diff --git a/Cargo.lock b/Cargo.lock
index 1d2a883a..876eb801 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -812,9 +812,9 @@ checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
 
 [[package]]
 name = "minicbor"
-version = "0.26.5"
+version = "2.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a309f581ade7597820083bc275075c4c6986e57e53f8d26f88507cfefc8c987"
+checksum = "e7244eafd1e09e7c4e33043881997aa6ab6dffff3ed2cee3395a278980481d6e"
 dependencies = [
  "half",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index aa4c7904..3d04ac3b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -103,7 +103,7 @@ insta = "1.48"
 # otherwise only reachable inside the `cddl` validator's process, here we drive it directly.
 ciborium = "0.2"
 # `half` gates the `decode::Tokenizer` + `data::Token` stream API the differential drives.
-minicbor = { version = "0.26", features = ["half"] }
+minicbor = { version = "2.3", features = ["half"] }
 # Harness-side ONLY (never a generated-crate dep): `recombination_tests` parses the projected
 # `tests/recomb/ingredients.json` (cddl-matrix/project_recombination.ts). Already in-tree
 # transitively (via the `cddl` validator), so this adds no lockfile weight. Navigated via