diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index 309c671e747..1483eb400d8 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -347,9 +347,9 @@ checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
 [[package]]
 name = "bytes"
-version = "1.10.1"
+version = "1.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
 
 [[package]]
 name = "cassowary"
diff --git a/codex-rs/core/Cargo.toml b/codex-rs/core/Cargo.toml
index 46872949818..0037474aa42 100644
--- a/codex-rs/core/Cargo.toml
+++ b/codex-rs/core/Cargo.toml
@@ -14,7 +14,7 @@ workspace = true
 anyhow = "1"
 async-channel = "2.3.1"
 base64 = "0.21"
-bytes = "1.10.1"
+bytes = "1.11.1"
 codex-apply-patch = { path = "../apply-patch" }
 codex-mcp-client = { path = "../mcp-client" }
 dirs = "6"