diff --git a/Cargo.lock b/Cargo.lock
index 8aa29ec1a475d..c7bed563b3029 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5311,7 +5311,7 @@ checksum = "25b4b06f56a445e20f50c52894e412b2a3c5f2be97d03dd4326c6c768558dee1"
 dependencies = [
  "async-trait",
  "futures",
- "k8s-openapi",
+ "k8s-openapi 0.27.1",
  "kube",
  "kube-runtime",
  "prometheus",
@@ -5325,9 +5325,21 @@ dependencies = [
 
 [[package]]
 name = "k8s-openapi"
-version = "0.27.0"
+version = "0.27.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05a6d6f3611ad1d21732adbd7a2e921f598af6c92d71ae6e2620da4b67ee1f0d"
+checksum = "51b326f5219dd55872a72c1b6ddd1b830b8334996c667449c29391d657d78d5e"
+dependencies = [
+ "base64 0.22.1",
+ "jiff",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "k8s-openapi"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c6922f6afe80418dd6019818af5d0d34584c371780ff09b9752370c25b4abb"
 dependencies = [
  "base64 0.22.1",
  "jiff",
@@ -5351,7 +5363,7 @@ version = "3.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "acc5a6a69da2975ed9925d56b5dcfc9cc739b66f37add06785b7c9f6d1e88741"
 dependencies = [
- "k8s-openapi",
+ "k8s-openapi 0.27.1",
  "kube-client",
  "kube-core",
  "kube-derive",
@@ -5377,7 +5389,7 @@ dependencies = [
  "hyper-util",
  "jiff",
  "jsonpath-rust",
- "k8s-openapi",
+ "k8s-openapi 0.27.1",
  "kube-core",
  "pem 3.0.6",
  "rustls",
@@ -5404,7 +5416,7 @@ dependencies = [
  "http 1.5.0",
  "jiff",
  "json-patch",
- "k8s-openapi",
+ "k8s-openapi 0.27.1",
  "schemars 1.2.2",
  "serde",
  "serde-value",
@@ -5441,7 +5453,7 @@ dependencies = [
  "hashbrown 0.16.1",
  "hostname",
  "json-patch",
- "k8s-openapi",
+ "k8s-openapi 0.27.1",
  "kube-client",
  "parking_lot",
  "pin-project",
@@ -6639,7 +6651,7 @@ dependencies = [
  "hex",
  "humantime",
  "indexmap 2.14.2",
- "k8s-openapi",
+ "k8s-openapi 0.28.0",
  "kube",
  "mz-ore",
  "mz-repr",
@@ -6939,7 +6951,7 @@ dependencies = [
  "clap",
  "csv-async",
  "futures",
- "k8s-openapi",
+ "k8s-openapi 0.28.0",
  "kube",
  "mz-build-info",
  "mz-cloud-resources",
@@ -7540,7 +7552,7 @@ version = "0.0.0"
 dependencies = [
  "anyhow",
  "k8s-controller",
- "k8s-openapi",
+ "k8s-openapi 0.28.0",
  "mz-metrics",
  "mz-ore",
  "prometheus",
@@ -7641,7 +7653,7 @@ dependencies = [
  "fail",
  "futures",
  "hex",
- "k8s-openapi",
+ "k8s-openapi 0.28.0",
  "kube",
  "maplit",
  "mz-cloud-resources",
@@ -7720,7 +7732,7 @@ dependencies = [
  "http 1.5.0",
  "humantime",
  "k8s-controller",
- "k8s-openapi",
+ "k8s-openapi 0.28.0",
  "kube",
  "maplit",
  "mz-alloc",
diff --git a/Cargo.toml b/Cargo.toml
index e788792e5c0d2..14e2c791b4439 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -392,7 +392,7 @@ jemalloc_pprof = "0.9.0"
 jsonwebtoken = { version = "11.1.0", features = ["aws_lc_rs"] }
 junit-report = "0.9.1"
 k8s-controller = "0.13.0"
-k8s-openapi = { version = "0.27.0", features = ["schemars", "v1_34"] }
+k8s-openapi = { version = "0.28.0", features = ["schemars", "v1_34"] }
 kube = { version = "3.1.0", default-features = false, features = ["aws-lc-rs", "client", "derive", "runtime", "rustls-tls"] }
 launchdarkly-server-sdk = { version = "3.3.0", default-features = false, features = ["hyper-rustls-native-roots", "crypto-aws-lc-rs"] }
 launchdarkly-sdk-transport = "0.1.4"