diff --git a/Cargo.lock b/Cargo.lock
index 04a73a8..a83245c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1654,7 +1654,7 @@ version = "0.12.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
 dependencies = [
- "hmac",
+ "hmac 0.12.1",
 ]
 
 [[package]]
@@ -1666,6 +1666,15 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.2",
+]
+
 [[package]]
 name = "http"
 version = "1.4.0"
@@ -2596,7 +2605,7 @@ dependencies = [
  "clap",
  "hex",
  "hipstr",
- "hmac",
+ "hmac 0.13.0",
  "jiff",
  "reqwest 0.13.2",
  "reqwest-middleware",
@@ -2894,7 +2903,7 @@ dependencies = [
  "byteorder",
  "bytes",
  "fallible-iterator",
- "hmac",
+ "hmac 0.12.1",
  "md-5",
  "memchr",
  "rand 0.9.2",
diff --git a/Cargo.toml b/Cargo.toml
index f0a464f..17dc461 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -79,7 +79,7 @@ zxcvbn = { version = "3.1", features = ["serde"] }
 chacha20poly1305 = { version = "0.10", features = [] }
 hkdf = { version = "0.12", features = [] }
 sha2 = { version = "0.10", features = [] }
-hmac = { version = "0.12", features = [] }
+hmac = { version = "0.13", features = [] }
 
 # Encoding
 base64 = { version = "0.22", features = [] }