm"
 version = "0.42.2"
@@ -9947,6 +10063,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "91ae572e1b79dba883e0d315474df7305d12f569b400fcf90581b06062f7e1bc"
 
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bcf46cf4c365c6f2d1cc93ce535f2c8b244591df96ceee75d8e83deb70a9cac9"
+
 [[package]]
 name = "windows_aarch64_msvc"
 version = "0.42.2"
@@ -9959,6 +10081,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b2ef27e0d7bdfcfc7b868b317c1d32c641a6fe4629c171b8928c7b08d98d7cf3"
 
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da9f259dd3bcf6990b55bffd094c4f7235817ba4ceebde8e6d11cd0c5633b675"
+
 [[package]]
 name = "windows_i686_gnu"
 version = "0.42.2"
@@ -9971,6 +10099,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "622a1962a7db830d6fd0a69683c80a18fda201879f0f447f065a3b7467daa241"
 
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b474d8268f99e0995f25b9f095bc7434632601028cf86590aea5c8a5cb7801d3"
+
 [[package]]
 name = "windows_i686_msvc"
 version = "0.42.2"
@@ -9983,6 +10117,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4542c6e364ce21bf45d69fdd2a8e455fa38d316158cfd43b3ac1c5b1b19f8e00"
 
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1515e9a29e5bed743cb4415a9ecf5dfca648ce85ee42e15873c3cd8610ff8e02"
+
 [[package]]
 name = "windows_x86_64_gnu"
 version = "0.42.2"
@@ -9995,6 +10135,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ca2b8a661f7628cbd23440e50b05d705db3686f894fc9580820623656af974b1"
 
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5eee091590e89cc02ad514ffe3ead9eb6b660aedca2183455434b93546371a03"
+
 [[package]]
 name = "windows_x86_64_gnullvm"
 version = "0.42.2"
@@ -10007,6 +10153,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7896dbc1f41e08872e9d5e8f8baa8fdd2677f29468c4e156210174edc7f7b953"
 
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ca79f2451b49fa9e2af39f0747fe999fcda4f5e241b2898624dca97a1f2177"
+
 [[package]]
 name = "windows_x86_64_msvc"
 version = "0.42.2"
@@ -10019,6 +10171,12 @@ version = "0.48.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1a515f5799fe4961cb532f983ce2b23082366b898e52ffbce459c86f67c8378a"
 
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32b752e52a2da0ddfbdbcc6fceadfeede4c939ed16d13e648833a61dfb611ed8"
+
 [[package]]
 name = "winnow"
 version = "0.5.4"
@@ -10062,7 +10220,7 @@ dependencies = [
  "bytes",
  "cc",
  "chrono",
- "clap",
+ "clap 4.5.2",
  "console",
  "criterion",
  "crossbeam-deque",
diff --git a/src/balancerd/Cargo.toml b/src/balancerd/Cargo.toml
index 3d3327b60b15a..db5d7713147f2 100644
--- a/src/balancerd/Cargo.toml
+++ b/src/balancerd/Cargo.toml
@@ -15,7 +15,7 @@ async-trait = "0.1.68"
 axum = { version = "0.6.20" }
 bytes = "1.3.0"
 bytesize = "1.1.0"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 futures = "0.3.25"
 hyper = { version = "0.14.23", features = ["http1", "server"] }
 hyper-openssl = "0.9.2"
diff --git a/src/catalog-debug/Cargo.toml b/src/catalog-debug/Cargo.toml
index 3181c58b89d08..8d683df1a2e0b 100644
--- a/src/catalog-debug/Cargo.toml
+++ b/src/catalog-debug/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 anyhow = "1.0.66"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 mz-adapter = { path = "../adapter" }
 mz-build-info = { path = "../build-info" }
 mz-catalog = { path = "../catalog" }
diff --git a/src/cluster/Cargo.toml b/src/cluster/Cargo.toml
index d722c010e885e..fe1bc52e861a1 100644
--- a/src/cluster/Cargo.toml
+++ b/src/cluster/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 anyhow = "1.0.66"
 async-trait = "0.1.68"
 bytesize = "1.1.0"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 crossbeam-channel = "0.5.8"
 dec = { version = "0.4.8", features = ["serde"] }
 differential-dataflow = "0.12.0"
diff --git a/src/clusterd/Cargo.toml b/src/clusterd/Cargo.toml
index f8013d8c75870..3c9e56482cab1 100644
--- a/src/clusterd/Cargo.toml
+++ b/src/clusterd/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = "1.0.66"
 axum = "0.6.20"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.25"
 mz-alloc = { path = "../alloc" }
diff --git a/src/compute/Cargo.toml b/src/compute/Cargo.toml
index b3d62e86516e1..c5ae337abfb4a 100644
--- a/src/compute/Cargo.toml
+++ b/src/compute/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 anyhow = "1.0.66"
 async-trait = "0.1.68"
 bytesize = "1.1.0"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 core_affinity = "0.8.0"
 crossbeam-channel = "0.5.8"
 dec = { version = "0.4.8", features = ["serde"] }
diff --git a/src/environmentd/Cargo.toml b/src/environmentd/Cargo.toml
index 4838d485e900c..956b4444d51d2 100644
--- a/src/environmentd/Cargo.toml
+++ b/src/environmentd/Cargo.toml
@@ -23,7 +23,7 @@ base64 = "0.13.1"
 bytes = "1.3.0"
 bytesize = "1.1.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["wrap_help", "env", "derive"] }
+clap = { version = "4.5.2", features = ["wrap_help", "env", "derive"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.25"
 headers = "0.3.8"
diff --git a/src/fivetran-destination/Cargo.toml b/src/fivetran-destination/Cargo.toml
index 68b84a2d50735..c24294e41c4a7 100644
--- a/src/fivetran-destination/Cargo.toml
+++ b/src/fivetran-destination/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 async-compression = { version = "0.4.5", features = ["gzip", "tokio", "zstd"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 csv-async = { version = "1.2.6", default-features = false, features = ["tokio"] }
 futures = "0.3.25"
 itertools = "0.10.5"
diff --git a/src/frontegg-auth/Cargo.toml b/src/frontegg-auth/Cargo.toml
index 30cbe46c9648e..c5ce10292dad4 100644
--- a/src/frontegg-auth/Cargo.toml
+++ b/src/frontegg-auth/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = "1.0.66"
 base64 = "0.13.1"
-clap = { version = "3.2.24", features = ["wrap_help", "env", "derive"] }
+clap = { version = "4.5.2", features = ["wrap_help", "env", "derive"] }
 derivative = "2.2.0"
 futures = "0.3.25"
 jsonwebtoken = "9.2.0"
diff --git a/src/frontegg-mock/Cargo.toml b/src/frontegg-mock/Cargo.toml
index 2f37d743866b6..b54e51e54118c 100644
--- a/src/frontegg-mock/Cargo.toml
+++ b/src/frontegg-mock/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = { version = "1.0.66", features = ["backtrace"] }
 axum = { version = "0.6.20", features = ["headers"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 hyper = { version = "0.14.23", features = ["http1", "server"] }
 jsonwebtoken = "9.2.0"
 mz-frontegg-auth = { path = "../frontegg-auth" }
diff --git a/src/interchange/Cargo.toml b/src/interchange/Cargo.toml
index 7cdee1f9808d7..6dfa933673183 100644
--- a/src/interchange/Cargo.toml
+++ b/src/interchange/Cargo.toml
@@ -18,7 +18,7 @@ harness = false
 anyhow = "1.0.66"
 byteorder = "1.4.3"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 differential-dataflow = "0.12.0"
 itertools = "0.10.5"
 once_cell = "1.16.0"
diff --git a/src/kafka-util/Cargo.toml b/src/kafka-util/Cargo.toml
index 819bdd0d799f6..c9e717fa6400f 100644
--- a/src/kafka-util/Cargo.toml
+++ b/src/kafka-util/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = "1.0.66"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 crossbeam = "0.8.2"
 fancy-regex = "0.11.0"
 futures = "0.3.25"
diff --git a/src/mz/Cargo.toml b/src/mz/Cargo.toml
index 86d2e26b2e66e..c2fd47898be7f 100644
--- a/src/mz/Cargo.toml
+++ b/src/mz/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 axum = { version = "0.6.20" }
-clap = { version = "3.2.24", features = [ "derive" ] }
+clap = { version = "4.5.2", features = [ "derive" ] }
 csv = "1.2.1"
 dirs = "5.0.0"
 indicatif = "0.17.2"
diff --git a/src/orchestrator-kubernetes/Cargo.toml b/src/orchestrator-kubernetes/Cargo.toml
index 40539140cc19b..e90d4db7dd30f 100644
--- a/src/orchestrator-kubernetes/Cargo.toml
+++ b/src/orchestrator-kubernetes/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 anyhow = "1.0.66"
 async-trait = "0.1.68"
 chrono = { version = "0.4.23", default-features = false }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 fail = { version = "0.5.1", features = ["failpoints"] }
 futures = "0.3.25"
 maplit = "1.0.2"
diff --git a/src/orchestrator-tracing/Cargo.toml b/src/orchestrator-tracing/Cargo.toml
index 3fd99244829d4..88add3ae6874c 100644
--- a/src/orchestrator-tracing/Cargo.toml
+++ b/src/orchestrator-tracing/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = "1.0.66"
 async-trait = "0.1.68"
-clap = { version = "3.2.24", features = ["env", "derive"] }
+clap = { version = "4.5.2", features = ["env", "derive"] }
 futures-core = "0.3.21"
 http = "0.2.8"
 humantime = { version = "2.1.0", optional = true }
diff --git a/src/ore/Cargo.toml b/src/ore/Cargo.toml
index a0f83a745cb2c..84284b9a55de5 100644
--- a/src/ore/Cargo.toml
+++ b/src/ore/Cargo.toml
@@ -23,7 +23,7 @@ bytes = { version = "1.3.0", optional = true }
 chrono = { version = "0.4.23", default-features = false, features = [
   "std",
 ], optional = true }
-clap = { version = "3.2.24", features = ["env"], optional = true }
+clap = { version = "4.5.2", features = ["env"], optional = true }
 compact_bytes = { version = "0.1.1", optional = true }
 ctor = { version = "0.1.26", optional = true }
 either = "1.8.0"
diff --git a/src/persist-cli/Cargo.toml b/src/persist-cli/Cargo.toml
index 7216044e66060..ebbf2f40cf2ca 100644
--- a/src/persist-cli/Cargo.toml
+++ b/src/persist-cli/Cargo.toml
@@ -21,7 +21,7 @@ anyhow = { version = "1.0.66", features = ["backtrace"] }
 async-trait = "0.1.68"
 axum = { version = "0.6.20" }
 bytes = { version = "1.3.0", features = ["serde"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 differential-dataflow = "0.12.0"
 futures = "0.3.25"
 humantime = "2.1.0"
diff --git a/src/persist-client/Cargo.toml b/src/persist-client/Cargo.toml
index a295124583dc6..385e47757aeaf 100644
--- a/src/persist-client/Cargo.toml
+++ b/src/persist-client/Cargo.toml
@@ -32,7 +32,7 @@ anyhow = { version = "1.0.66", features = ["backtrace"] }
 async-stream = "0.3.3"
 async-trait = "0.1.68"
 bytes = { version = "1.3.0", features = ["serde"] }
-clap = { version = "3.2.24", features = [ "derive" ] }
+clap = { version = "4.5.2", features = [ "derive" ] }
 differential-dataflow = "0.12.0"
 futures = "0.3.25"
 futures-util = "0.3"
diff --git a/src/pgtest/Cargo.toml b/src/pgtest/Cargo.toml
index b45ea862c2b21..6b08229f6d8a9 100644
--- a/src/pgtest/Cargo.toml
+++ b/src/pgtest/Cargo.toml
@@ -12,7 +12,7 @@ workspace = true
 [dependencies]
 anyhow = "1.0.66"
 bytes = "1.3.0"
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 datadriven = "0.6.0"
 fallible-iterator = "0.2.0"
 mz-ore = { path = "../ore", features = ["cli"] }
diff --git a/src/s3-datagen/Cargo.toml b/src/s3-datagen/Cargo.toml
index ba6ae2c7d705c..76ffb8b22549b 100644
--- a/src/s3-datagen/Cargo.toml
+++ b/src/s3-datagen/Cargo.toml
@@ -14,7 +14,7 @@ anyhow = "1.0.66"
 aws-config = { version = "1.1.1", default-features = false }
 aws-sdk-s3 = { version = "1.8.0", default-features = false, features = ["rt-tokio"] }
 bytefmt = "0.1.7"
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 futures = "0.3.25"
 indicatif = "0.17.2"
 mz-aws-util = { path = "../aws-util", features = ["s3"] }
diff --git a/src/server-core/Cargo.toml b/src/server-core/Cargo.toml
index 441a39a395738..a40b314d7fa5b 100644
--- a/src/server-core/Cargo.toml
+++ b/src/server-core/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 anyhow = "1.0.66"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 openssl = { version = "0.10.48", features = ["vendored"] }
 socket2 = "0.5.3"
 tokio-stream = "0.1.11"
diff --git a/src/service/Cargo.toml b/src/service/Cargo.toml
index 5b94f30e2a45c..628f109df7263 100644
--- a/src/service/Cargo.toml
+++ b/src/service/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 anyhow = "1.0.66"
 async-stream = "0.3.3"
 async-trait = "0.1.68"
-clap = { version = "3.2.24", features = ["env", "derive"] }
+clap = { version = "4.5.2", features = ["env", "derive"] }
 crossbeam-channel = "0.5.8"
 futures = "0.3.25"
 http = "0.2.8"
diff --git a/src/sql/Cargo.toml b/src/sql/Cargo.toml
index fd6f8afaa7bdb..6c009c79d5960 100644
--- a/src/sql/Cargo.toml
+++ b/src/sql/Cargo.toml
@@ -17,7 +17,7 @@ aws-sdk-sts = { version = "1.7.0", default-features = false, features = [
 ] }
 bitflags = "1.3.2"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 derivative = "2.2.0"
 dynfmt = { version = "0.1.5", features = ["curly"] }
 enum-kinds = "0.5.1"
diff --git a/src/sqllogictest/Cargo.toml b/src/sqllogictest/Cargo.toml
index 612b9410988ba..d9b7be6d178ee 100644
--- a/src/sqllogictest/Cargo.toml
+++ b/src/sqllogictest/Cargo.toml
@@ -13,7 +13,7 @@ workspace = true
 anyhow = "1.0.66"
 bytes = "1.3.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 dec = "0.4.8"
 fallible-iterator = "0.2.0"
 futures = "0.3.25"
diff --git a/src/stash-debug/Cargo.toml b/src/stash-debug/Cargo.toml
index c0ea80a2dc394..ef9e777371a0e 100644
--- a/src/stash-debug/Cargo.toml
+++ b/src/stash-debug/Cargo.toml
@@ -11,7 +11,7 @@ workspace = true
 
 [dependencies]
 anyhow = "1.0.66"
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 mz-build-info = { path = "../build-info" }
 mz-ore = { path = "../ore" }
 mz-tls-util = { path = "../tls-util" }
diff --git a/src/storage/Cargo.toml b/src/storage/Cargo.toml
index ebbb681528cec..55fd8187bfd9e 100644
--- a/src/storage/Cargo.toml
+++ b/src/storage/Cargo.toml
@@ -21,7 +21,7 @@ bytes = { version = "1.3.0", features = ["serde"] }
 bytesize = "1.1.0"
 bincode = "1"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 crossbeam-channel = "0.5.8"
 csv-core = { version = "0.1.10" }
 dec = "0.4.8"
@@ -105,7 +105,7 @@ tonic-build = "0.9.2"
 [dev-dependencies]
 async-trait = "0.1.68"
 axum = { version = "0.6.20" }
-clap = { version = "3.2.24", features = ["derive", "env"] }
+clap = { version = "4.5.2", features = ["derive", "env"] }
 datadriven = { version = "0.6.0", features = ["async"] }
 humantime = "2.1.0"
 mz-http-util = { path = "../http-util" }
diff --git a/src/testdrive/Cargo.toml b/src/testdrive/Cargo.toml
index e2a3f41c89644..b99bf0df8cdc9 100644
--- a/src/testdrive/Cargo.toml
+++ b/src/testdrive/Cargo.toml
@@ -21,7 +21,7 @@ aws-types = "1.1.1"
 byteorder = "1.4.3"
 bytes = "1.3.0"
 chrono = { version = "0.4.23", default-features = false, features = ["std"] }
-clap = { version = "3.2.24", features = ["derive"] }
+clap = { version = "4.5.2", features = ["derive"] }
 flate2 = "1.0.24"
 futures = "0.3.25"
 globset = "0.4.9"
diff --git a/src/workspace-hack/Cargo.toml b/src/workspace-hack/Cargo.toml
index 53c8a2109626c..a8c08f5b9612d 100644
--- a/src/workspace-hack/Cargo.toml
+++ b/src/workspace-hack/Cargo.toml
@@ -32,7 +32,7 @@ bstr = { version = "0.2.14" }
 byteorder = { version = "1.4.3" }
 bytes = { version = "1.4.0", features = ["serde"] }
 chrono = { version = "0.4.25", default-features = false, features = ["alloc", "clock", "serde"] }
-clap = { version = "3.2.24", features = ["derive", "env", "wrap_help"] }
+clap = { version = "4.5.2", features = ["derive", "env", "wrap_help"] }
 console = { version = "0.15.5", default-features = false, features = ["ansi-parsing", "unicode-width"] }
 criterion = { version = "0.4.0", features = ["async_tokio", "html_reports"] }
 crossbeam-deque = { version = "0.8.3" }
@@ -150,7 +150,7 @@ byteorder = { version = "1.4.3" }
 bytes = { version = "1.4.0", features = ["serde"] }
 cc = { version = "1.0.83", default-features = false, features = ["parallel"] }
 chrono = { version = "0.4.25", default-features = false, features = ["alloc", "clock", "serde"] }
-clap = { version = "3.2.24", features = ["derive", "env", "wrap_help"] }
+clap = { version = "4.5.2", features = ["derive", "env", "wrap_help"] }
 console = { version = "0.15.5", default-features = false, features = ["ansi-parsing", "unicode-width"] }
 criterion = { version = "0.4.0", features = ["async_tokio", "html_reports"] }
 crossbeam-deque = { version = "0.8.3" }