diff --git a/requirements.txt b/requirements.txt
index 2741cf4..bde4616 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -28,7 +28,7 @@ Authlib==1.7.0
 psutil==7.2.2
 # >=2.40 needed for `enable_logs=True` kwarg on sentry_sdk.init()
 sentry-sdk[flask]>=2.40.0,<3.0.0
-regex==2024.11.6  # ReDoS-safe regex with timeout support
+regex==2026.4.4  # ReDoS-safe regex with timeout support
 
 # Production WSGI
 # gthread worker — compatible with Flask async routes + asgiref.AsyncToSync.