diff --git a/Cargo.lock b/Cargo.lock
index 75f1475..457bb2c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4334,6 +4334,17 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "sha2"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
 [[package]]
 name = "sharded-slab"
 version = "0.1.7"
@@ -4592,7 +4603,7 @@ dependencies = [
  "percent-encoding",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.10.9",
  "smallvec",
  "thiserror 2.0.20",
  "tokio",
@@ -4630,7 +4641,7 @@ dependencies = [
  "quote",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.10.9",
  "sqlx-core",
  "sqlx-mysql",
  "sqlx-postgres",
@@ -4674,7 +4685,7 @@ dependencies = [
  "rsa",
  "serde",
  "sha1 0.10.7",
- "sha2",
+ "sha2 0.10.9",
  "smallvec",
  "sqlx-core",
  "stringprep",
@@ -4713,7 +4724,7 @@ dependencies = [
  "rand 0.8.7",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.10.9",
  "smallvec",
  "sqlx-core",
  "stringprep",
@@ -5190,7 +5201,7 @@ dependencies = [
  "rand 0.8.7",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.11.0",
  "sqlx",
  "tempfile",
  "thiserror 1.0.69",
@@ -5233,7 +5244,7 @@ dependencies = [
  "memmap2",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.11.0",
  "tempfile",
  "thiserror 1.0.69",
  "tracing",
@@ -5279,7 +5290,7 @@ dependencies = [
  "rayon",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.11.0",
  "tempfile",
  "thiserror 1.0.69",
  "tracing",
@@ -5336,7 +5347,7 @@ dependencies = [
  "hex",
  "serde",
  "serde_json",
- "sha2",
+ "sha2 0.11.0",
  "tracing",
  "umc-core",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 4915a03..cb480d3 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -30,7 +30,7 @@ indexmap         = { version = "2.4", features = ["serde"] }
 
 # Hashing & cryptography
 xxhash-rust      = { version = "0.8", features = ["xxh64"] }
-sha2             = "0.10"
+sha2             = "0.11"
 hex              = "0.4"
 
 # CLI
diff --git a/umc-api/Cargo.toml b/umc-api/Cargo.toml
index d8efed2..052f36d 100644
--- a/umc-api/Cargo.toml
+++ b/umc-api/Cargo.toml
@@ -32,7 +32,7 @@ serde_json       = "1.0"
 # ── Auth & Crypto ────────────────────────────────────────────────────────────
 jsonwebtoken     = "9.3"
 argon2           = "0.5"
-sha2             = "0.10"
+sha2             = "0.11"
 rand             = "0.8"
 hex              = "0.4"
 base64           = "0.22"