diff --git a/Cargo.lock b/Cargo.lock
index 7b9759a12..facd93ab7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9221,7 +9221,7 @@ dependencies = [
  "thiserror 1.0.69",
  "tokio",
  "tracing",
- "ureq",
+ "ureq 2.12.1",
  "zip 8.6.0",
  "zipsign-api",
 ]
@@ -9248,7 +9248,7 @@ dependencies = [
  "thiserror 1.0.69",
  "tokio",
  "tracing",
- "ureq",
+ "ureq 3.3.0",
  "zip 8.6.0",
  "zipsign-api",
 ]
@@ -10211,6 +10211,35 @@ dependencies = [
  "webpki-roots 0.26.11",
 ]
 
+[[package]]
+name = "ureq"
+version = "3.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dea7109cdcd5864d4eeb1b58a1648dc9bf520360d7af16ec26d0a9354bafcfc0"
+dependencies = [
+ "base64",
+ "flate2",
+ "log",
+ "percent-encoding",
+ "rustls 0.23.40",
+ "rustls-pki-types",
+ "ureq-proto",
+ "utf8-zero",
+ "webpki-roots 1.0.7",
+]
+
+[[package]]
+name = "ureq-proto"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e994ba84b0bd1b1b0cf92878b7ef898a5c1760108fe7b6010327e274917a808c"
+dependencies = [
+ "base64",
+ "http",
+ "httparse",
+ "log",
+]
+
 [[package]]
 name = "url"
 version = "2.5.8"
@@ -10236,6 +10265,12 @@ version = "0.7.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
 
+[[package]]
+name = "utf8-zero"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8c0a043c9540bae7c578c88f91dda8bd82e59ae27c21baca69c8b191aaf5a6e"
+
 [[package]]
 name = "utf8_iter"
 version = "1.0.4"
diff --git a/crates/terraphim_update/Cargo.toml b/crates/terraphim_update/Cargo.toml
index 555ca7d39..8c2118623 100644
--- a/crates/terraphim_update/Cargo.toml
+++ b/crates/terraphim_update/Cargo.toml
@@ -28,7 +28,7 @@ chrono = { workspace = true }
 
 semver = "1.0"
 sha2 = "0.10"
-ureq = "2.9"
+ureq = "3.3"
 dirs = "5.0"
 dialoguer = "0.12"
 # zipsign-api for signature verification (also pulled by self_update)