diff --git a/Cargo.lock b/Cargo.lock
index d697ac88..e0ad931e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1706,7 +1706,7 @@ dependencies = [
  "rustls-native-certs 0.8.1",
  "rustls-pemfile 2.2.0",
  "rustyline",
- "security-framework 3.2.0",
+ "security-framework 3.3.0",
  "semantic_search_client",
  "semver",
  "serde",
@@ -3301,7 +3301,7 @@ dependencies = [
  "regex",
  "reqwest",
  "ring",
- "security-framework 3.2.0",
+ "security-framework 3.3.0",
  "semver",
  "serde",
  "serde_json",
@@ -8529,7 +8529,7 @@ dependencies = [
  "openssl-probe",
  "rustls-pki-types",
  "schannel",
- "security-framework 3.2.0",
+ "security-framework 3.3.0",
 ]
 
 [[package]]
@@ -8701,9 +8701,9 @@ dependencies = [
 
 [[package]]
 name = "security-framework"
-version = "3.2.0"
+version = "3.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "271720403f46ca04f7ba6f55d438f8bd878d6b8ca0a1046e8228c4145bcbb316"
+checksum = "80fb1d92c5028aa318b4b8bd7302a5bfcf48be96a37fc6fc790f806b0004ee0c"
 dependencies = [
  "bitflags 2.9.1",
  "core-foundation 0.10.1",
diff --git a/crates/chat-cli/Cargo.toml b/crates/chat-cli/Cargo.toml
index f5514cf2..90750c06 100644
--- a/crates/chat-cli/Cargo.toml
+++ b/crates/chat-cli/Cargo.toml
@@ -175,7 +175,7 @@ skim = { version = "0.16.2" }
 objc2 = "0.5.2"
 objc2-app-kit = { version = "0.2.2", features = ["NSWorkspace"] }
 objc2-foundation = { version = "0.2.2", features = ["NSString", "NSURL"] }
-security-framework = "3.2.0"
+security-framework = "3.3.0"
 
 [target.'cfg(windows)'.dependencies]
 windows = { version = "0.61.1", features = [
diff --git a/crates/fig_install/Cargo.toml b/crates/fig_install/Cargo.toml
index 4728c035..e3600db4 100644
--- a/crates/fig_install/Cargo.toml
+++ b/crates/fig_install/Cargo.toml
@@ -43,7 +43,7 @@ url.workspace = true
 [target.'cfg(target_os = "macos")'.dependencies]
 fig_ipc.workspace = true
 libc.workspace = true
-security-framework = "3.0.1"
+security-framework = "3.3.0"
 
 [target.'cfg(target_os = "linux")'.dependencies]
 dbus = { path = "../dbus" }