diff --git a/Cargo.lock b/Cargo.lock
index 4c713a6..eb3b4b7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1499,7 +1499,7 @@ dependencies = [
  "sqlx",
  "tokio",
  "tower 0.5.3",
- "tower-http",
+ "tower-http 0.7.0",
  "tracing",
  "uuid",
  "zeroize",
@@ -1674,7 +1674,7 @@ dependencies = [
  "serde_json",
  "sqlx",
  "tokio",
- "tower-http",
+ "tower-http 0.7.0",
  "tracing",
  "uuid",
 ]
@@ -2357,7 +2357,7 @@ dependencies = [
  "tokio-rustls",
  "tokio-util",
  "tower 0.5.3",
- "tower-http",
+ "tower-http 0.6.11",
  "tower-service",
  "url",
  "wasm-bindgen",
@@ -2386,7 +2386,7 @@ dependencies = [
  "sqlx",
  "tiktoken-rs",
  "tokio",
- "tower-http",
+ "tower-http 0.7.0",
  "tracing",
  "uuid",
  "validator",
@@ -3324,12 +3324,28 @@ dependencies = [
  "http",
  "http-body",
  "pin-project-lite",
- "tokio",
  "tower 0.5.3",
  "tower-layer",
  "tower-service",
- "tracing",
  "url",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b11f75e912b0c2be01b63d8cf8057b8c3f97cf34abb3d431a3a4c8675498e233"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "http",
+ "http-body",
+ "percent-encoding",
+ "pin-project-lite",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+ "tracing",
  "uuid",
 ]
 
diff --git a/Cargo.toml b/Cargo.toml
index b22a77f..b215c68 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -38,7 +38,7 @@ async-trait = "0.1"
 
 # Axum is the required API runtime; tower-http supplies production middleware layers.
 axum = { version = "0.8", features = ["macros"] }
-tower-http = { version = "0.6", features = ["cors", "request-id", "set-header", "timeout", "trace"] }
+tower-http = { version = "0.7", features = ["cors", "request-id", "set-header", "timeout", "trace"] }
 
 # Tokio is the async runtime used by axum, sqlx, Redis, and service workers.
 tokio = { version = "1.52", features = ["macros", "net", "rt-multi-thread", "signal"] }