diff --git a/Cargo.lock b/Cargo.lock
index b7ffb90..7bc5153 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -562,6 +562,12 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
 [[package]]
 name = "colorchoice"
 version = "1.0.5"
@@ -688,6 +694,15 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+]
+
 [[package]]
 name = "defmt"
 version = "1.1.1"
@@ -738,6 +753,7 @@ checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
 dependencies = [
  "block-buffer 0.12.1",
  "crypto-common 0.2.2",
+ "ctutils",
 ]
 
 [[package]]
@@ -875,7 +891,7 @@ dependencies = [
  "fixedformat-core",
  "futures",
  "glob",
- "hmac",
+ "hmac 0.13.0",
  "http",
  "log",
  "object_store",
@@ -1141,6 +1157,15 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.3",
+]
+
 [[package]]
 name = "http"
 version = "1.4.2"
@@ -2987,7 +3012,7 @@ dependencies = [
  "chrono",
  "flatbuffers",
  "flate2",
- "hmac",
+ "hmac 0.12.1",
  "libc",
  "rand 0.8.7",
  "rust_decimal",
diff --git a/crates/fixedformat-worker/Cargo.toml b/crates/fixedformat-worker/Cargo.toml
index 65cbc87..ca87ab4 100644
--- a/crates/fixedformat-worker/Cargo.toml
+++ b/crates/fixedformat-worker/Cargo.toml
@@ -64,4 +64,4 @@ tokio = { version = "1", default-features = false, features = ["rt", "time"] }
 async-trait = "0.1"
 http = "1"
 sha2 = "0.10"
-hmac = "0.12"
+hmac = "0.13"