diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 665cfa2..8c99803 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -139,7 +139,7 @@ jobs:
           path: protowire-cpp-checkout
 
       - name: Build one wheel
-        uses: pypa/cibuildwheel@v4.2.1
+        uses: pypa/cibuildwheel@v4.3.5
         env:
           # Build only one CPython version per OS for the smoke job —
           # the full matrix is reserved for the release workflow.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 063744a..a87bd5d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -88,7 +88,7 @@ jobs:
           platforms: arm64
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v4.2.1
+        uses: pypa/cibuildwheel@v4.3.5
         env:
           CIBW_BUILD: "cp310-* cp311-* cp312-* cp313-*"
           CIBW_SKIP: "*-musllinux_* *-manylinux_i686 pp*"