diff --git a/Cargo.lock b/Cargo.lock
index 88e9b74..cc6b180 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1326,9 +1326,6 @@ dependencies = [
  "mtp-transport",
  "mtp-type-map",
  "mtp-webserver",
- "rand",
- "rcgen",
- "tokio",
 ]
 
 [[package]]
@@ -1363,7 +1360,6 @@ name = "mtp-common"
 version = "0.3.0"
 dependencies = [
  "quinn",
- "rustls",
  "thiserror 2.0.20",
  "wtransport",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index ee1c93a..2c1b1ec 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -113,10 +113,5 @@ tls = ["crypto", "mtp-crypto?/tls"]
 # Requires MTP_INSECURE_TLS=1 at runtime.
 insecure-tls = ["dep:mtp-transport", "mtp-transport?/insecure-tls"]
 
-[dev-dependencies]
-tokio = { version = "1", features = ["full"] }
-rcgen = "0.14"
-rand = "0.10.1"
-
 [package.metadata.cargo-machete]
 ignored = ["mtp-transport"]
diff --git a/common/Cargo.toml b/common/Cargo.toml
index 24d4777..5fae68e 100644
--- a/common/Cargo.toml
+++ b/common/Cargo.toml
@@ -15,7 +15,6 @@ wtransport = { version = "0.7.1", default-features = false, features = [
     "quinn",
     "self-signed",
 ] }
-rustls = { version = "0.23.41" }
 quinn = { version = "0.11.11", default-features = false, features = [
     "rustls-aws-lc-rs",
     "rustls",
diff --git a/crypto/Cargo.toml b/crypto/Cargo.toml
index 88a37f4..e9fae26 100644
--- a/crypto/Cargo.toml
+++ b/crypto/Cargo.toml
@@ -7,7 +7,7 @@ edition = "2024"
 ignored = ["rand_core"]
 
 [dependencies]
-chacha20poly1305 = { version = "0.10", optional = true }
+chacha20poly1305 = { version = "0.11", optional = true }
 aes-gcm = { version = "0.10", optional = true }
 ed25519-dalek = { version = "3.0", optional = true, features = [
     "pkcs8",
diff --git a/example/Cargo.lock b/example/Cargo.lock
index 8d2fb30..ba5bf49 100644
--- a/example/Cargo.lock
+++ b/example/Cargo.lock
@@ -1305,7 +1305,6 @@ name = "mtp-common"
 version = "0.3.0"
 dependencies = [
  "quinn",
- "rustls",
  "thiserror 2.0.20",
  "wtransport",
 ]
diff --git a/type-map/Cargo.toml b/type-map/Cargo.toml
index ad811ae..1cacaa0 100644
--- a/type-map/Cargo.toml
+++ b/type-map/Cargo.toml
@@ -16,3 +16,7 @@ pipes = []
 [build-dependencies]
 serde = { version = "1", features = ["derive"] }
 serde_yaml = "0.9"
+
+[package.metadata.cargo-machete]
+# cargo-machete does not inspect build.rs, where both build dependencies are used.
+ignored = ["serde", "serde_yaml"]