diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8efb4e8..ac0bfc4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+- Requires `substrax>=0.1.11`; the lock moves it from 0.1.10 and nothing else. 0.1.11 caps jax
+  below 0.11.2, whose renamed `jax.experimental.hijax.HiPrimitive` flax 0.12.9 imports at
+  module load; a resolver given `substrax>=0.1.10` keeps jax 0.11.2 and picks 0.1.10 instead,
+  so a fresh install of DiffBio failed on `import diffbio` until the floor moved.
 - CI: the build-verification, documentation and security workflows cancel the run a newer
   push supersedes, as the test workflow already did; a contract test holds every
   push-triggered workflow to it.
diff --git a/pyproject.toml b/pyproject.toml
index 7f63180..7bcd7af 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -46,7 +46,7 @@ dependencies = [
   "calibrax>=0.1.8",
   # Substrax - device identity, meshes, runtime settings and checkpoint store shared by the
   # siblings; 0.1.6 adds substrax.runtime, substrax.artifacts and substrax.testing.
-  "substrax>=0.1.10",
+  "substrax>=0.1.11",
   # JAX ecosystem
   "beartype>=0.14.1",
   "chex>=0.1.7",
diff --git a/uv.lock b/uv.lock
index 0d3e526..d93389a 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1246,7 +1246,7 @@ requires-dist = [
     { name = "scipy", specifier = ">=1.10" },
     { name = "shellcheck-py", marker = "extra == 'dev'", specifier = ">=0.10.0.1" },
     { name = "squidpy", marker = "extra == 'benchmark'", specifier = ">=1.4" },
-    { name = "substrax", specifier = ">=0.1.10" },
+    { name = "substrax", specifier = ">=0.1.11" },
     { name = "tabulate", marker = "extra == 'benchmark'", specifier = ">=0.9" },
     { name = "torch", marker = "extra == 'torch-io'", specifier = ">=1.13.0" },
     { name = "wemake-python-styleguide", marker = "extra == 'dev'", specifier = ">=1.0" },
@@ -5327,7 +5327,7 @@ wheels = [
 
 [[package]]
 name = "substrax"
-version = "0.1.10"
+version = "0.1.11"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "flax" },
@@ -5337,9 +5337,9 @@ dependencies = [
     { name = "optax" },
     { name = "orbax-checkpoint" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/78/b0/2ec3718f2b996706586e8e8b062240130b7f63422d9ded69c4802285f8f1/substrax-0.1.10.tar.gz", hash = "sha256:a56d702b7c79eca72a9f789da46bac8a2be79ca93f4ec2b90bc2da0065b6956a", size = 77962, upload-time = "2026-09-17T17:29:23.894Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/ad/17/4c2ac4ff290506f2b5e3c4378b5e364426d664e7106056e00cba226fcdf2/substrax-0.1.11.tar.gz", hash = "sha256:6397a67e6ee1f04d09522e4ba371b31e44dcc822c73ecdeee67afa25e306f97c", size = 78255, upload-time = "2026-09-18T00:41:21.101Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ae/fb/34a5433973ff530b6a2f39fedda9348ee02683ff61500ceffa67f75c20c3/substrax-0.1.10-py3-none-any.whl", hash = "sha256:293c163320ef829c18330296de82ef354db1491f446046a64b9042563b08e5d2", size = 95322, upload-time = "2026-09-17T17:29:22.297Z" },
+    { url = "https://files.pythonhosted.org/packages/d9/be/ddb879145823f327c59e096163a64c05bdd61d881f850b70eff5bb32f6f7/substrax-0.1.11-py3-none-any.whl", hash = "sha256:3cde3f31ccea1bac1a4d19f87e1a0e0d25f1c4ed68e066d0e20e1e419b20cbb8", size = 95332, upload-time = "2026-09-18T00:41:19.139Z" },
 ]
 
 [[package]]