diff --git a/Cargo.lock b/Cargo.lock
index 3180e6ad7..b0860f72f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5833,7 +5833,7 @@ dependencies = [
  "rand 0.9.5",
  "random_word",
  "regex",
- "reqwest 0.12.28",
+ "reqwest 0.13.4",
  "roaring",
  "rstest",
  "semver",
@@ -8972,6 +8972,7 @@ checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
 dependencies = [
  "base64 0.22.1",
  "bytes",
+ "encoding_rs",
  "futures-core",
  "futures-util",
  "h2 0.4.16",
@@ -8983,6 +8984,7 @@ dependencies = [
  "hyper-util",
  "js-sys",
  "log",
+ "mime",
  "percent-encoding",
  "pin-project-lite",
  "quinn",
@@ -8991,6 +8993,7 @@ dependencies = [
  "rustls-platform-verifier",
  "serde",
  "serde_json",
+ "serde_urlencoded",
  "sync_wrapper",
  "tokio",
  "tokio-rustls 0.26.4",
diff --git a/Cargo.toml b/Cargo.toml
index 6c05f297a..8c9f5a91e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -75,7 +75,7 @@ serde = "1"
 serde_json = "1"
 tempfile = "3.5.0"
 tokio = { version = "1.23", features = ["rt-multi-thread", "sync"] }
-tonic = { version = "0.14", features = ["tls-native-roots", "tls-ring"] }
+tonic = { version = "0.14", features = ["tls-native-roots", "tls-aws-lc"] }
 uuid = { version = "1.7.0", features = ["v4", "v7"] }
 chrono = { version = "0.4", default-features = false, features = ["clock"] }
 
diff --git a/rust/lancedb/Cargo.toml b/rust/lancedb/Cargo.toml
index f42c05bed..d148d19f5 100644
--- a/rust/lancedb/Cargo.toml
+++ b/rust/lancedb/Cargo.toml
@@ -70,15 +70,17 @@ tempfile = { workspace = true }
 aws-smithy-types = { workspace = true, optional = true }
 aws-sdk-bedrockruntime = { version = "1.27.0", optional = true }
 # For remote feature
-reqwest = { version = "0.12.0", default-features = false, features = [
+reqwest = { version = "0.13.0", default-features = false, features = [
     "charset",
     "gzip",
     "http2",
     "json",
-    "macos-system-configuration",
+    "query",
     # Avoid linking OpenSSL into Python wheels, which breaks on FIPS hosts.
-    "rustls-tls-native-roots",
+    # This uses the aws-lc-rs crypto provider.
+    "rustls",
     "stream",
+    "system-proxy",
 ], optional = true }
 tonic = { workspace = true, optional = true }
 http = { version = "1", optional = true } # Matching what is in reqwest