diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c81ae294..e82040f5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -144,13 +144,10 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
 
       - name: Install cargo-deny
-        uses: taiki-e/install-action@v2
-        with:
-          tool: cargo-deny
+        run: cargo install cargo-deny --locked
 
       - name: Cargo Deny - Check
-        run: cargo deny check
-        shell: bash
+        run: cargo deny --workspace check
 
   # todo: run on all crates
   cargo-hack-codetable:
@@ -164,13 +161,10 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
 
       - name: Install cargo-hack
-        uses: taiki-e/install-action@v2
-        with:
-          tool: cargo-hack
+        run: cargo install cargo-hack --locked
 
       - name: Cargo Hack - Check each feature
         run: cargo hack check -p multihash-codetable --each-feature --exclude-features arb
-        shell: bash
         env:
           RUSTFLAGS: -D warnings
 
diff --git a/.github/workflows/generated-pr.yml b/.github/workflows/generated-pr.yml
deleted file mode 100644
index b8c5cc63..00000000
--- a/.github/workflows/generated-pr.yml
+++ /dev/null
@@ -1,14 +0,0 @@
-name: Close Generated PRs
-
-on:
-  schedule:
-    - cron: '0 0 * * *'
-  workflow_dispatch:
-
-permissions:
-  issues: write
-  pull-requests: write
-
-jobs:
-  stale:
-    uses: ipdxco/unified-github-workflows/.github/workflows/reusable-generated-pr.yml@v1
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
deleted file mode 100644
index 7c955c41..00000000
--- a/.github/workflows/stale.yml
+++ /dev/null
@@ -1,14 +0,0 @@
-name: Close Stale Issues
-
-on:
-  schedule:
-    - cron: '0 0 * * *'
-  workflow_dispatch:
-
-permissions:
-  issues: write
-  pull-requests: write
-
-jobs:
-  stale:
-    uses: ipdxco/unified-github-workflows/.github/workflows/reusable-stale-issue.yml@v1
diff --git a/Cargo.toml b/Cargo.toml
index b02fa587..eb5792bc 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -32,17 +32,18 @@ serde-codec = ["serde"] # Deprecated, don't use.
 serde = ["dep:serde"]
 
 [workspace.dependencies]
-no_std_io2 = { version = "0.9", default-features = false }
+hex = "0.4.2"
+unsigned-varint = { version = "0.8.0", default-features = false }
 
 [dependencies]
 parity-scale-codec = { version = "3.0.0", default-features = false, features = ["derive"], optional = true }
 quickcheck = { version = "1.0.3", optional = true }
 rand = { version = "0.10", default-features = false, features = ["alloc"], optional = true }
 serde = { version = "1.0.116", optional = true, default-features = false }
-unsigned-varint = { version = "0.8.0", default-features = false }
+unsigned-varint = { workspace = true }
 arbitrary = { version = "1.1.0", optional = true }
 
 [dev-dependencies]
-hex = "0.4.2"
+hex = { workspace = true }
 serde_json = "1.0.58"
 serde_test = "1.0.160"
diff --git a/codetable/Cargo.toml b/codetable/Cargo.toml
index eb23e5c2..3118b015 100644
--- a/codetable/Cargo.toml
+++ b/codetable/Cargo.toml
@@ -37,8 +37,8 @@ serde = { version = "1.0.158", features = ["derive"], default-features = false,
 arbitrary = { version = "1.3.2", optional = true, features = ["derive"] }
 
 [dev-dependencies]
-hex = "0.4.2"
-unsigned-varint = { version = "0.8.0", default-features = false }
+hex = { workspace = true }
+unsigned-varint = { workspace = true }
 criterion = "0.8"
 digest-io = "0.1"
 rand = "0.10"
diff --git a/deny.toml b/deny.toml
index 5ee1e087..9275f4cc 100644
--- a/deny.toml
+++ b/deny.toml
@@ -3,30 +3,16 @@ allow = [
     "Apache-2.0",
     "BSD-3-Clause",
     "MIT",
-    "Unicode-DFS-2016",
+    "Unicode-3.0",
 ]
 confidence-threshold = 1.0
 
 [bans]
-allow = []
-deny = []
-# TODO before changing to 'deny':
-#   * Resolve duplicate versions of itoa (used by criterion)
-#   * Remove atty from criterion
-#   * Resolve duplicate versions of constant_time_eq (used by blake2_sid and blake3)
 multiple-versions = "deny"
-skip = []
-skip-tree = []
 wildcards = "deny"
+# Allow path dependencies within the workspace.
 allow-wildcard-paths = true
+skip = [{ name = "syn" , version = "2.0" }]
 
-[sources]
-allow-git = []
-allow-registry = ["https://github.com/rust-lang/crates.io-index"]
-unknown-git = "deny"
-unknown-registry = "deny"
-
-[sources.allow-org]
-github = []
-gitlab = []
-bitbucket = []
+[bans.workspace-dependencies]
+duplicates = "deny"