diff --git a/.github/requirements-semgrep.in b/.github/requirements-semgrep.in
index ba847f3c..7cc7f079 100644
--- a/.github/requirements-semgrep.in
+++ b/.github/requirements-semgrep.in
@@ -51,4 +51,4 @@
 # for Dependabot: certifi 2026.10.23 (new roots, #204) is younger than that and
 # was put back by hand on 2026-10-26. Then run the plain command above once
 # more. If it changes nothing, pip accepts the set as it stands.
-semgrep==1.181.0
+semgrep==1.182.1
diff --git a/.github/requirements-semgrep.txt b/.github/requirements-semgrep.txt
index fa683060..280ae437 100644
--- a/.github/requirements-semgrep.txt
+++ b/.github/requirements-semgrep.txt
@@ -30,6 +30,7 @@ certifi==2026.10.23
     #   httpcore
     #   httpx
     #   requests
+    #   semgrep
 cffi==2.1.1
     # via cryptography
 charset-normalizer==3.5.2
@@ -168,7 +169,7 @@ ruamel-yaml-clib==0.2.15
     # via semgrep
 semantic-version==2.10.0
     # via semgrep
-semgrep==1.181.0
+semgrep==1.182.1
     # via -r requirements-semgrep.in
 sse-starlette==3.5.0
     # via mcp