diff --git a/Cargo.lock b/Cargo.lock
index 2455ad7de1..4e86f3e502 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4003,7 +4003,7 @@ dependencies = [
  "sbm_parser",
  "serde",
  "serde_json",
- "sha2 0.10.9",
+ "sha2 0.11.0",
  "sqlx",
  "tempfile",
  "thiserror 2.0.20",
diff --git a/monitor/Cargo.toml b/monitor/Cargo.toml
index 8c892e7189..b5025c5745 100644
--- a/monitor/Cargo.toml
+++ b/monitor/Cargo.toml
@@ -43,7 +43,7 @@ sqlx = { version = "0.9", features = [
 # rust_crypto instead of aws_lc_rs: pure Rust, no cmake/assembly dependency for static musl builds
 jsonwebtoken = { version = "11.0", default-features = false, features = ["rust_crypto"] }
 bcrypt = "0.19"
-sha2 = "0.10"
+sha2 = "0.11"
 
 # Configuration
 dotenvy = "0.15"