diff --git a/Cargo.lock b/Cargo.lock
index 2f07ae3e51919..515b8409af5f3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3736,6 +3736,27 @@ dependencies = [
  "syn 1.0.107",
 ]
 
+[[package]]
+name = "derive_more"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a9b99b9cbbe49445b21764dc0625032a89b145a2642e67603e1c936f5458d05"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7330aeadfbe296029522e6c40f315320aba36fc43a5b3632f3795348f3bd22"
+dependencies = [
+ "proc-macro2 1.0.87",
+ "quote 1.0.35",
+ "syn 2.0.79",
+ "unicode-xid 0.2.4",
+]
+
 [[package]]
 name = "determinator"
 version = "0.12.0"
@@ -4772,7 +4793,7 @@ dependencies = [
  "cbc",
  "ctr",
  "curve25519-dalek-ng",
- "derive_more",
+ "derive_more 0.99.17",
  "digest 0.10.7",
  "ecdsa 0.16.9",
  "ed25519-consensus",
@@ -4864,7 +4885,7 @@ dependencies = [
  "ark-snark",
  "bcs",
  "byte-slice-cast",
- "derive_more",
+ "derive_more 0.99.17",
  "fastcrypto",
  "ff 0.13.0",
  "im",
@@ -9218,22 +9239,6 @@ dependencies = [
  "tonic 0.12.3",
 ]
 
-[[package]]
-name = "opentelemetry_api"
-version = "0.20.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a81f725323db1b1206ca3da8bb19874bbd3f57c3bcd59471bfb04525b265b9b"
-dependencies = [
- "futures-channel",
- "futures-util",
- "indexmap 1.9.3",
- "js-sys",
- "once_cell",
- "pin-project-lite",
- "thiserror",
- "urlencoding",
-]
-
 [[package]]
 name = "opentelemetry_sdk"
 version = "0.25.0"
@@ -11585,7 +11590,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f7d66a1128282b7ef025a8ead62a4a9fcf017382ec53b8ffbf4d7bf77bd3c60"
 dependencies = [
  "cfg-if",
- "derive_more",
+ "derive_more 0.99.17",
  "parity-scale-codec 3.6.5",
  "scale-info-derive",
 ]
@@ -13200,7 +13205,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "clap",
- "derivative",
+ "derive_more 1.0.0",
  "fastcrypto",
  "futures",
  "jsonrpsee",
@@ -15534,8 +15539,7 @@ dependencies = [
  "consensus-config",
  "coset",
  "criterion",
- "derivative",
- "derive_more",
+ "derive_more 1.0.0",
  "enum_dispatch",
  "expect-test",
  "eyre",
@@ -15989,7 +15993,6 @@ dependencies = [
  "opentelemetry 0.25.0",
  "opentelemetry-otlp",
  "opentelemetry-proto",
- "opentelemetry_api",
  "opentelemetry_sdk",
  "prometheus",
  "prost 0.13.3",
diff --git a/Cargo.toml b/Cargo.toml
index 51bf22eb69cdd..3fd8e1b428085 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -328,10 +328,9 @@ cynic-codegen = "= 3.7.3"
 dashmap = "5.5.3"
 # datatest-stable = "0.1.2"
 datatest-stable = { git = "https://github.com/nextest-rs/datatest-stable.git", rev = "72db7f6d1bbe36a5407e96b9488a581f763e106f" }
-derivative = "2.2.0"
 derive-syn-parse = "0.1.5"
 derive_builder = "0.12.0"
-derive_more = "0.99.17"
+derive_more = "1.0.0"
 diesel = "2.2"
 diesel_migrations = "2.2"
 diesel-async = "0.5"
diff --git a/crates/sui-cluster-test/Cargo.toml b/crates/sui-cluster-test/Cargo.toml
index 7fb6a724ada80..87b2add805c32 100644
--- a/crates/sui-cluster-test/Cargo.toml
+++ b/crates/sui-cluster-test/Cargo.toml
@@ -22,7 +22,7 @@ uuid.workspace = true
 prometheus.workspace = true
 fastcrypto.workspace = true
 shared-crypto.workspace = true
-derivative.workspace = true
+derive_more = { workspace = true, features = ["debug"] }
 regex.workspace = true
 
 sui-indexer.workspace = true
diff --git a/crates/sui-cluster-test/src/config.rs b/crates/sui-cluster-test/src/config.rs
index 9df8facf131d3..a8a4d91e3afd2 100644
--- a/crates/sui-cluster-test/src/config.rs
+++ b/crates/sui-cluster-test/src/config.rs
@@ -3,7 +3,7 @@
 
 use clap::*;
 use regex::Regex;
-use std::{fmt, path::PathBuf};
+use std::path::PathBuf;
 
 #[derive(Parser, Clone, ValueEnum, Debug)]
 pub enum Env {
@@ -16,8 +16,7 @@ pub enum Env {
     NewLocal,
 }
 
-#[derive(derivative::Derivative, Parser)]
-#[derivative(Debug)]
+#[derive(derive_more::Debug, Parser)]
 #[clap(name = "", rename_all = "kebab-case")]
 pub struct ClusterTestOpt {
     #[clap(value_enum)]
@@ -33,7 +32,12 @@ pub struct ClusterTestOpt {
     pub indexer_address: Option<String>,
     /// URL for the Indexer Postgres DB
     #[clap(long)]
-    #[derivative(Debug(format_with = "obfuscated_pg_address"))]
+    #[debug("{}", match pg_address {
+        None => "None".into(),
+        Some(val) => Regex::new(r":.*@")
+            .unwrap()
+            .replace_all(val.as_str(), ":*****@"),
+    })]
     pub pg_address: Option<String>,
     #[clap(long)]
     pub config_dir: Option<PathBuf>,
@@ -47,21 +51,6 @@ pub struct ClusterTestOpt {
     pub with_indexer_and_graphql: bool,
 }
 
-fn obfuscated_pg_address(val: &Option<String>, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-    match val {
-        None => write!(f, "None"),
-        Some(val) => {
-            write!(
-                f,
-                "{}",
-                Regex::new(r":.*@")
-                    .unwrap()
-                    .replace_all(val.as_str(), ":*****@")
-            )
-        }
-    }
-}
-
 impl ClusterTestOpt {
     pub fn new_local() -> Self {
         Self {
diff --git a/crates/sui-types/Cargo.toml b/crates/sui-types/Cargo.toml
index fcb060ce2bd7c..4b29e276ec05e 100644
--- a/crates/sui-types/Cargo.toml
+++ b/crates/sui-types/Cargo.toml
@@ -42,7 +42,6 @@ roaring.workspace = true
 enum_dispatch.workspace = true
 eyre.workspace = true
 indexmap.workspace = true
-derivative.workspace = true
 jsonrpsee.workspace = true
 move-binary-format.workspace = true
 move-bytecode-utils.workspace = true
@@ -70,7 +69,7 @@ fastcrypto-zkp.workspace = true
 passkey-types.workspace = true
 
 typed-store-error.workspace = true
-derive_more.workspace = true
+derive_more = { workspace = true, features = ["as_ref", "debug", "display", "from"] }
 proptest.workspace = true
 proptest-derive.workspace = true
 better_any.workspace = true
diff --git a/crates/sui-types/src/move_package.rs b/crates/sui-types/src/move_package.rs
index 8b12643e4ec16..06bd929471916 100644
--- a/crates/sui-types/src/move_package.rs
+++ b/crates/sui-types/src/move_package.rs
@@ -10,7 +10,6 @@ use crate::{
     object::OBJECT_START_VERSION,
     SUI_FRAMEWORK_ADDRESS,
 };
-use derive_more::Display;
 use fastcrypto::hash::HashFunction;
 use move_binary_format::binary_config::BinaryConfig;
 use move_binary_format::file_format::CompiledModule;
@@ -114,13 +113,13 @@ pub struct MovePackage {
 // associated constants before storing in any serialization setting.
 /// Rust representation of upgrade policy constants in `sui::package`.
 #[repr(u8)]
-#[derive(Display, Debug, Clone, Copy)]
+#[derive(derive_more::Display, Debug, Clone, Copy)]
 pub enum UpgradePolicy {
-    #[display(fmt = "COMPATIBLE")]
+    #[display("COMPATIBLE")]
     Compatible = 0,
-    #[display(fmt = "ADDITIVE")]
+    #[display("ADDITIVE")]
     Additive = 128,
-    #[display(fmt = "DEP_ONLY")]
+    #[display("DEP_ONLY")]
     DepOnly = 192,
 }
 
diff --git a/crates/sui-types/src/sui_system_state/sui_system_state_inner_v1.rs b/crates/sui-types/src/sui_system_state/sui_system_state_inner_v1.rs
index c759b9254490e..c1cd3056388b5 100644
--- a/crates/sui-types/src/sui_system_state/sui_system_state_inner_v1.rs
+++ b/crates/sui-types/src/sui_system_state/sui_system_state_inner_v1.rs
@@ -88,14 +88,13 @@ pub struct ValidatorMetadataV1 {
     pub extra_fields: Bag,
 }
 
-#[derive(derivative::Derivative, Clone, Eq, PartialEq)]
-#[derivative(Debug)]
+#[derive(derive_more::Debug, Clone, Eq, PartialEq)]
 pub struct VerifiedValidatorMetadataV1 {
     pub sui_address: SuiAddress,
     pub protocol_pubkey: AuthorityPublicKey,
     pub network_pubkey: NetworkPublicKey,
     pub worker_pubkey: NetworkPublicKey,
-    #[derivative(Debug = "ignore")]
+    #[debug(ignore)]
     pub proof_of_possession_bytes: Vec<u8>,
     pub name: String,
     pub description: String,
diff --git a/crates/telemetry-subscribers/Cargo.toml b/crates/telemetry-subscribers/Cargo.toml
index 1ed249129edac..452ea1f2b7a4d 100644
--- a/crates/telemetry-subscribers/Cargo.toml
+++ b/crates/telemetry-subscribers/Cargo.toml
@@ -18,7 +18,6 @@ tracing.workspace = true
 tracing-appender.workspace = true
 tracing-subscriber.workspace = true
 opentelemetry = { version = "0.25.0", optional = true }
-opentelemetry_api = { version = "0.20.0", optional = true }
 opentelemetry_sdk = { version = "0.25.0", features = ["rt-tokio"], optional = true }
 opentelemetry-otlp = { version = "0.25.0", features = ["grpc-tonic"], optional = true }
 tracing-opentelemetry = { version = "0.26.0", optional = true }
@@ -42,7 +41,6 @@ otlp = [
   "opentelemetry",
   "opentelemetry-otlp",
   "opentelemetry-proto",
-  "opentelemetry_api",
   "opentelemetry_sdk"
 ]
 
diff --git a/deny.toml b/deny.toml
index b396cb4eac121..6b358daff5eb3 100644
--- a/deny.toml
+++ b/deny.toml
@@ -39,6 +39,10 @@ ignore = [
 
     # Temporarily allow until arrow family of crates updates `lexical-core` to 1.0
     "RUSTSEC-2023-0086",
+    # allow unmaintained instant crate used in transitive dependencies (backoff, cached, fastrand, parking_lot_*)
+    "RUSTSEC-2024-0384",
+    # allow unmaintained derivative crate used in transitive dependencies (ark-*)
+    "RUSTSEC-2024-0388",
 ]
 # Threshold for security vulnerabilities, any vulnerability with a CVSS score
 # lower than the range specified will be ignored. Note that ignored advisories