diff --git a/crates/octo-cable/Cargo.toml b/crates/octo-cable/Cargo.toml
index dfe8d227..dc1bdd74 100644
--- a/crates/octo-cable/Cargo.toml
+++ b/crates/octo-cable/Cargo.toml
@@ -33,7 +33,7 @@ aes = "0.8"
 ctr = "0.9"
 hmac = "0.12"
 subtle = "2"
-hkdf = "0.12"
+hkdf = "0.13"
 sha2 = "0.10"
 rand = "0.8"
 
diff --git a/crates/octo-wallet/Cargo.toml b/crates/octo-wallet/Cargo.toml
index 14588d6d..eb31339b 100644
--- a/crates/octo-wallet/Cargo.toml
+++ b/crates/octo-wallet/Cargo.toml
@@ -78,7 +78,7 @@ ed25519-dalek = { version = "2.2", features = ["serde", "zeroize"] }
 # Mission 0970-a1: X25519 ECDH + ChaCha20-Poly1305 encryption for
 # `InnerRequest::ciphertext` (replaces BLAKE3 hash placeholder from 0970-a).
 x25519-dalek = { version = "2", features = ["static_secrets"] }
-hkdf = "0.12"
+hkdf = "0.13"
 getrandom = "0.2"
 hex = "0.4"
 base64 = "0.22"