diff --git a/deny.toml b/deny.toml
index d95bdf294b..c32c8715a8 100644
--- a/deny.toml
+++ b/deny.toml
@@ -33,6 +33,11 @@ skip-tree = [
     { name = "regex-automata" },
     # pulled in by hyper
     { name = "socket2" },
+    # hyper-util hasn't upgraded to 0.5 yet, but it's the same service / layer
+    # crates beneath
+    { name = "tower" },
+    # tower hasn't upgraded to 1.0 yet
+    { name = "sync_wrapper" },
 ]
 
 [sources]