diff --git a/Cargo.lock b/Cargo.lock
index 2197fcb..5cceefb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1985,9 +1985,9 @@ dependencies = [
 
 [[package]]
 name = "jsonwebtoken"
-version = "10.4.0"
+version = "11.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eba32bfb4ffdeaca3e34431072faf01745c9b26d25504aa7a6cf5684334fc4fc"
+checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65"
 dependencies = [
  "aws-lc-rs",
  "base64 0.22.1",
diff --git a/Cargo.toml b/Cargo.toml
index b2c1176..1f71a4f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -36,7 +36,7 @@ http = "1"
 http-body-util = "0.1.5"
 hyper = "1.11.1"
 hyper-util = "0.1"
-jsonwebtoken = { version = "10.2", features = ["aws_lc_rs"] }
+jsonwebtoken = { version = "11.0", features = ["aws_lc_rs"] }
 metrics = "0.24.5"
 # Only the http-listener feature. The default set also pulls in push-gateway, which brings
 # hyper-rustls and a TLS provider along with it for a mode we do not use.