diff --git a/Cargo.lock b/Cargo.lock
index 6df6ac26..97089b57 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -811,9 +811,9 @@ checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
 
 [[package]]
 name = "minicbor"
-version = "0.26.5"
+version = "2.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a309f581ade7597820083bc275075c4c6986e57e53f8d26f88507cfefc8c987"
+checksum = "c12b4033ffaa92fbf9df03df38d19324f52bad130dd223f811734a8006dd2d69"
 dependencies = [
  "half",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index c899839e..edf67f69 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -100,7 +100,7 @@ insta = "1.48"
 # otherwise only reachable inside the `cddl` validator's process, here we drive it directly.
 ciborium = "0.2"
 # `half` gates the `decode::Tokenizer` + `data::Token` stream API the differential drives.
-minicbor = { version = "0.26", features = ["half"] }
+minicbor = { version = "2.3", features = ["half"] }
 # Harness-side ONLY (never a generated-crate dep): `recombination_tests` parses the projected
 # `tests/recomb/ingredients.json` (cddl-matrix/project_recombination.ts). Already in-tree
 # transitively (via the `cddl` validator), so this adds no lockfile weight. Navigated via