diff --git a/crdt_sync_dart/pubspec.lock b/crdt_sync_dart/pubspec.lock
index c320f3a..e77d686 100644
--- a/crdt_sync_dart/pubspec.lock
+++ b/crdt_sync_dart/pubspec.lock
@@ -77,10 +77,10 @@ packages:
     dependency: "direct main"
     description:
       name: crypto
-      sha256: c8ea0233063ba03258fbcf2ca4d6dadfefe14f02fab57702265467a19f27fadf
+      sha256: e3626ae6270383c9e3a549f34c9e4cd26c09ae6a9adaab2bf4737a00340efdc4
       url: "https://pub.dev"
     source: hosted
-    version: "3.0.7"
+    version: "3.0.8"
   file:
     dependency: transitive
     description:
diff --git a/crdt_sync_dart/pubspec.yaml b/crdt_sync_dart/pubspec.yaml
index 5f5b0c0..49f0f86 100644
--- a/crdt_sync_dart/pubspec.yaml
+++ b/crdt_sync_dart/pubspec.yaml
@@ -2,14 +2,14 @@ name: crdt_sync
 description: >-
   Shared CRDT merge scheme + GitHub-Contents-API sync transport for
   cross-device apps. Pure Dart, no Flutter dependency.
-version: 0.11.2
+version: 0.11.3
 publish_to: 'none'
 
 environment:
   sdk: ^3.12.2
 
 dependencies:
-  crypto: 3.0.7
+  crypto: 3.0.8
   http: 1.6.0
 
 dev_dependencies: