diff --git a/Cargo.lock b/Cargo.lock
index d918451c..bf926bed 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -419,23 +419,21 @@ dependencies = [
 
 [[package]]
 name = "bson"
-version = "2.15.0"
+version = "3.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7969a9ba84b0ff843813e7249eed1678d9b6607ce5a3b8f0a47af3fcf7978e6e"
+checksum = "b3f109694c4f45353972af96bf97d8a057f82e2d6e496457f4d135b9867a518c"
 dependencies = [
  "ahash",
  "base64",
  "bitvec",
- "getrandom 0.2.16",
  "getrandom 0.3.4",
  "hex",
  "indexmap 2.12.0",
  "js-sys",
- "once_cell",
  "rand 0.9.2",
- "serde",
  "serde_bytes",
- "serde_json",
+ "simdutf8",
+ "thiserror 2.0.17",
  "time",
  "uuid",
 ]
@@ -4300,7 +4298,6 @@ version = "1.0.145"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "402a6f66d8c709116cf22f558eab210f5a50187f702eb4d7e5ef38d9a7f1c79c"
 dependencies = [
- "indexmap 2.12.0",
  "itoa",
  "memchr",
  "ryu",
@@ -4444,6 +4441,12 @@ dependencies = [
  "quote",
 ]
 
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
 [[package]]
 name = "similar"
 version = "2.7.0"
@@ -5016,9 +5019,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-tungstenite"
-version = "0.24.0"
+version = "0.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edc5f74e248dc973e0dbb7b74c7e0d6fcc301c694ff50049504004ef4d0cdcd9"
+checksum = "d25a406cddcc431a75d3d9afc6a7c0f7428d4891dd973e4d54c56b46127bf857"
 dependencies = [
  "futures-util",
  "log",
@@ -5305,19 +5308,18 @@ dependencies = [
 
 [[package]]
 name = "tungstenite"
-version = "0.24.0"
+version = "0.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "18e5b8366ee7a95b16d32197d0b2604b43a0be89dc5fac9f8e96ccafbaedda8a"
+checksum = "8628dcc84e5a09eb3d8423d6cb682965dea9133204e8fb3efee74c2a0c259442"
 dependencies = [
- "byteorder",
  "bytes",
  "data-encoding",
  "http",
  "httparse",
  "log",
- "rand 0.8.5",
+ "rand 0.9.2",
  "sha1",
- "thiserror 1.0.69",
+ "thiserror 2.0.17",
  "utf-8",
 ]
 
diff --git a/modeling-cmds/Cargo.toml b/modeling-cmds/Cargo.toml
index a7a1e03e..a4c96f76 100644
--- a/modeling-cmds/Cargo.toml
+++ b/modeling-cmds/Cargo.toml
@@ -63,7 +63,7 @@ uuid = { version = "1.16.0", features = ["serde", "v4", "js"] }
 webrtc = { version = "0.12", optional = true }
 
 [dev-dependencies]
-bson = "2.14.0"
+bson = "3.1.0"
 dropshot = { version = "0.16.4", default-features = false }
 expectorate = "1.1.0"
 openapi-lint = { git = "https://github.com/KittyCAD/openapi-lint", branch = "kittycad" }
diff --git a/modeling-session/Cargo.toml b/modeling-session/Cargo.toml
index 6041a49b..f1820d73 100644
--- a/modeling-session/Cargo.toml
+++ b/modeling-session/Cargo.toml
@@ -19,7 +19,7 @@ reqwest = "0.12.15"
 serde_json = "1.0.139"
 thiserror = "2.0.12"
 tokio = { version = "1", features = ["sync"] }
-tokio-tungstenite = "0.24.0"
+tokio-tungstenite = "0.28.0"
 uuid = { version = "1.16.0", features = ["v4"] }
 
 [dev-dependencies]