diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 5ba84c1f19..2550f0fddb 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -8,6 +8,8 @@
 apps/desktop/desktop_native @bitwarden/team-platform-dev
 apps/desktop/desktop_native/objc/src/native/autofill @bitwarden/team-autofill-dev
 apps/desktop/desktop_native/core/src/autofill @bitwarden/team-autofill-dev
+## No ownership for Cargo.toml to allow dependency updates
+apps/desktop/desktop_native/Cargo.toml
 
 ## Auth team files ##
 apps/browser/src/auth @bitwarden/team-auth-dev
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index bde87563dd..01361a9740 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -168,15 +168,20 @@
       matchPackageNames: [
         "@emotion/css",
         "@webcomponents/custom-elements",
+        "bitwarden-russh",
         "bytes",
         "concurrently",
         "cross-env",
         "del",
+        "ed25519",
         "lit",
         "patch-package",
+        "pkcs8",
         "prettier",
         "prettier-plugin-tailwindcss",
         "rimraf",
+        "ssh-encoding",
+        "ssh-key",
         "@storybook/web-components-webpack5",
         "tabbable",
         "tldts",
@@ -210,31 +215,68 @@
         "@types/node-forge",
         "@types/node-ipc",
         "@yao-pkg/pkg",
+        "anyhow",
+        "arboard",
         "babel-loader",
+        "base64",
+        "bindgen",
         "browserslist",
+        "byteorder",
+        "bytes",
+        "core-foundation",
         "copy-webpack-plugin",
+        "dirs",
         "electron",
         "electron-builder",
         "electron-log",
         "electron-reload",
         "electron-store",
         "electron-updater",
+        "embed_plist",
+        "futures",
+        "hex",
+        "homedir",
         "html-webpack-injector",
         "html-webpack-plugin",
+        "interprocess",
         "json5",
+        "keytar",
+        "libc",
+        "log",
         "lowdb",
+        "napi",
+        "napi-build",
+        "napi-derive",
         "node-forge",
         "node-ipc",
+        "oo7",
+        "oslog",
+        "pin-project",
         "pkg",
+        "rand",
         "rxjs",
+        "scopeguard",
+        "security-framework",
+        "security-framework-sys",
+        "serde",
+        "serde_json",
+        "simplelog",
+        "sysinfo",
         "tsconfig-paths-webpack-plugin",
         "type-fest",
+        "typenum",
         "typescript",
         "typescript-strict-plugin",
+        "uniffi",
         "webpack",
         "webpack-cli",
         "webpack-dev-server",
         "webpack-node-externals",
+        "widestring",
+        "windows",
+        "windows-registry",
+        "zbus",
+        "zbus_polkit",
       ],
       description: "Platform owned dependencies",
       commitMessagePrefix: "[deps] Platform:",
@@ -352,7 +394,17 @@
       reviewers: ["team:team-vault-dev"],
     },
     {
-      matchPackageNames: ["@types/argon2-browser", "argon2", "argon2-browser", "big-integer"],
+      matchPackageNames: [
+        "@types/argon2-browser",
+        "aes",
+        "argon2",
+        "argon2-browser",
+        "big-integer",
+        "cbc",
+        "rsa",
+        "russh-cryptovec",
+        "sha2",
+      ],
       description: "Key Management owned dependencies",
       commitMessagePrefix: "[deps] KM:",
       reviewers: ["team:team-key-management-dev"],
diff --git a/apps/desktop/desktop_native/Cargo.toml b/apps/desktop/desktop_native/Cargo.toml
index 5478d39765..5d4c547b75 100644
--- a/apps/desktop/desktop_native/Cargo.toml
+++ b/apps/desktop/desktop_native/Cargo.toml
@@ -9,11 +9,55 @@ edition = "2021"
 publish = false
 
 [workspace.dependencies]
+aes = "=0.8.4"
 anyhow = "=1.0.94"
+arboard = { version = "=3.4.1", default-features = false }
+argon2 = "=0.5.3" 
+base64 = "=0.22.1"
+bindgen = "0.71.1"
+bitwarden-russh = { git = "https://github.com/bitwarden/bitwarden-russh.git", rev = "3d48f140fd506412d186203238993163a8c4e536" }
+byteorder = "=1.5.0"
+bytes = "1.9.0"
+cbc = "=0.1.2" 
+core-foundation = "=0.10.0"
+dirs = "=6.0.0"
+ed25519 =  "=2.2.3" 
+embed_plist = "=1.2.2"
+futures = "=0.3.31"
+hex = "=0.4.3"
+homedir = "=0.3.4"
+interprocess = "=2.2.1" 
+keytar = "=0.1.6"
+libc = "=0.2.169"
 log = "=0.4.25"
+napi = "=2.16.15"
+napi-build = "=2.1.4"
+napi-derive = "=2.16.13"
+oo7 = "=0.3.3"
+oslog = "=0.2.0"
+pin-project = "=1.1.8"
+pkcs8 =  "=0.10.2" 
+rand = "=0.8.5"
+rsa = "=0.9.6"
+russh-cryptovec = "=0.7.3"
+scopeguard = "=1.2.0"
+security-framework = "=3.1.0"
+security-framework-sys = "=2.13.0"
 serde = "=1.0.209"
 serde_json = "=1.0.127"
-tokio = "=1.43.0"
-tokio-util = "=0.7.13"
-tokio-stream = "=0.1.15"
+sha2 = "=0.10.8"
+simplelog = "=0.12.2"
+ssh-encoding = "=0.2.0"
+ssh-key = {version = "=0.6.7", default-features = false }
+sysinfo = "0.33.1" 
 thiserror = "=1.0.69"
+tokio = "=1.43.0"
+tokio-stream = "=0.1.15"
+tokio-util = "=0.7.13"
+typenum = "=1.17.0"
+uniffi =  "=0.28.3"
+widestring = "=1.1.0"
+windows = "=0.58.0"
+windows-registry = "=0.4.0"
+zbus = "=4.4.0"
+zbus_polkit = "=4.0.0"
diff --git a/apps/desktop/desktop_native/core/Cargo.toml b/apps/desktop/desktop_native/core/Cargo.toml
index 8a0bcd0e0a..346f3bde96 100644
--- a/apps/desktop/desktop_native/core/Cargo.toml
+++ b/apps/desktop/desktop_native/core/Cargo.toml
@@ -18,47 +18,47 @@ default = [
 manual_test = []
 
 [dependencies]
-aes = "=0.8.4"
+aes = { workspace = true }
 anyhow = { workspace = true }
-arboard = { version = "=3.4.1", default-features = false, features = [
+arboard = { workspace = true, features = [
     "wayland-data-control",
 ] }
-argon2 = { version = "=0.5.3", features = ["zeroize"] }
-base64 = "=0.22.1"
-byteorder = "=1.5.0"
-cbc = { version = "=0.1.2", features = ["alloc"] }
-homedir = "=0.3.4"
-pin-project = "=1.1.8"
-dirs = "=6.0.0"
-futures = "=0.3.31"
-interprocess = { version = "=2.2.1", features = ["tokio"] }
+argon2 = { workspace = true, features = ["zeroize"] }
+base64 = { workspace = true }
+byteorder = { workspace = true }
+cbc = { workspace = true, features = ["alloc"] }
+homedir = { workspace = true }
+pin-project = { workspace = true }
+dirs = { workspace = true }
+futures = { workspace = true }
+interprocess = { workspace = true, features = ["tokio"] }
 log = { workspace = true }
-rand = "=0.8.5"
-russh-cryptovec = "=0.7.3"
-scopeguard = "=1.2.0"
-sha2 = "=0.10.8"
-ssh-encoding = "=0.2.0"
-ssh-key = { version = "=0.6.7", default-features = false, features = [
+rand = { workspace = true }
+russh-cryptovec = { workspace = true }
+scopeguard = { workspace = true }
+sha2 = { workspace = true }
+ssh-encoding = { workspace = true }
+ssh-key = { workspace = true, features = [
     "encryption",
     "ed25519",
     "rsa",
     "getrandom",
 ] }
-bitwarden-russh = { git = "https://github.com/bitwarden/bitwarden-russh.git", rev = "3d48f140fd506412d186203238993163a8c4e536" }
+bitwarden-russh = { workspace = true }
 tokio = { workspace = true, features = ["io-util", "sync", "macros", "net"] }
 tokio-stream = { workspace = true, features = ["net"] }
 tokio-util = { workspace = true, features = ["codec"] }
 thiserror = { workspace = true }
-typenum = "=1.17.0"
-pkcs8 = { version = "=0.10.2", features = ["alloc", "encryption", "pem"] }
-rsa = "=0.9.6"
-ed25519 = { version = "=2.2.3", features = ["pkcs8"] }
-bytes = "1.9.0"
-sysinfo = { version = "0.33.1", features = ["windows"] }
+typenum = { workspace = true }
+pkcs8 = { workspace = true, features = ["alloc", "encryption", "pem"] }
+rsa = { workspace = true }
+ed25519 = { workspace = true, features = ["pkcs8"] }
+bytes = { workspace = true }
+sysinfo = { workspace = true, features = ["windows"] }
 
 [target.'cfg(windows)'.dependencies]
-widestring = { version = "=1.1.0", optional = true }
-windows = { version = "=0.58.0", features = [
+widestring = { workspace = true, optional = true }
+windows = { workspace = true, features = [
     "Foundation",
     "Security_Credentials_UI",
     "Security_Cryptography",
@@ -72,17 +72,17 @@ windows = { version = "=0.58.0", features = [
 ], optional = true }
 
 [target.'cfg(windows)'.dev-dependencies]
-keytar = "=0.1.6"
+keytar = { workspace = true }
 
 [target.'cfg(target_os = "macos")'.dependencies]
-core-foundation = { version = "=0.10.0", optional = true }
-security-framework = { version = "=3.1.0", optional = true }
-security-framework-sys = { version = "=2.13.0", optional = true }
+core-foundation = { workspace = true, optional = true }
+security-framework = { workspace = true, optional = true }
+security-framework-sys = { workspace = true, optional = true }
 desktop_objc = { path = "../objc" }
 
 [target.'cfg(target_os = "linux")'.dependencies]
-oo7 = "=0.3.3"
-libc = "=0.2.169"
+oo7 = { workspace = true }
+libc = { workspace = true }
 
-zbus = { version = "=4.4.0", optional = true }
-zbus_polkit = { version = "=4.0.0", optional = true }
+zbus = { workspace = true, optional = true }
+zbus_polkit = { workspace = true, optional = true }
diff --git a/apps/desktop/desktop_native/macos_provider/Cargo.toml b/apps/desktop/desktop_native/macos_provider/Cargo.toml
index e160f7f35d..cf7338f23c 100644
--- a/apps/desktop/desktop_native/macos_provider/Cargo.toml
+++ b/apps/desktop/desktop_native/macos_provider/Cargo.toml
@@ -15,16 +15,16 @@ bench = false
 
 [dependencies]
 desktop_core = { path = "../core" }
-futures = "=0.3.31"
+futures = { workspace = true }
 log = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 tokio = { workspace = true, features = ["sync"] }
 tokio-util = { workspace = true }
-uniffi = { version = "=0.28.3", features = ["cli"] }
+uniffi = { workspace = true, features = ["cli"] }
 
 [target.'cfg(target_os = "macos")'.dependencies]
-oslog = "=0.2.0"
+oslog = { workspace = true }
 
 [build-dependencies]
-uniffi = { version = "=0.28.3", features = ["build"] }
+uniffi = { workspace = true, features = ["build"] }
diff --git a/apps/desktop/desktop_native/napi/Cargo.toml b/apps/desktop/desktop_native/napi/Cargo.toml
index a9513fa49a..f5b6d6b7c0 100644
--- a/apps/desktop/desktop_native/napi/Cargo.toml
+++ b/apps/desktop/desktop_native/napi/Cargo.toml
@@ -14,12 +14,12 @@ default = []
 manual_test = []
 
 [dependencies]
-base64 = "=0.22.1"
-hex = "=0.4.3"
+base64 = { workspace = true }
+hex = { workspace = true }
 anyhow = { workspace = true }
 desktop_core = { path = "../core" }
-napi = { version = "=2.16.15", features = ["async"] }
-napi-derive = "=2.16.13"
+napi = { workspace = true, features = ["async"] }
+napi-derive = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 tokio = { workspace = true }
@@ -27,7 +27,7 @@ tokio-util = { workspace = true }
 tokio-stream = { workspace = true }
 
 [target.'cfg(windows)'.dependencies]
-windows-registry = "=0.4.0"
+windows-registry = { workspace = true }
 
 [build-dependencies]
-napi-build = "=2.1.4"
+napi-build = { workspace = true }
diff --git a/apps/desktop/desktop_native/proxy/Cargo.toml b/apps/desktop/desktop_native/proxy/Cargo.toml
index 10ff1ed8ea..a9a1a5aca2 100644
--- a/apps/desktop/desktop_native/proxy/Cargo.toml
+++ b/apps/desktop/desktop_native/proxy/Cargo.toml
@@ -8,11 +8,11 @@ publish = { workspace = true }
 [dependencies]
 anyhow = { workspace = true }
 desktop_core = { path = "../core" }
-futures = "=0.3.31"
+futures = { workspace = true }
 log = { workspace = true }
-simplelog = "=0.12.2"
+simplelog = { workspace = true }
 tokio = { workspace = true, features = ["io-std", "io-util", "macros", "rt"] }
 tokio-util = { workspace = true, features = ["codec"] }
 
 [target.'cfg(target_os = "macos")'.dependencies]
-embed_plist = "=1.2.2"
+embed_plist = { workspace = true }
diff --git a/apps/desktop/desktop_native/windows-plugin-authenticator/Cargo.toml b/apps/desktop/desktop_native/windows-plugin-authenticator/Cargo.toml
index 3443fed4fd..d58a6ecd74 100644
--- a/apps/desktop/desktop_native/windows-plugin-authenticator/Cargo.toml
+++ b/apps/desktop/desktop_native/windows-plugin-authenticator/Cargo.toml
@@ -6,4 +6,5 @@ version = { workspace = true }
 publish = { workspace = true }
 
 [target.'cfg(target_os = "windows")'.build-dependencies]
-bindgen = "0.71.1"
+bindgen = { workspace = true }
+