diff --git a/Cargo.lock b/Cargo.lock
index 3ac724f..a4adfb9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1077,7 +1077,7 @@ dependencies = [
  "spirv-webgpu-transform",
  "tar",
  "thiserror 2.0.21",
- "toml 0.8.23",
+ "toml 1.1.3+spec-1.1.0",
  "tracing",
  "tracing-subscriber",
  "turbojpeg",
diff --git a/crates/engine/Cargo.toml b/crates/engine/Cargo.toml
index 9bcb997..a1c480f 100644
--- a/crates/engine/Cargo.toml
+++ b/crates/engine/Cargo.toml
@@ -155,7 +155,7 @@ ureq = "2.12"
 # Model downloads are verified against a pinned SHA-256.
 sha2 = "0.10"
 # `secrets.toml` and `accounts.toml`.
-toml = "0.8"
+toml = "1.1"
 # ElevenLabs sends speech with timestamps as base64 inside JSON. Already in
 # the tree through wgpu and ureq; this only names it.
 base64 = "0.22"