diff --git a/Cargo.lock b/Cargo.lock
index 27a1f92..e5edfb1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3058,9 +3058,9 @@ checksum = "c2a86d3146ed3995b5913c414f6664344b9617457320782e64f0bb44afd49d74"
 
 [[package]]
 name = "minisign"
-version = "0.9.1"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aefd422a7a8b5efced01cd7cdf3771e62ebecbc90e3d27695002d3af6af94586"
+checksum = "3062dbbf4d8f57899e2252804f7512a4fd89c8211c58fa6c786d38794a0c809d"
 dependencies = [
  "ct-codecs",
  "getrandom 0.4.3",
diff --git a/Cargo.toml b/Cargo.toml
index 85aabaa..635e269 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -130,7 +130,7 @@ tempfile = "3"
 # it only verifies (`minisign-verify`). Needed so the update tests can prove the two
 # assertions that matter — that a correctly signed artifact is accepted, and that a
 # single flipped byte is rejected — instead of only testing malformed input.
-minisign = "0.9"
+minisign = "0.10"
 
 # Windows-only: the removable-media (USB key / SD card) detect + eject facility in
 # `src/runtime/removable/win32.rs`, which is the only `unsafe` in this crate.