diff --git a/requirements.txt b/requirements.txt
index 5f389c7..11f5004 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@
 #    uv export --no-dev --no-hashes --no-emit-project -o requirements.txt
 certifi==2025.11.12
     # via requests
-cffi==1.17.1
+cffi==2.0.0
     # via
     #   cryptography
     #   pynacl