diff --git a/Cargo.lock b/Cargo.lock
index 17158703..d13a100a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -769,9 +769,9 @@ checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
 
 [[package]]
 name = "minicbor"
-version = "0.26.5"
+version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a309f581ade7597820083bc275075c4c6986e57e53f8d26f88507cfefc8c987"
+checksum = "c12b4033ffaa92fbf9df03df38d19324f52bad130dd223f811734a8006dd2d69"
 dependencies = [
  "half",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 2dcd344e..1ac929ec 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -87,7 +87,7 @@ insta = "1.48"
 # otherwise only reachable inside the `cddl` validator's process, here we drive it directly.
 ciborium = "0.2"
 # `half` gates the `decode::Tokenizer` + `data::Token` stream API the differential drives.
-minicbor = { version = "0.26", features = ["half"] }
+minicbor = { version = "2.3", features = ["half"] }
 # Harness-side ONLY (never a generated-crate dep): `decode_conformance_replay` parses the committed
 # `tests/decode_conformance/catalog.toml` corpus (same class as ciborium/minicbor above). Navigated
 # via `toml::Value` — no serde derives of our own.