diff --git a/Cargo.lock b/Cargo.lock
index 7fbae25..a7603d8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2226,12 +2226,13 @@ dependencies = [
 
 [[package]]
 name = "sha3"
-version = "0.11.0"
+version = "0.12.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be176f1a57ce4e3d31c1a166222d9768de5954f811601fb7ca06fc8203905ce1"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
 dependencies = [
  "digest 0.11.3",
  "keccak",
+ "sponge-cursor",
 ]
 
 [[package]]
@@ -2287,6 +2288,12 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "sqlparser"
 version = "0.62.0"
diff --git a/Cargo.toml b/Cargo.toml
index 64acc61..22cec4e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -126,7 +126,7 @@ serde_json = "1.0.150"
 sha2 = "0.11.0"
 # Exact-pinned: SHA-3 is a cryptographic primitive and must not change
 # silently under a caret update. See AGENTS.md "Pin security-critical deps".
-sha3 = "=0.11.0"
+sha3 = "=0.12.0"
 sqlparser = "0.62.0"
 
 sysinfo = "0.39.3"