diff --git a/Cargo.lock b/Cargo.lock
index 6df6ac26..9c5077a6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -279,10 +279,10 @@ dependencies = [
  "syn 2.0.118",
  "toml",
  "toml_edit",
- "wasmparser",
+ "wasmparser 0.247.0",
  "which",
  "wit-component",
- "wit-parser",
+ "wit-parser 0.258.0",
 ]
 
 [[package]]
@@ -1549,7 +1549,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "30b6733b8b91d010a6ac5b0fb237dc46a19650bc4c67db66857e2e787d437204"
 dependencies = [
  "leb128fmt",
- "wasmparser",
+ "wasmparser 0.247.0",
 ]
 
 [[package]]
@@ -1561,7 +1561,7 @@ dependencies = [
  "anyhow",
  "indexmap 2.14.0",
  "wasm-encoder",
- "wasmparser",
+ "wasmparser 0.247.0",
 ]
 
 [[package]]
@@ -1577,6 +1577,17 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "wasmparser"
+version = "0.258.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9a61719f93a87b16d325921e251800c4833f8fab50fa21c7de73aed50086313"
+dependencies = [
+ "bitflags",
+ "indexmap 2.14.0",
+ "semver",
+]
+
 [[package]]
 name = "web-sys"
 version = "0.3.103"
@@ -1697,8 +1708,8 @@ dependencies = [
  "serde_json",
  "wasm-encoder",
  "wasm-metadata",
- "wasmparser",
- "wit-parser",
+ "wasmparser 0.247.0",
+ "wit-parser 0.247.0",
 ]
 
 [[package]]
@@ -1717,7 +1728,26 @@ dependencies = [
  "serde_derive",
  "serde_json",
  "unicode-xid",
- "wasmparser",
+ "wasmparser 0.247.0",
+]
+
+[[package]]
+name = "wit-parser"
+version = "0.258.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff4daaa3cd97ae49ecd0a99dc009d453f93e0f083dd3be38c0f24a83a93e37ac"
+dependencies = [
+ "anyhow",
+ "hashbrown 0.17.1",
+ "id-arena",
+ "indexmap 2.14.0",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-ident",
+ "wasmparser 0.258.0",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 810927ad..d7dc31d9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -128,7 +128,7 @@ sha2 = "0.10"
 # accepted from wit-parser 0.247 on. Since these crates ARE the gate's oracle, a floating version
 # would let the oracle drift off the floor the generated WIT is written against. Bump all three
 # together, and only with a re-probe of the keyword set (`generation::wit::WIT_KEYWORDS`).
-wit-parser = "=0.247.0"
+wit-parser = "=0.258.0"
 # Deliberately default-features: the `dummy-module` feature gates a `ComponentEncoder` path that is a
 # FALSE ORACLE for worlds exporting resources (it fails a package that resolves, encodes, validates
 # and builds).