diff --git a/cli/tauri-bundler/Cargo.toml b/cli/tauri-bundler/Cargo.toml
index 1d87f394d..0f3d20ffd 100644
--- a/cli/tauri-bundler/Cargo.toml
+++ b/cli/tauri-bundler/Cargo.toml
@@ -17,7 +17,7 @@ clap = "^2"
 dirs = "2.0.2"
 glob = "0.3.0"
 icns = "0.3"
-image = "0.23.4"
+image = "0.23.5"
 libflate = "1.0"
 md5 = "0.7.0"
 msi = "0.2"
@@ -39,13 +39,13 @@ lazy_static = { version = "1.4" }
 handlebars = { version = "3.1" }
 
 [target.'cfg(target_os = "windows")'.dependencies]
-attohttpc = { version = "0.13.0" }
+attohttpc = { version = "0.14.0" }
 regex = { version = "1" }
 runas = "0.2"
 
 [target.'cfg(not(target_os = "linux"))'.dependencies]
 zip = { version = "0.5" }
-sha2 = { version = "0.8" }
+sha2 = { version = "0.9" }
 hex = { version = "0.4" }
 
 [dev-dependencies]
diff --git a/cli/tauri-bundler/src/bundle/wix.rs b/cli/tauri-bundler/src/bundle/wix.rs
index 528468987..830fee003 100644
--- a/cli/tauri-bundler/src/bundle/wix.rs
+++ b/cli/tauri-bundler/src/bundle/wix.rs
@@ -155,9 +155,9 @@ fn download_and_verify(url: &str, hash: &str) -> crate::Result<Vec<u8>> {
   common::print_info("validating hash")?;
 
   let mut hasher = sha2::Sha256::new();
-  hasher.input(&data);
+  hasher.update(&data);
 
-  let url_hash = hasher.result().to_vec();
+  let url_hash = hasher.finalize().to_vec();
   let expected_hash = hex::decode(hash)?;
 
   if expected_hash == url_hash {