diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b540709..4084db3 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -61,7 +61,7 @@ jobs:
 
       - name: Install pip-tools
         # Pin matches update-lock.yml so lock verification uses the same resolver.
-        run: python -m pip install 'pip-tools==7.5.3'
+        run: python -m pip install 'pip-tools==7.6.1'
 
       - name: Verify requirements-lock.txt is up to date
         # Same pip-compile flags as update-lock.yml, without --upgrade.
diff --git a/.github/workflows/update-lock.yml b/.github/workflows/update-lock.yml
index 470e031..847b6f7 100644
--- a/.github/workflows/update-lock.yml
+++ b/.github/workflows/update-lock.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Install pip-tools
         # Pin matches tests.yml lockfile job so lock generation and verification agree.
-        run: python -m pip install 'pip-tools==7.5.3'
+        run: python -m pip install 'pip-tools==7.6.1'
 
       - name: Regenerate lock file
         run: |