diff --git a/src/code-validator/guest/Cargo.lock b/src/code-validator/guest/Cargo.lock
index 2ddeccc..d558a26 100644
--- a/src/code-validator/guest/Cargo.lock
+++ b/src/code-validator/guest/Cargo.lock
@@ -183,7 +183,7 @@ version = "0.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b672b945a3e4f4f40bfd4cd5ee07df9e796a42254ce7cd6d2599ad969244c44a"
 dependencies = [
- "spin",
+ "spin 0.10.0",
 ]
 
 [[package]]
@@ -700,7 +700,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha2 0.11.0",
- "spin",
+ "spin 0.11.0",
 ]
 
 [[package]]
@@ -711,7 +711,7 @@ dependencies = [
  "anyhow",
  "flatbuffers",
  "log",
- "spin",
+ "spin 0.10.0",
  "thiserror",
  "tracing",
  "tracing-core",
@@ -745,7 +745,7 @@ dependencies = [
  "hyperlight-guest-tracing",
  "linkme",
  "log",
- "spin",
+ "spin 0.10.0",
  "tracing",
 ]
 
@@ -766,7 +766,7 @@ version = "0.13.1"
 source = "git+https://github.com/simongdavies/hyperlight?branch=update-surrogate#5f1912b4ce8a8d83e6ce63425d766bd50f511ef8"
 dependencies = [
  "hyperlight-common",
- "spin",
+ "spin 0.10.0",
  "tracing",
  "tracing-core",
 ]
@@ -1539,6 +1539,15 @@ dependencies = [
  "lock_api",
 ]
 
+[[package]]
+name = "spin"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "783f3f6f6b01e295a669edfc402133a5f2553d1f0e81284b3ba4594e80bdd4a2"
+dependencies = [
+ "lock_api",
+]
+
 [[package]]
 name = "strsim"
 version = "0.11.1"
diff --git a/src/code-validator/guest/runtime/Cargo.toml b/src/code-validator/guest/runtime/Cargo.toml
index 16735e9..cfaec5b 100644
--- a/src/code-validator/guest/runtime/Cargo.toml
+++ b/src/code-validator/guest/runtime/Cargo.toml
@@ -24,7 +24,7 @@ serde = { version = "1", default-features = false, features = ["derive", "alloc"
 serde_json = { version = "1", default-features = false, features = ["alloc"] }
 regex-automata = { version = "0.4", default-features = false, features = ["alloc", "meta", "nfa-pikevm"] }
 nom = { version = "8.0", default-features = false, features = ["alloc"] }
-spin = "0.10"
+spin = "0.11"
 rquickjs = { version = "0.11", default-features = false, features = ["bindgen", "loader"] }
 hashbrown = "0.17"
 sha2 = { version = "0.11", default-features = false }