diff --git a/sync-server/Cargo.lock b/sync-server/Cargo.lock
index b3da1486..810b4b93 100644
--- a/sync-server/Cargo.lock
+++ b/sync-server/Cargo.lock
@@ -1679,15 +1679,6 @@ version = "1.0.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f3cb5ba0dc43242ce17de99c180e96db90b235b8a9fdc9543c96d2209116bd9f"
 
-[[package]]
-name = "sanitize-filename"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bc984f4f9ceb736a7bb755c3e3bd17dc56370af2600c9780dcc48c66453da34d"
-dependencies = [
- "regex",
-]
-
 [[package]]
 name = "scopeguard"
 version = "1.2.0"
@@ -2139,10 +2130,10 @@ dependencies = [
  "rand 0.9.0",
  "reconcile-text",
  "regex",
- "sanitize-filename",
  "serde",
  "serde_json",
  "serde_yaml",
+ "sha2",
  "sqlx",
  "thiserror 2.0.17",
  "tokio",
@@ -2150,6 +2141,7 @@ dependencies = [
  "tracing",
  "tracing-subscriber",
  "ts-rs",
+ "unicode-normalization",
  "uuid",
 ]
 
diff --git a/sync-server/Cargo.toml b/sync-server/Cargo.toml
index fac06efa..a333545b 100644
--- a/sync-server/Cargo.toml
+++ b/sync-server/Cargo.toml
@@ -24,14 +24,15 @@ humantime-serde = "1.1.1"
 sqlx = { version = "0.8.6", features = ["sqlite", "runtime-tokio", "uuid", "chrono"] }
 chrono = { version = "0.4.41", features = ["serde"] }
 rand = "0.9.0"
-sanitize-filename = "0.6.0"
 regex = "1.12.2"
 clap = { version = "4.5.38", features = ["derive"] }
 futures = "0.3.31"
 serde_yaml = "0.9.34"
 serde_json = "1.0.140"
 bimap = "0.6.3"
-ts-rs =  { version = "10.1", features = ["uuid-impl", "chrono-impl"] }
+sha2 = "0.10"
+unicode-normalization = "0.1"
+ts-rs =  { version = "10.1", features = ["uuid-impl", "chrono-impl", "no-serde-warnings"] }
 base64 = "0.22.1"
 reconcile-text = { version = "0.8.0", features = ["serde"] }