diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f07da5f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,27 @@
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: github-actions
+    directory: '/'
+    schedule: { interval: weekly }
+    groups:
+      all-actions-version-updates:
+        applies-to: version-updates
+        patterns: [ '*' ]
+      all-actions-security-updates:
+        applies-to: security-updates
+        patterns: [ '*' ]
+
+  # Update Rust dependencies
+  - package-ecosystem: cargo
+    directory: '/'
+    schedule: { interval: daily, time: '02:00' }
+    open-pull-requests-limit: 10
+    groups:
+      all-cargo-version-updates:
+        applies-to: version-updates
+        patterns: [ '*' ]
+      all-cargo-security-updates:
+        applies-to: security-updates
+        patterns: [ '*' ]
diff --git a/Cargo.toml b/Cargo.toml
index 7c62e94..7e963c1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,13 +17,13 @@ description = "Fast and memory saving bsdiff 4.x compatible delta compressor and
 
 [dependencies]
 byteorder = "1.5"
-bzip2 = "0.5.2"
+bzip2 = "0.6.0"
 clap = { optional = true, version = "4.5", features = ["derive"] }
 rayon = "1.10"
 suffix_array = "0.5"
 
 [dev-dependencies]
-criterion = { version = "0.5", features = ["html_reports"] }
+criterion = { version = "0.7", features = ["html_reports"] }
 qbsdiff_test_bench_utils = { version = "0.1", path = "utils" }
 
 [features]
diff --git a/src/bspatch.rs b/src/bspatch.rs
index bbc47ad..d65de8b 100644
--- a/src/bspatch.rs
+++ b/src/bspatch.rs
@@ -122,7 +122,7 @@ struct PatchFile<'a> {
 }
 
 /// Parse the bsdiff 4.x patch file.
-fn parse(patch: &[u8]) -> Result<PatchFile> {
+fn parse(patch: &[u8]) -> Result<PatchFile<'_>> {
     if patch.len() < 32 || &patch[..8] != b"BSDIFF40" {
         return Err(Error::new(ErrorKind::InvalidData, "not a valid patch"));
     }