diff --git a/Cargo.lock b/Cargo.lock
index 2c85ea791906e..f4afdd21b09f0 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1376,7 +1376,7 @@ dependencies = [
  "aws-types",
  "bytes",
  "fastrand 2.0.1",
- "http 0.2.9",
+ "http 0.2.12",
  "hyper 0.14.27",
  "time",
  "tokio",
@@ -1405,7 +1405,7 @@ dependencies = [
  "aws-smithy-types",
  "aws-types",
  "bytes",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "pin-project-lite",
  "tracing",
@@ -1471,7 +1471,7 @@ dependencies = [
  "aws-smithy-types",
  "aws-types",
  "fastrand 2.0.1",
- "http 0.2.9",
+ "http 0.2.12",
  "percent-encoding",
  "tracing",
  "uuid",
@@ -1495,7 +1495,7 @@ dependencies = [
  "aws-types",
  "bytes",
  "fastrand 2.0.1",
- "http 0.2.9",
+ "http 0.2.12",
  "regex",
  "tracing",
 ]
@@ -1517,7 +1517,7 @@ dependencies = [
  "aws-smithy-types",
  "aws-types",
  "bytes",
- "http 0.2.9",
+ "http 0.2.12",
  "regex",
  "tracing",
 ]
@@ -1543,7 +1543,7 @@ dependencies = [
  "aws-smithy-xml",
  "aws-types",
  "bytes",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "once_cell",
  "percent-encoding",
@@ -1570,7 +1570,7 @@ dependencies = [
  "aws-smithy-types",
  "aws-smithy-xml",
  "aws-types",
- "http 0.2.9",
+ "http 0.2.12",
  "regex",
  "tracing",
 ]
@@ -1591,7 +1591,7 @@ dependencies = [
  "form_urlencoded",
  "hex",
  "hmac",
- "http 0.2.9",
+ "http 0.2.12",
  "once_cell",
  "p256 0.11.1",
  "percent-encoding",
@@ -1626,7 +1626,7 @@ dependencies = [
  "crc32c",
  "crc32fast",
  "hex",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "md-5",
  "pin-project-lite",
@@ -1658,7 +1658,7 @@ dependencies = [
  "bytes",
  "bytes-utils",
  "futures-core",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "once_cell",
  "percent-encoding",
@@ -1699,7 +1699,7 @@ dependencies = [
  "bytes",
  "fastrand 2.0.1",
  "h2 0.3.26",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "hyper-rustls 0.24.2",
@@ -1720,7 +1720,7 @@ dependencies = [
  "aws-smithy-async",
  "aws-smithy-types",
  "bytes",
- "http 0.2.9",
+ "http 0.2.12",
  "http 1.1.0",
  "pin-project-lite",
  "tokio",
@@ -1738,7 +1738,7 @@ dependencies = [
  "bytes",
  "bytes-utils",
  "futures-core",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "itoa",
@@ -1781,7 +1781,7 @@ dependencies = [
  "aws-smithy-async",
  "aws-smithy-runtime-api",
  "aws-smithy-types",
- "http 0.2.9",
+ "http 0.2.12",
  "rustc_version 0.4.0",
  "tracing",
 ]
@@ -1797,7 +1797,7 @@ dependencies = [
  "bitflags 1.3.2",
  "bytes",
  "futures-util",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "itoa",
@@ -1857,7 +1857,7 @@ dependencies = [
  "async-trait",
  "bytes",
  "futures-util",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "mime",
  "rustversion",
@@ -5025,7 +5025,7 @@ name = "etcd-client"
 version = "0.12.1"
 source = "git+https://github.com/risingwavelabs/etcd-client.git?rev=4e84d40#4e84d40a84b35718d814cc2afccc9274c9d78e1e"
 dependencies = [
- "http 0.2.9",
+ "http 0.2.12",
  "prost 0.12.1",
  "tokio",
  "tokio-stream",
@@ -5920,7 +5920,7 @@ checksum = "3b00ef897d4082727a53ea1111cd19bfa4ccdc476a5eb9f49087047113a43891"
 dependencies = [
  "anyhow",
  "async-trait",
- "http 0.2.9",
+ "http 0.2.12",
  "thiserror",
  "tokio",
  "tonic 0.10.2",
@@ -6003,7 +6003,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8cb60314136e37de9e2a05ddb427b9c5a39c3d188de2e2f026c6af74425eef44"
 dependencies = [
  "google-cloud-token",
- "http 0.2.9",
+ "http 0.2.12",
  "thiserror",
  "tokio",
  "tokio-retry",
@@ -6121,7 +6121,7 @@ dependencies = [
  "futures-core",
  "futures-sink",
  "futures-util",
- "http 0.2.9",
+ "http 0.2.12",
  "indexmap 2.2.6",
  "slab",
  "tokio",
@@ -6327,9 +6327,9 @@ dependencies = [
 
 [[package]]
 name = "http"
-version = "0.2.9"
+version = "0.2.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bd6effc99afb63425aff9b05836f029929e345a6148a14b7ecd5ab67af944482"
+checksum = "601cbb57e577e2f5ef5be8e7b83f0f63994f25aa94d673e54a92d5c516d101f1"
 dependencies = [
  "bytes",
  "fnv",
@@ -6354,7 +6354,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d5f38f16d184e36f2408a55281cd658ecbd3ca05cce6d6510a176eca393e26d1"
 dependencies = [
  "bytes",
- "http 0.2.9",
+ "http 0.2.12",
  "pin-project-lite",
 ]
 
@@ -6416,7 +6416,7 @@ dependencies = [
  "futures-core",
  "futures-util",
  "h2 0.3.26",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "httparse",
  "httpdate",
@@ -6456,7 +6456,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ec3efd23720e2049821a693cbc7e65ea87c72f1c58ff2f9522ff332b1491e590"
 dependencies = [
  "futures-util",
- "http 0.2.9",
+ "http 0.2.12",
  "hyper 0.14.27",
  "log",
  "rustls 0.21.11",
@@ -7509,7 +7509,7 @@ checksum = "02b4b5de48bb7f3f7eae0bca62b3ed0b7d714b1b273d7347329b92c3a2eef113"
 dependencies = [
  "etcd-client",
  "futures-util",
- "http 0.2.9",
+ "http 0.2.12",
  "madsim",
  "serde",
  "serde_with 3.8.0",
@@ -8358,7 +8358,7 @@ dependencies = [
  "base64 0.13.1",
  "chrono",
  "getrandom",
- "http 0.2.9",
+ "http 0.2.12",
  "rand",
  "reqwest 0.11.20",
  "serde",
@@ -8453,7 +8453,7 @@ dependencies = [
  "flagset",
  "futures",
  "getrandom",
- "http 0.2.9",
+ "http 0.2.12",
  "log",
  "md-5",
  "once_cell",
@@ -8511,7 +8511,7 @@ dependencies = [
  "dyn-clone",
  "ed25519-dalek",
  "hmac",
- "http 0.2.9",
+ "http 0.2.12",
  "itertools 0.10.5",
  "log",
  "oauth2",
@@ -8600,7 +8600,7 @@ checksum = "f24cda83b20ed2433c68241f918d0f6fdec8b1d43b7a9590ab4420c5095ca930"
 dependencies = [
  "async-trait",
  "futures-core",
- "http 0.2.9",
+ "http 0.2.12",
  "opentelemetry",
  "opentelemetry-proto",
  "opentelemetry-semantic-conventions",
@@ -10378,7 +10378,7 @@ dependencies = [
  "hex",
  "hmac",
  "home",
- "http 0.2.9",
+ "http 0.2.12",
  "jsonwebtoken",
  "log",
  "once_cell",
@@ -10437,7 +10437,7 @@ dependencies = [
  "futures-core",
  "futures-util",
  "h2 0.3.26",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "hyper-rustls 0.24.2",
@@ -10887,7 +10887,7 @@ dependencies = [
  "governor",
  "hashbrown 0.14.3",
  "hex",
- "http 0.2.9",
+ "http 1.1.0",
  "http-body 0.4.5",
  "humantime",
  "hytra",
@@ -10998,7 +10998,7 @@ dependencies = [
  "darwin-libproc",
  "easy-ext",
  "futures",
- "http 0.2.9",
+ "http 1.1.0",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "hytra",
@@ -11201,7 +11201,7 @@ dependencies = [
  "google-cloud-gax",
  "google-cloud-googleapis",
  "google-cloud-pubsub",
- "http 0.2.9",
+ "http 1.1.0",
  "iceberg",
  "iceberg-catalog-rest",
  "icelake",
@@ -12045,7 +12045,7 @@ dependencies = [
  "easy-ext",
  "either",
  "futures",
- "http 0.2.9",
+ "http 1.1.0",
  "hyper 0.14.27",
  "itertools 0.12.1",
  "lru 0.7.6",
@@ -12839,7 +12839,7 @@ dependencies = [
  "aws-smithy-xml",
  "aws-types",
  "fastrand 2.0.1",
- "http 0.2.9",
+ "http 0.2.12",
  "regex",
  "tracing",
 ]
@@ -15404,7 +15404,7 @@ dependencies = [
  "futures-core",
  "futures-util",
  "h2 0.3.26",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "hyper-timeout",
@@ -15432,7 +15432,7 @@ dependencies = [
  "bytes",
  "flate2",
  "h2 0.3.26",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "hyper-timeout",
@@ -15463,7 +15463,7 @@ dependencies = [
  "base64 0.21.7",
  "bytes",
  "h2 0.3.26",
- "http 0.2.9",
+ "http 0.2.12",
  "http-body 0.4.5",
  "hyper 0.14.27",
  "hyper-timeout",
@@ -17346,7 +17346,7 @@ dependencies = [
  "async-trait",
  "base64 0.13.1",
  "futures",
- "http 0.2.9",
+ "http 0.2.12",
  "hyper 0.14.27",
  "hyper-rustls 0.24.2",
  "itertools 0.10.5",
diff --git a/src/common/Cargo.toml b/src/common/Cargo.toml
index ae6f67faf3aac..bd857104b3331 100644
--- a/src/common/Cargo.toml
+++ b/src/common/Cargo.toml
@@ -55,7 +55,7 @@ futures = { version = "0.3", default-features = false, features = ["alloc"] }
 governor = { version = "0.6", default-features = false, features = ["std"] }
 hashbrown = "0.14"
 hex = "0.4.3"
-http = "0.2"
+http = "1.1"
 humantime = "2.1"
 hytra = { workspace = true }
 itertools = { workspace = true }
diff --git a/src/common/metrics/Cargo.toml b/src/common/metrics/Cargo.toml
index 4f3e8b20936b2..e0f078b747357 100644
--- a/src/common/metrics/Cargo.toml
+++ b/src/common/metrics/Cargo.toml
@@ -19,7 +19,7 @@ bytes = "1"
 clap = { workspace = true }
 easy-ext = "1"
 futures = { version = "0.3", default-features = false, features = ["alloc"] }
-http = "0.2"
+http = "1.1"
 hyper = { version = "0.14", features = ["client"] }                           # used by tonic
 hytra = { workspace = true }
 itertools = { workspace = true }
diff --git a/src/connector/Cargo.toml b/src/connector/Cargo.toml
index 3d8bf618eca58..1ad69aeccec6d 100644
--- a/src/connector/Cargo.toml
+++ b/src/connector/Cargo.toml
@@ -63,7 +63,7 @@ google-cloud-bigquery = { version = "0.9.0", features = ["auth"] }
 google-cloud-gax = "0.17.0"
 google-cloud-googleapis = { version = "0.13", features = ["pubsub", "bigquery"] }
 google-cloud-pubsub = "0.25"
-http = "0.2"
+http = "1.1"
 iceberg = { workspace = true }
 iceberg-catalog-rest = { workspace = true }
 icelake = { workspace = true }
diff --git a/src/rpc_client/Cargo.toml b/src/rpc_client/Cargo.toml
index 70bebfa154fc4..7c720988a73fc 100644
--- a/src/rpc_client/Cargo.toml
+++ b/src/rpc_client/Cargo.toml
@@ -19,7 +19,7 @@ async-trait = "0.1"
 easy-ext = "1"
 either = "1.12.0"
 futures = { version = "0.3", default-features = false, features = ["alloc"] }
-http = "0.2"
+http = "1.1"
 hyper = "0.14" # required by tonic
 itertools = { workspace = true }
 lru = { workspace = true }