diff --git a/Cargo.lock b/Cargo.lock
index 896e2e66d3e..25c8e0e4dc8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1704,7 +1704,7 @@ dependencies = [
  "serde_json",
  "serde_path_to_error",
  "serde_urlencoded",
- "sha1",
+ "sha1 0.10.6",
  "sync_wrapper",
  "tokio",
  "tokio-tungstenite 0.28.0",
@@ -3824,7 +3824,7 @@ dependencies = [
  "serde",
  "serde_json",
  "serde_yaml",
- "sha1",
+ "sha1 0.11.0",
  "similar",
  "tempfile",
  "thiserror 2.0.18",
@@ -7439,6 +7439,17 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "sha1"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aacc4cc499359472b4abe1bf11d0b12e688af9a805fa5e3016f9a386dc2d0214"
+dependencies = [
+ "cfg-if 1.0.0",
+ "cpufeatures 0.3.0",
+ "digest 0.11.2",
+]
+
 [[package]]
 name = "sha1_smol"
 version = "1.0.1"
@@ -8654,7 +8665,7 @@ dependencies = [
  "rand 0.9.2",
  "rustls",
  "rustls-pki-types",
- "sha1",
+ "sha1 0.10.6",
  "thiserror 2.0.18",
  "utf-8",
 ]
@@ -8671,7 +8682,7 @@ dependencies = [
  "httparse",
  "log",
  "rand 0.9.2",
- "sha1",
+ "sha1 0.10.6",
  "thiserror 2.0.18",
  "utf-8",
 ]
diff --git a/gnd/Cargo.toml b/gnd/Cargo.toml
index 2dcb8a1fdcf..94438ffa162 100644
--- a/gnd/Cargo.toml
+++ b/gnd/Cargo.toml
@@ -71,7 +71,7 @@ Inflector = { workspace = true }
 semver = { workspace = true }
 
 # Build command
-sha1 = "0.10"
+sha1 = "0.11"
 wasmparser = { workspace = true }
 
 # Interactive prompts
diff --git a/gnd/src/commands/build.rs b/gnd/src/commands/build.rs
index 3ca1d9c48a9..2d9c7b36bd7 100644
--- a/gnd/src/commands/build.rs
+++ b/gnd/src/commands/build.rs
@@ -456,7 +456,7 @@ async fn upload_file_to_ipfs(
     let content_hash = {
         let mut hasher = Sha1::new();
         hasher.update(&content);
-        format!("{:x}", hasher.finalize())
+        hex::encode(hasher.finalize())
     };
 
     let ipfs_hash = if let Some(hash) = uploaded.content_to_ipfs.get(&content_hash) {
@@ -911,8 +911,7 @@ fn file_hash(path: &Path) -> Result<String> {
     let content = fs::read(path).with_context(|| format!("Failed to read file: {:?}", path))?;
     let mut hasher = Sha1::new();
     hasher.update(&content);
-    let result = hasher.finalize();
-    Ok(format!("{:x}", result))
+    Ok(hex::encode(hasher.finalize()))
 }
 
 #[cfg(test)]
diff --git a/gnd/src/commands/test/runner.rs b/gnd/src/commands/test/runner.rs
index 2c63ed30123..867efa19786 100644
--- a/gnd/src/commands/test/runner.rs
+++ b/gnd/src/commands/test/runner.rs
@@ -121,7 +121,7 @@ fn deployment_hash_from_path_and_seed(path: &Path, seed: u128) -> Result<Deploym
 
     let input = format!("{}\0{}", path.display(), seed);
     let digest = Sha1::digest(input.as_bytes());
-    let qm = format!("Qm{:x}", digest);
+    let qm = format!("Qm{}", hex::encode(digest));
     DeploymentHash::new(qm).map_err(|e| anyhow!("Failed to create deployment hash: {}", e))
 }