diff --git a/mcp-router.csproj b/mcp-router.csproj
index c2f3a21..98721af 100644
--- a/mcp-router.csproj
+++ b/mcp-router.csproj
@@ -25,7 +25,7 @@
     <PackageReference Include="SQLitePCLRaw.bundle_e_sqlcipher" Version="2.1.11" />
     <!-- Force the transitive e_sqlite3 native lib past the GHSA-2m69-gcr7-jv3q advisory (NU1903, vulnerable <= 2.1.11). Microsoft.Data.Sqlite pins 2.1.10; the sqlcipher bundle (its own lib) is not covered by the advisory and has no 2.1.12. -->
     <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="2.1.12" />
-    <PackageReference Include="Microsoft.ML.OnnxRuntime" Version="1.17.3" />
+    <PackageReference Include="Microsoft.ML.OnnxRuntime" Version="1.29.0" />
     <PackageReference Include="Microsoft.ML.Tokenizers" Version="2.0.0" />
     <PackageReference Include="Dapper" Version="2.1.66" />
     <PackageReference Include="Microsoft.Data.SqlClient" Version="5.2.0" />