diff --git a/Cargo.lock b/Cargo.lock
index 7ab658a..88ea0c2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1121,7 +1121,7 @@ dependencies = [
  "gtp-protocol",
  "js-sys",
  "openmls",
- "tls_codec",
+ "tls_codec 0.5.0",
  "wasm-bindgen",
  "wasm-bindgen-test",
 ]
@@ -1383,7 +1383,7 @@ dependencies = [
  "rand_core 0.9.5",
  "serde",
  "subtle",
- "tls_codec",
+ "tls_codec 0.4.2",
  "zeroize",
 ]
 
@@ -1781,7 +1781,7 @@ dependencies = [
  "libcrux-sha3",
  "libcrux-traits",
  "rand 0.9.4",
- "tls_codec",
+ "tls_codec 0.4.2",
 ]
 
 [[package]]
@@ -2060,7 +2060,7 @@ dependencies = [
  "serde",
  "serde_bytes",
  "thiserror 2.0.18",
- "tls_codec",
+ "tls_codec 0.4.2",
  "zeroize",
 ]
 
@@ -2075,7 +2075,7 @@ dependencies = [
  "p256",
  "rand 0.8.6",
  "serde",
- "tls_codec",
+ "tls_codec 0.4.2",
 ]
 
 [[package]]
@@ -2113,7 +2113,7 @@ dependencies = [
  "serde",
  "sha2 0.10.9",
  "thiserror 2.0.18",
- "tls_codec",
+ "tls_codec 0.4.2",
 ]
 
 [[package]]
@@ -2123,7 +2123,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4f88ccdd53448dfdbfa5b8da8ba4e527c418fdb966418172bace2e3b41eedd56"
 dependencies = [
  "serde",
- "tls_codec",
+ "tls_codec 0.4.2",
 ]
 
 [[package]]
@@ -3233,7 +3233,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0de2e01245e2bb89d6f05801c564fa27624dbd7b1846859876c7dad82e90bf6b"
 dependencies = [
  "serde",
- "tls_codec_derive",
+ "tls_codec_derive 0.4.2",
+ "zeroize",
+]
+
+[[package]]
+name = "tls_codec"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18cc98286004cea38f717e2b03d990fc774fbfd38a82720de40e5c94365067c8"
+dependencies = [
+ "tls_codec_derive 0.5.0",
  "zeroize",
 ]
 
@@ -3248,6 +3258,17 @@ dependencies = [
  "syn",
 ]
 
+[[package]]
+name = "tls_codec_derive"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "674f41dd95f76cdeb005c83f9444e20cf43daebef37cde9e49a9ca6f4e87b423"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
 [[package]]
 name = "tokio"
 version = "1.52.3"
@@ -4026,18 +4047,18 @@ dependencies = [
 
 [[package]]
 name = "zeroize"
-version = "1.8.2"
+version = "1.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
 dependencies = [
  "zeroize_derive",
 ]
 
 [[package]]
 name = "zeroize_derive"
-version = "1.4.3"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85a5b4158499876c763cb03bc4e49185d3cccbabb15b33c627f7884f43db852e"
+checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/crates/gbp/wasm/Cargo.toml b/crates/gbp/wasm/Cargo.toml
index c44611a..f554811 100644
--- a/crates/gbp/wasm/Cargo.toml
+++ b/crates/gbp/wasm/Cargo.toml
@@ -27,7 +27,7 @@ getrandom         = { version = "0.2", features = ["js"] }
 fluvio-wasm-timer = "0.2"
 # Enable openmls WASM/JS backend (secure randomness + time via Web APIs)
 openmls           = { version = "0.8", features = ["js"] }
-tls_codec         = { version = "0.4", features = ["derive"] }
+tls_codec         = { version = "0.5", features = ["derive"] }
 
 [dev-dependencies]
 wasm-bindgen-test = "0.3"