diff --git a/app/api/requirements.txt b/app/api/requirements.txt
index 5481c29..72b683e 100644
--- a/app/api/requirements.txt
+++ b/app/api/requirements.txt
@@ -1,6 +1,6 @@
 fastapi==0.136.3
 uvicorn==0.49.0
-cedarpy==4.8.4
+cedarpy==4.8.7
 # Bearer-JWT verification at the PDP edge (signature + audience binding, RFC 8707).
 # DEMO uses an HS256 fixture key; production verifies against the IdP JWKS. See auth.py.
 pyjwt==2.13.0