diff --git a/Cargo.lock b/Cargo.lock
index bca8a4d7..3e8ff080 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3774,9 +3774,9 @@ dependencies = [
 
 [[package]]
 name = "sandogasa-rpmvercmp"
-version = "0.18.2"
+version = "0.19.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "98298ac090533560c385faf9e478862006c70c0d4d66ab3eb1c44342ce9f7a13"
+checksum = "9b2044602f338503c12a46d32553d924cb3d2f2b9e5a2b80425cea728f49d612"
 
 [[package]]
 name = "schannel"
diff --git a/Cargo.toml b/Cargo.toml
index b35cfb3b..8f4d1745 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -52,7 +52,7 @@ directories = "6"
 # rpm version comparison — pure-Rust replacement for upstream's libc
 # `rpm.labelCompare`, preserving the single-static-binary / no-runtime-deps
 # contract. Verified against every upstream `test_rpm_version` golden vector.
-sandogasa-rpmvercmp = "0.18"
+sandogasa-rpmvercmp = "0.19"
 # http
 reqwest = { version = "0.13", features = ["json", "rustls"], default-features = false }
 # The openQA REST API client: signed-request auth (HMAC-SHA1 X-API-Hash),