diff --git a/Cargo.toml b/Cargo.toml
index 0ce19e6..3dbf226 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -80,5 +80,33 @@ settings-extension-oci-hooks = { path = "./bottlerocket-settings-models/settings
 settings-extension-pki = { path = "./bottlerocket-settings-models/settings-extensions/pki", version = "0.1" }
 settings-extension-updates = { path = "./bottlerocket-settings-models/settings-extensions/updates", version = "0.1" }
 
+abi_stable = "0.11.3"
+anyhow = "1"
+argh = "0.1"
+base64 = "0.21"
+ctor = "0.2"
+darling = "0.20"
+env_logger = "0.11"
+indexmap = "2"
+lazy_static = "1.4"
+libc = "0.2"
+log = "0.4"
+maplit = "1"
+proc-macro2 = "1"
+quote = "1"
+rand = "0.8"
+regex = "1"
+semver = "1"
+serde = "1"
+serde_json = "1"
+serde_plain = "1"
+snafu = "0.8"
+syn = { version = "2", default-features = false }
+toml = "0.8"
+tracing = "0.1"
+url = "2"
+walkdir = "2"
+x509-parser = "0.16"
+
 [workspace.lints.clippy]
 indexing_slicing = "deny"
diff --git a/bottlerocket-defaults-helper/Cargo.toml b/bottlerocket-defaults-helper/Cargo.toml
index 73d9cdd..a7f3fdc 100644
--- a/bottlerocket-defaults-helper/Cargo.toml
+++ b/bottlerocket-defaults-helper/Cargo.toml
@@ -12,9 +12,9 @@ authors = [
 ]
 
 [dependencies]
-snafu = "0.8"
-toml = "0.8"
-walkdir = "2"
+snafu.workspace = true
+toml.workspace = true
+walkdir.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-derive/Cargo.toml b/bottlerocket-settings-derive/Cargo.toml
index 0165730..be169d1 100644
--- a/bottlerocket-settings-derive/Cargo.toml
+++ b/bottlerocket-settings-derive/Cargo.toml
@@ -10,10 +10,10 @@ readme = "../README.md"
 proc-macro = true
 
 [dependencies]
-darling = "0.20.8"
-proc-macro2 = "1.0.81"
-quote = "1.0.36"
-syn = "2.0.60"
+darling.workspace = true
+proc-macro2.workspace = true
+quote.workspace = true
+syn = { workspace = true, features = ["default"] }
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/model-derive/Cargo.toml b/bottlerocket-settings-models/model-derive/Cargo.toml
index 24d076f..deef214 100644
--- a/bottlerocket-settings-models/model-derive/Cargo.toml
+++ b/bottlerocket-settings-models/model-derive/Cargo.toml
@@ -13,9 +13,9 @@ path = "src/lib.rs"
 proc-macro = true
 
 [dependencies]
-darling = "0.20"
-quote = "1"
-syn = { version = "2", default-features = false, features = ["full", "parsing", "printing", "proc-macro", "visit-mut"] }
+darling.workspace = true
+quote.workspace = true
+syn = { workspace = true, features = ["full", "parsing", "printing", "proc-macro", "visit-mut"] }
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/modeled-types/Cargo.toml b/bottlerocket-settings-models/modeled-types/Cargo.toml
index eade923..6ff1a62 100644
--- a/bottlerocket-settings-models/modeled-types/Cargo.toml
+++ b/bottlerocket-settings-models/modeled-types/Cargo.toml
@@ -13,17 +13,17 @@ bottlerocket-scalar.workspace = true
 bottlerocket-scalar-derive.workspace = true
 bottlerocket-string-impls-for.workspace = true
 bottlerocket-model-derive.workspace = true
-base64 = "0.21"
-indexmap = { version = "2", features = ["serde"] }
-lazy_static = "1"
-regex = "1"
-semver = "1"
-serde = "1"
-serde_json = "1"
-serde_plain = "1"
-snafu = "0.8"
-url = "2"
-x509-parser = "0.16"
+base64.workspace = true
+indexmap = { workspace = true, features = ["serde"] }
+lazy_static.workspace = true
+regex.workspace = true
+semver.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+serde_plain.workspace = true
+snafu.workspace = true
+url.workspace = true
+x509-parser.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/scalar-derive/Cargo.toml b/bottlerocket-settings-models/scalar-derive/Cargo.toml
index db57ae2..8efc549 100644
--- a/bottlerocket-settings-models/scalar-derive/Cargo.toml
+++ b/bottlerocket-settings-models/scalar-derive/Cargo.toml
@@ -13,13 +13,13 @@ path = "src/lib.rs"
 proc-macro = true
 
 [dependencies]
-darling = "0.20"
-proc-macro2 = "1"
-quote = "1"
+darling.workspace = true
+proc-macro2.workspace = true
+quote.workspace = true
 bottlerocket-scalar.workspace = true
-serde = { version = "1", features = ["derive"] }
-serde_plain = "1"
-syn = { version = "2", default-features = false, features = ["full", "parsing", "printing", "proc-macro", "visit-mut"] }
+serde = { workspace = true, features = ["derive"] }
+serde_plain.workspace = true
+syn = { workspace = true, features = ["full", "parsing", "printing", "proc-macro", "visit-mut"] }
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/scalar/Cargo.toml b/bottlerocket-settings-models/scalar/Cargo.toml
index d915a45..75ecf6e 100644
--- a/bottlerocket-settings-models/scalar/Cargo.toml
+++ b/bottlerocket-settings-models/scalar/Cargo.toml
@@ -9,8 +9,8 @@ publish = false
 exclude = ["README.md"]
 
 [dependencies]
-serde = "1"
-serde_plain = "1"
+serde.workspace = true
+serde_plain.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/autoscaling/Cargo.toml b/bottlerocket-settings-models/settings-extensions/autoscaling/Cargo.toml
index 36b3875..2110a83 100644
--- a/bottlerocket-settings-models/settings-extensions/autoscaling/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/autoscaling/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/aws/Cargo.toml b/bottlerocket-settings-models/settings-extensions/aws/Cargo.toml
index ca385d1..815a5a9 100644
--- a/bottlerocket-settings-models/settings-extensions/aws/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/aws/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/bootstrap-containers/Cargo.toml b/bottlerocket-settings-models/settings-extensions/bootstrap-containers/Cargo.toml
index 39ada37..6d79816 100644
--- a/bottlerocket-settings-models/settings-extensions/bootstrap-containers/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/bootstrap-containers/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/cloudformation/Cargo.toml b/bottlerocket-settings-models/settings-extensions/cloudformation/Cargo.toml
index d45246d..b19aaad 100644
--- a/bottlerocket-settings-models/settings-extensions/cloudformation/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/cloudformation/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/container-registry/Cargo.toml b/bottlerocket-settings-models/settings-extensions/container-registry/Cargo.toml
index e8e1dc2..7418b32 100644
--- a/bottlerocket-settings-models/settings-extensions/container-registry/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/container-registry/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/container-runtime/Cargo.toml b/bottlerocket-settings-models/settings-extensions/container-runtime/Cargo.toml
index a0d3cdf..ce44c2a 100644
--- a/bottlerocket-settings-models/settings-extensions/container-runtime/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/container-runtime/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/dns/Cargo.toml b/bottlerocket-settings-models/settings-extensions/dns/Cargo.toml
index 5af8453..825a80a 100644
--- a/bottlerocket-settings-models/settings-extensions/dns/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/dns/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/ecs/Cargo.toml b/bottlerocket-settings-models/settings-extensions/ecs/Cargo.toml
index 6a1b9cf..6f35f53 100644
--- a/bottlerocket-settings-models/settings-extensions/ecs/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/ecs/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/host-containers/Cargo.toml b/bottlerocket-settings-models/settings-extensions/host-containers/Cargo.toml
index 5e27e53..57ed972 100644
--- a/bottlerocket-settings-models/settings-extensions/host-containers/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/host-containers/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/kernel/Cargo.toml b/bottlerocket-settings-models/settings-extensions/kernel/Cargo.toml
index 1c36500..4a1ea6d 100644
--- a/bottlerocket-settings-models/settings-extensions/kernel/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/kernel/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/metrics/Cargo.toml b/bottlerocket-settings-models/settings-extensions/metrics/Cargo.toml
index c06268a..e9ff8e7 100644
--- a/bottlerocket-settings-models/settings-extensions/metrics/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/metrics/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/motd/Cargo.toml b/bottlerocket-settings-models/settings-extensions/motd/Cargo.toml
index f55d3ed..7138607 100644
--- a/bottlerocket-settings-models/settings-extensions/motd/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/motd/Cargo.toml
@@ -9,9 +9,9 @@ publish = false
 [dependencies]
 bottlerocket-settings-sdk.workspace = true
 bottlerocket-string-impls-for.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/network/Cargo.toml b/bottlerocket-settings-models/settings-extensions/network/Cargo.toml
index 7bf87bd..cc4b4ca 100644
--- a/bottlerocket-settings-models/settings-extensions/network/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/network/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/ntp/Cargo.toml b/bottlerocket-settings-models/settings-extensions/ntp/Cargo.toml
index 58b8f0c..c529649 100644
--- a/bottlerocket-settings-models/settings-extensions/ntp/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/ntp/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/nvidia-container-runtime/Cargo.toml b/bottlerocket-settings-models/settings-extensions/nvidia-container-runtime/Cargo.toml
index 3997ced..b1a58cc 100644
--- a/bottlerocket-settings-models/settings-extensions/nvidia-container-runtime/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/nvidia-container-runtime/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/oci-defaults/Cargo.toml b/bottlerocket-settings-models/settings-extensions/oci-defaults/Cargo.toml
index 77b4b8e..bd43ed2 100644
--- a/bottlerocket-settings-models/settings-extensions/oci-defaults/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/oci-defaults/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-toml = "0.8"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
+toml.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/oci-hooks/Cargo.toml b/bottlerocket-settings-models/settings-extensions/oci-hooks/Cargo.toml
index ea77743..dfccc49 100644
--- a/bottlerocket-settings-models/settings-extensions/oci-hooks/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/oci-hooks/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/pki/Cargo.toml b/bottlerocket-settings-models/settings-extensions/pki/Cargo.toml
index 8e44909..2bf3211 100644
--- a/bottlerocket-settings-models/settings-extensions/pki/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/pki/Cargo.toml
@@ -10,9 +10,9 @@ publish = false
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-settings-sdk.workspace = true
-env_logger = "0.10"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-extensions/updates/Cargo.toml b/bottlerocket-settings-models/settings-extensions/updates/Cargo.toml
index 7553edb..3ca0fea 100644
--- a/bottlerocket-settings-models/settings-extensions/updates/Cargo.toml
+++ b/bottlerocket-settings-models/settings-extensions/updates/Cargo.toml
@@ -10,10 +10,10 @@ publish = false
 bottlerocket-settings-sdk.workspace = true
 bottlerocket-modeled-types.workspace = true
 bottlerocket-model-derive.workspace = true
-env_logger = "0.10"
-rand = "0.8"
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
+env_logger.workspace = true
+rand.workspace = true
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-models/settings-models/Cargo.toml b/bottlerocket-settings-models/settings-models/Cargo.toml
index 96b11c7..eeea464 100644
--- a/bottlerocket-settings-models/settings-models/Cargo.toml
+++ b/bottlerocket-settings-models/settings-models/Cargo.toml
@@ -14,15 +14,15 @@ exclude = ["README.md"]
 nvidia-device-plugin = []
 
 [dependencies]
-libc = "0.2"
+libc.workspace = true
 bottlerocket-model-derive.workspace = true
 bottlerocket-modeled-types.workspace = true
 bottlerocket-scalar.workspace = true
 bottlerocket-scalar-derive.workspace = true
 bottlerocket-string-impls-for.workspace = true
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-toml = "0.8"
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
+toml.workspace = true
 
 # settings extensions
 settings-extension-autoscaling.workspace = true
diff --git a/bottlerocket-settings-models/string-impls-for/Cargo.toml b/bottlerocket-settings-models/string-impls-for/Cargo.toml
index 8a258dc..f95be0e 100644
--- a/bottlerocket-settings-models/string-impls-for/Cargo.toml
+++ b/bottlerocket-settings-models/string-impls-for/Cargo.toml
@@ -9,7 +9,7 @@ publish = false
 exclude = ["README.md"]
 
 [dependencies]
-serde = "1"
+serde.workspace = true
 
 [lints]
 workspace = true
diff --git a/bottlerocket-settings-plugin/Cargo.toml b/bottlerocket-settings-plugin/Cargo.toml
index 0213bd9..ddd8b53 100644
--- a/bottlerocket-settings-plugin/Cargo.toml
+++ b/bottlerocket-settings-plugin/Cargo.toml
@@ -7,10 +7,10 @@ repository = "https://github.com/bottlerocket-os/bottlerocket-settings-sdk"
 readme = "../README.md"
 
 [dependencies]
-abi_stable = "0.11.3"
-lazy_static = "1.4.0"
-serde = "1.0.198"
-serde_json = "1.0.116"
+abi_stable.workspace = true
+lazy_static.workspace = true
+serde.workspace = true
+serde_json.workspace = true
 bottlerocket-settings-derive.workspace = true
 
 [lints]
diff --git a/bottlerocket-settings-sdk/Cargo.toml b/bottlerocket-settings-sdk/Cargo.toml
index 91e0340..354d0cd 100644
--- a/bottlerocket-settings-sdk/Cargo.toml
+++ b/bottlerocket-settings-sdk/Cargo.toml
@@ -7,19 +7,19 @@ repository = "https://github.com/bottlerocket-os/bottlerocket-settings-sdk"
 readme = "../README.md"
 
 [dependencies]
-argh = "0.1"
+argh.workspace = true
 bottlerocket-template-helper.workspace = true
-serde = { version = "1", features = ["derive"] }
-serde_json = "1.0"
-snafu = "0.8"
-tracing = { version = "0.1", features = ["log"] }
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
+snafu.workspace = true
+tracing = { workspace = true, features = ["log"] }
 
 [dev-dependencies]
-anyhow = "1"
-ctor = "0.2"
-env_logger = "0.10"
-log = "0.4"
-maplit = "1"
+anyhow.workspace = true
+ctor.workspace = true
+env_logger.workspace = true
+log.workspace = true
+maplit.workspace = true
 
 [features]
 default = ["extension", "proto1"]
diff --git a/bottlerocket-template-helper/Cargo.toml b/bottlerocket-template-helper/Cargo.toml
index 13294bb..4547b83 100644
--- a/bottlerocket-template-helper/Cargo.toml
+++ b/bottlerocket-template-helper/Cargo.toml
@@ -13,15 +13,15 @@ path = "src/lib.rs"
 proc-macro = true
 
 [dependencies]
-darling = "0.20"
-proc-macro2 = "1"
-quote = "1"
-serde_json = "1"
-syn = { version = "2", default-features = false, features = ["full", "parsing", "printing", "proc-macro", "visit-mut"] }
+darling.workspace = true
+proc-macro2.workspace = true
+quote.workspace = true
+serde_json.workspace = true
+syn = { workspace = true, features = ["full", "parsing", "printing", "proc-macro", "visit-mut"] }
 
 
 [dev-dependencies]
-anyhow = "1"
+anyhow.workspace = true
 bottlerocket-settings-sdk.workspace = true
 
 [lints]
diff --git a/deny.toml b/deny.toml
index a853789..ae17d29 100644
--- a/deny.toml
+++ b/deny.toml
@@ -31,3 +31,8 @@ skip = [
     # abi_stable is using an older version of syn
     { name = "syn", version = "1" },
 ]
+
+[bans.workspace-dependencies]
+duplicates = "deny"
+include-path-dependencies = true
+unused = "deny"