diff --git a/Cargo.lock b/Cargo.lock
index 5291ba91..3008cc1f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -636,6 +636,16 @@ dependencies = [
  "uuid",
 ]
 
+[[package]]
+name = "bstr"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6bb31b46c14244e20ee9984b11bf5c992b91fb6939fea616e3512c8baecdbe5f"
+dependencies = [
+ "memchr",
+ "serde_core",
+]
+
 [[package]]
 name = "bumpalo"
 version = "3.20.3"
@@ -4675,9 +4685,12 @@ checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
 
 [[package]]
 name = "similar"
-version = "2.7.0"
+version = "3.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbbb5d9659141646ae647b42fe094daf6c6192d1620870b449d9557f748b2daa"
+checksum = "4f66ca1f7aca2474dc10c942eb22feffc897735f54cd1db90138c2fddb490987"
+dependencies = [
+ "bstr",
+]
 
 [[package]]
 name = "simple_asn1"
diff --git a/crates/orion-server/Cargo.toml b/crates/orion-server/Cargo.toml
index 85c277d4..6edffcff 100644
--- a/crates/orion-server/Cargo.toml
+++ b/crates/orion-server/Cargo.toml
@@ -200,7 +200,7 @@ tokio-rustls = { version = "0.26", default-features = false }
 # aws_lc_rs: the same crypto backend the in-tree rustls stack uses — one
 # provider, not two.
 jsonwebtoken = { version = "11.0.0", features = ["aws_lc_rs"] }
-similar = "2"
+similar = "3"
 
 # Windows cannot run librdkafka's configure build, so it keeps cmake-build —
 # features unify additively with the base rdkafka entry above, per target.