diff --git a/voice/Cargo.lock b/voice/Cargo.lock
index 9ac5d195..18d96edf 100644
--- a/voice/Cargo.lock
+++ b/voice/Cargo.lock
@@ -166,6 +166,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "bindgen"
 version = "0.59.2"
@@ -1107,7 +1113,7 @@ dependencies = [
  "pkg-config",
  "sha2",
  "tar",
- "ureq",
+ "ureq 2.12.1",
 ]
 
 [[package]]
@@ -1903,8 +1909,7 @@ version = "2.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "02d1a66277ed75f640d608235660df48c8e3c19f3b4edb6a263315626cc3c01d"
 dependencies = [
- "base64",
- "flate2",
+ "base64 0.22.1",
  "log",
  "once_cell",
  "rustls",
@@ -1914,6 +1919,35 @@ dependencies = [
  "webpki-roots 0.26.11",
 ]
 
+[[package]]
+name = "ureq"
+version = "3.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af5546be8f5378d5414f83733f5c9a2526f4645829edbc1c41790aeef1b38e8b"
+dependencies = [
+ "base64 0.23.1",
+ "flate2",
+ "log",
+ "percent-encoding",
+ "rustls",
+ "rustls-pki-types",
+ "ureq-proto",
+ "utf8-zero",
+ "webpki-roots 1.0.9",
+]
+
+[[package]]
+name = "ureq-proto"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fabc3e92916c89c95b20eef7b06b00b066bc217ef9ea3a4ac9bf1a7e35261e10"
+dependencies = [
+ "base64 0.23.1",
+ "http",
+ "httparse",
+ "log",
+]
+
 [[package]]
 name = "url"
 version = "2.5.8"
@@ -1926,6 +1960,12 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "utf8-zero"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8c0a043c9540bae7c578c88f91dda8bd82e59ae27c21baca69c8b191aaf5a6e"
+
 [[package]]
 name = "utf8_iter"
 version = "1.0.4"
@@ -2007,7 +2047,7 @@ dependencies = [
  "tempfile",
  "thiserror",
  "tokio",
- "ureq",
+ "ureq 3.4.1",
  "url",
  "zeroize",
 ]
diff --git a/voice/tts/Cargo.toml b/voice/tts/Cargo.toml
index ac87e13e..1c1dac96 100644
--- a/voice/tts/Cargo.toml
+++ b/voice/tts/Cargo.toml
@@ -28,7 +28,7 @@ zeroize = "=1.8.1"
 # (clears GHSA-82j2-j2ch-gfr8 et al.) and url >=2.5 pulls idna >=1.0
 # (clears GHSA-h97m-ww89-6jmq). Kept on the ureq 2.x line so no source uses
 # the ureq 3.x API. Neither crate is referenced directly from tts/src.
-ureq = "2.12"
+ureq = "3.4"
 url = "2.5"
 tempfile = "=3.23.0"
 tokio = { version = "1", features = ["io-util", "macros", "process", "rt", "time"] }