diff --git a/Cargo.lock b/Cargo.lock
index 2e1933a..1463d70 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2449,6 +2449,12 @@ name = "hashbrown"
 version = "0.16.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
 dependencies = [
  "allocator-api2",
  "equivalent",
@@ -2994,7 +3000,7 @@ checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
 
 [[package]]
 name = "jecp"
-version = "0.1.0"
+version = "1.1.1"
 dependencies = [
  "alloy-primitives",
  "alloy-rlp",
@@ -3289,11 +3295,11 @@ dependencies = [
 
 [[package]]
 name = "lru"
-version = "0.16.4"
+version = "0.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f66e8d5d03f609abc3a39e6f08e4164ebf1447a732906d39eb9b99b7919ef39"
+checksum = "8a860605968fce16869fd239cf4237a82f3ac470723415db603b0e8b6c8d4fb9"
 dependencies = [
- "hashbrown 0.16.1",
+ "hashbrown 0.17.1",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index fac6d79..c27009d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -68,7 +68,7 @@ http-body-util = "0.1"
 parking_lot = "0.12"
 # v1.0.1: replay cache (Provenance v2 nonce LRU per spec §5.2 step 5).
 # 0.16+: GHSA-rhfx-m35p-ff5j (IterMut Stacked Borrows soundness fix).
-lru = "0.16"
+lru = "0.18"
 # v1.0.2 K2.5: action input_schema validation against published manifest.
 # default-features = false drops the optional reqwest dep (we only validate
 # against in-memory schemas — never fetch remote $refs over HTTP).