diff --git a/Cargo.lock b/Cargo.lock
index b2927d83..a9bf39a8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -605,9 +605,9 @@ dependencies = [
 
 [[package]]
 name = "cel"
-version = "0.13.0"
+version = "0.14.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47a40f338a8c3505921000b609279775792c07cc21f97a3011578c0c5e1738ae"
+checksum = "6ed39583e427bf41d93c28c7f27c943a93bcb8697220ff3575fd53a9e13f3814"
 dependencies = [
  "antlr4rust",
  "chrono",
diff --git a/builtins/pdps/cel/Cargo.toml b/builtins/pdps/cel/Cargo.toml
index ae05c4d3..bc0e3656 100644
--- a/builtins/pdps/cel/Cargo.toml
+++ b/builtins/pdps/cel/Cargo.toml
@@ -43,7 +43,7 @@ apl-core = { workspace = true }
 #     credential is fresh enough").
 # `json` and `bytes` are deliberately off — APL marshals JSON at its
 # own layer, and CEL bytes ops aren't needed for ABAC predicates.
-cel = { version = "0.13", default-features = false, features = ["regex", "chrono"] }
+cel = { version = "0.14", default-features = false, features = ["regex", "chrono"] }
 async-trait = { workspace = true }
 serde_yaml = { workspace = true }
 thiserror = { workspace = true }