diff --git a/crates/rmcp/Cargo.toml b/crates/rmcp/Cargo.toml
index 5ab429ab..7dec2bef 100644
--- a/crates/rmcp/Cargo.toml
+++ b/crates/rmcp/Cargo.toml
@@ -66,7 +66,7 @@ schemars = { version = "1.0", optional = true, features = ["chrono04"] }
 base64 = { version = "0.22", optional = true }
 
 # for SEP-2322 requestState integrity sealing (opt-in via the `request-state` feature)
-hmac = { version = "0.12", optional = true }
+hmac = { version = "0.13", optional = true }
 sha2 = { version = "0.10", optional = true }
 
 # for HTTP client