diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index b587fcd7e3..ede7b4b9a9 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -12,5 +12,9 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
+      - name: Install setuptools dependency
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install setuptools==81.0.0
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a16e5f976c..9cdd991614 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ This release is available in the following languages:
 - move go out of pull/push/daily into its own ([#2005](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2005)) ([1b961b5](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/1b961b585e1b2491424b078add248bf7f319f2a3))
 - **net:** Add plaintext to encrypted table migration example ([#1976](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1976)) ([814acbf](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/814acbf2ad5d4e0826617b6764b32b16574332ab))
 - remove test against latest mpl version ([#2008](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2008)) ([728158e](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/728158e1b0ef83ae41d475bca56419f05928015b))
+- **net**: pin to mpl version 1.11.2
 - **rust:** add plaintext to encrypted table migration examples ([#1977](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1977)) ([5286619](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/52866190608fcec6bff17adcc01bfd6f04367464))
 - **rust:** fips feature ([#1980](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1980)) ([516fd3d](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/516fd3d1e63e2e96b3c8f6feb6f1e85411ab810d))
 - **rust:** improved blocking ([#2030](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2030)) ([162c86c](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/162c86c9117bd3048949fa77ab878eee4b6197ff))
diff --git a/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj b/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
index 335a2584b5..97639652e0 100644
--- a/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
+++ b/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
@@ -61,7 +61,7 @@
     <!-- See https://learn.microsoft.com/en-us/nuget/concepts/package-versioning?tabs=semver20sort#version-ranges   -->
     <PackageReference Include="AWSSDK.Core" Version="[3.7.*, 4.0)" />
     <PackageReference Include="AWSSDK.DynamoDBv2" Version="[3.7.*, 4.0)" />
-    <ProjectReference Include="../../../submodules/MaterialProviders/AwsCryptographicMaterialProviders/runtimes/net/MPL.csproj"/>
+    <PackageReference Include="AWS.Cryptography.MaterialProviders" Version="[1.11.2]" />
     <!--
       System.Collections.Immutable can be removed once dafny.msbuild is updated with
       https://github.com/dafny-lang/dafny.msbuild/pull/10 and versioned
diff --git a/submodules/MaterialProviders b/submodules/MaterialProviders
index 734c1a31fc..7d126df3c5 160000
--- a/submodules/MaterialProviders
+++ b/submodules/MaterialProviders
@@ -1 +1 @@
-Subproject commit 734c1a31fc4521dc0653433565d5d6171e61d1ac
+Subproject commit 7d126df3c577ba2f8bebcf6ffe4d0474b3e32089