diff --git a/Cargo.lock b/Cargo.lock
index 85fa80b4..5a1d5384 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4680,7 +4680,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2796faa41db3ec313a31f7624d9286acf277b52de526150b7e69f3debf891ee5"
 dependencies = [
  "bytes",
- "prost-derive",
+ "prost-derive 0.13.5",
+]
+
+[[package]]
+name = "prost"
+version = "0.14.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "528ac67416ff8646872a3c02cad9cc4ee5dc9f9540c9b10771855c95cb2e5ae1"
+dependencies = [
+ "bytes",
+ "prost-derive 0.14.4",
 ]
 
 [[package]]
@@ -4696,7 +4706,7 @@ dependencies = [
  "once_cell",
  "petgraph",
  "prettyplease",
- "prost",
+ "prost 0.13.5",
  "prost-types",
  "regex",
  "syn 2.0.118",
@@ -4716,13 +4726,26 @@ dependencies = [
  "syn 2.0.118",
 ]
 
+[[package]]
+name = "prost-derive"
+version = "0.14.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b570b25f7617e43d59005d0990ccb79e950a423952cea19671b7a876da390adf"
+dependencies = [
+ "anyhow",
+ "itertools",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
 [[package]]
 name = "prost-types"
 version = "0.13.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "52c2c1bf36ddb1a1c396b3601a3cec27c2462e45f07c386894ec3ccf5332bd16"
 dependencies = [
- "prost",
+ "prost 0.13.5",
 ]
 
 [[package]]
@@ -6331,7 +6354,7 @@ dependencies = [
  "hyper-util",
  "percent-encoding",
  "pin-project",
- "prost",
+ "prost 0.13.5",
  "rustls-native-certs",
  "socket2 0.5.10",
  "tokio",
@@ -6644,7 +6667,7 @@ dependencies = [
  "once_cell",
  "openh264",
  "portable-pty",
- "prost",
+ "prost 0.14.4",
  "rustls",
  "serde",
  "serde_json",
@@ -6672,7 +6695,7 @@ dependencies = [
  "flate2",
  "is_elevated",
  "nix 0.31.3",
- "prost",
+ "prost 0.14.4",
  "reqwest",
  "semver",
  "serde",
@@ -6695,7 +6718,7 @@ dependencies = [
  "get_if_addrs",
  "nullnet-liberror",
  "pnet",
- "prost",
+ "prost 0.14.4",
  "rustls",
  "serde",
  "serde_json",
@@ -6722,7 +6745,7 @@ dependencies = [
  "nullnet-liberror",
  "nullnet-libipinfo",
  "pingora",
- "prost",
+ "prost 0.14.4",
  "rand 0.9.4",
  "russh",
  "rustls",
diff --git a/Cargo.toml b/Cargo.toml
index 048ecf63..17da03ae 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -9,7 +9,7 @@ members = [
 [workspace.dependencies]
 tokio = { version = "1.43.0", features = ["full"] }
 tonic = { version = "0.13.1", features = ["_tls-any", "tls-native-roots"] }
-prost = "0.13.5"
+prost = "0.14.4"
 # default-features pulls in aws_lc_rs (aws-lc-sys compiles a large C/asm
 # crypto library) on top of ring, even though wallguard/wallguard-server
 # explicitly install the `ring` CryptoProvider at startup — the aws-lc-rs