diff --git a/pyproject.toml b/pyproject.toml
index 522224b..d9cb0b2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -26,7 +26,7 @@ requires-python = ">=3.11"
 dependencies = [
     "cryptography>=50.0",
     "pyyaml>=6.0",
-    "cedarpy==4.12.0",
+    "cedarpy==4.12.1",
     # TRACE record models + RFC 8785 signing, reused rather than reimplemented
     # (see ROADMAP Tier 0). Pin a compatible minor; cross-repo skew is a known
     # risk documented in LIMITATIONS.md.
diff --git a/requirements/dev.in b/requirements/dev.in
index b16ded8..1ca18a1 100644
--- a/requirements/dev.in
+++ b/requirements/dev.in
@@ -8,7 +8,7 @@
 #     --python-version 3.11 -o requirements/dev.txt
 cryptography>=50.0
 pyyaml>=6.0
-cedarpy==4.12.0
+cedarpy==4.12.1
 agentrust-trace>=0.5
 agent-manifest>=0.11.1
 rfc8785>=0.1
diff --git a/requirements/runtime.in b/requirements/runtime.in
index 2a8fae4..dfbf0a5 100644
--- a/requirements/runtime.in
+++ b/requirements/runtime.in
@@ -6,7 +6,7 @@
 #     --python-version 3.11 -o requirements/runtime.txt
 cryptography>=50.0
 pyyaml>=6.0
-cedarpy==4.12.0
+cedarpy==4.12.1
 agentrust-trace>=0.5
 agent-manifest>=0.11.1
 rfc8785>=0.1