diff --git a/CHANGES.md b/CHANGES.md
index 98dfd81d..b950f9d7 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -2,6 +2,15 @@
 
 ## Development
 
+## Version 0.7.1-rc.1
+
+### Changed
+
+- Updated bundled dependencies, including the SHA-256, Argon2, AES and TOML
+  implementations. No behaviour changes: the hashing and key-derivation test
+  vectors are unchanged, so existing skill hashes and PPK keys read exactly as
+  before.
+
 ## Version 0.7.0
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
index 9a40798b..381e7846 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4235,7 +4235,7 @@ checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649"
 
 [[package]]
 name = "skillkeeper"
-version = "0.7.0"
+version = "0.7.1-rc.1"
 dependencies = [
  "aes 0.9.3",
  "argon2",
@@ -4270,14 +4270,14 @@ dependencies = [
 
 [[package]]
 name = "skillkeeper-agents"
-version = "0.7.0"
+version = "0.7.1-rc.1"
 dependencies = [
  "skillkeeper-core",
 ]
 
 [[package]]
 name = "skillkeeper-cli"
-version = "0.7.0"
+version = "0.7.1-rc.1"
 dependencies = [
  "clap",
  "serde",
@@ -4290,7 +4290,7 @@ dependencies = [
 
 [[package]]
 name = "skillkeeper-config"
-version = "0.7.0"
+version = "0.7.1-rc.1"
 dependencies = [
  "serde",
  "serde_json",
@@ -4302,7 +4302,7 @@ dependencies = [
 
 [[package]]
 name = "skillkeeper-core"
-version = "0.7.0"
+version = "0.7.1-rc.1"
 dependencies = [
  "hex",
  "regex",
diff --git a/Cargo.toml b/Cargo.toml
index 1c061c9d..40ef3d14 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,7 +10,7 @@ members = [
 
 [workspace.package]
 edition = "2021"
-version = "0.7.0"
+version = "0.7.1-rc.1"
 license = "Apache-2.0"
 
 [workspace.dependencies]
diff --git a/LICENSE b/LICENSE
index e30f41c4..361154f0 100644
--- a/LICENSE
+++ b/LICENSE
@@ -228,15 +228,15 @@ this list current and accurate.
 
 | Package | Ecosystem | Version | License | Copyright |
 |---|---|---|---|---|
-| aes | cargo | 0.9.2 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
-| argon2 | cargo | 0.5.3 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
+| aes | cargo | 0.9.3 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
+| argon2 | cargo | 0.6.0 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
 | cbc | cargo | 0.2.1 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
 | cipher | cargo | 0.5.2 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
 | clap | cargo | 4.6.6 | MIT OR Apache-2.0 | Copyright (c) clap contributors |
 | gettext | cargo | 0.4.0 | MIT | Copyright (c) Justinas Stankevicius |
 | hex | cargo | 0.4.3 | MIT OR Apache-2.0 | Copyright (c) KokaKiwi |
 | hmac | cargo | 0.13.0 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
-| interprocess | cargo | 2.4.3 | 0BSD OR Apache-2.0 | Copyright (c) Goat |
+| interprocess | cargo | 2.4.4 | 0BSD OR Apache-2.0 | Copyright (c) Goat |
 | objc2 | cargo | 0.6.4 | MIT | Copyright (c) Mads Marquart |
 | objc2-app-kit | cargo | 0.3.2 | Zlib OR Apache-2.0 OR MIT | Copyright (c) Mads Marquart |
 | objc2-foundation | cargo | 0.3.2 | MIT | Copyright (c) Mads Marquart |
@@ -250,19 +250,19 @@ this list current and accurate.
 | sha2 | cargo | 0.11.0 | MIT OR Apache-2.0 | Copyright (c) RustCrypto Developers |
 | ssh-key | cargo | 0.6.7 | Apache-2.0 OR MIT | Copyright (c) RustCrypto Developers |
 | tauri | cargo | 2.11.5 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy |
-| tauri-plugin-clipboard-manager | cargo | 2.3.2 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy |
-| tauri-plugin-dialog | cargo | 2.7.2 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy |
+| tauri-plugin-clipboard-manager | cargo | 2.3.3 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy |
+| tauri-plugin-dialog | cargo | 2.7.3 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy |
 | thiserror | cargo | 2.0.20 | MIT OR Apache-2.0 | Copyright (c) David Tolnay |
-| toml | cargo | 0.8.2 | MIT OR Apache-2.0 | Copyright (c) Alex Crichton and toml-rs contributors |
+| toml | cargo | 1.1.5+spec-1.1.0 | MIT OR Apache-2.0 | Copyright (c) Alex Crichton and toml-rs contributors |
 | ts-rs | cargo | 12.0.1 | MIT | Copyright (c) Moritz Bischof |
 | ureq | cargo | 3.4.0 | MIT OR Apache-2.0 | Copyright (c) Martin Algesten and Jacob Hoffman-Andrews |
-| uuid | cargo | 1.24.1 | Apache-2.0 OR MIT | Copyright (c) Ashley Mannix and uuid contributors |
+| uuid | cargo | 1.26.0 | Apache-2.0 OR MIT | Copyright (c) Ashley Mannix and uuid contributors |
 | zeroize | cargo | 1.9.0 | Apache-2.0 OR MIT | Copyright (c) The RustCrypto Project Developers |
 | @tauri-apps/api | npm | 2.11.1 | Apache-2.0 OR MIT | Copyright (c) Tauri Programme within The Commons Conservancy |
-| @tauri-apps/plugin-clipboard-manager | npm | 2.3.2 | MIT OR Apache-2.0 | Copyright (c) Tauri Programme within The Commons Conservancy |
+| @tauri-apps/plugin-clipboard-manager | npm | 2.3.3 | MIT OR Apache-2.0 | Copyright (c) Tauri Programme within The Commons Conservancy |
 | @xterm/addon-fit | npm | 0.11.0 | MIT | Copyright (c) 2019 The xterm.js authors |
 | @xterm/xterm | npm | 6.0.0 | MIT | Copyright (c) 2017-2019 The xterm.js authors |
-| motion | npm | 13.1.0 | MIT | Copyright (c) Matt Perry |
+| motion | npm | 13.2.0 | MIT | Copyright (c) Matt Perry |
 | react | npm | 19.2.8 | MIT | Copyright (c) Meta Platforms, Inc. and affiliates. |
 | react-dom | npm | 19.2.8 | MIT | Copyright (c) Meta Platforms, Inc. and affiliates. |
 | zustand | npm | 5.0.15 | MIT | Copyright (c) Paul Henschel |
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 59152491..b733b36f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@skillkeeper/desktop",
-  "version": "0.7.0",
+  "version": "0.7.1-rc.1",
   "private": true,
   "description": "Install and manage skills and hooks for AI coding agents",
   "author": {
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 3f509a3b..8a6795e4 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "SkillKeeper",
-  "version": "0.7.0",
+  "version": "0.7.1-rc.1",
   "identifier": "dev.lorem.skillkeeper",
   "build": {
     "beforeDevCommand": "pnpm exec vite",
diff --git a/package.json b/package.json
index 81f0caa9..4048f95d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "skillkeeper",
-  "version": "0.7.0",
+  "version": "0.7.1-rc.1",
   "private": true,
   "type": "module",
   "description": "Install and manage skills and hooks for AI coding agents",
diff --git a/packages/i18n/package.json b/packages/i18n/package.json
index 3be2ef23..b7503441 100644
--- a/packages/i18n/package.json
+++ b/packages/i18n/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@skillkeeper/i18n",
-  "version": "0.7.0",
+  "version": "0.7.1-rc.1",
   "private": true,
   "author": "Lorem Dev",
   "homepage": "https://lorem-dev.github.io/skillkeeper/",