diff --git a/pyproject.toml b/pyproject.toml
index d65394c..77779ec 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -17,7 +17,7 @@ dependencies = [
     "uvicorn[standard]>=0.29.0",
     "httpx>=0.27.0",
     "pydantic>=2.0.0",
-    "python-jose[cryptography]>=3.3.0",  # OIDC JWT validation
+    "python-jose[cryptography]>=3.5.0",  # OIDC JWT validation
     "PyJWT>=2.8.0",                       # GitHub App JWT signing
     "pyyaml>=6.0",
     "prometheus-client>=0.20.0"