diff --git a/Cargo.lock b/Cargo.lock
index 81a28e4..c68b930 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -764,9 +764,9 @@ checksum = "88904434abc2901f197fe8cc55f0445e7ded921dba5911dad2e2b39b48e663c4"
 
 [[package]]
 name = "minicbor"
-version = "0.26.5"
+version = "2.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a309f581ade7597820083bc275075c4c6986e57e53f8d26f88507cfefc8c987"
+checksum = "1b7a5041e12946f8b7d3f5a9d96383a19d694b9335457c522be7815b9abafb02"
 dependencies = [
  "half",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index f1d161a..0713554 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -46,7 +46,7 @@ insta = "1.48"
 # otherwise only reachable inside the `cddl` validator's process, here we drive it directly.
 ciborium = "0.2"
 # `half` gates the `decode::Tokenizer` + `data::Token` stream API the differential drives.
-minicbor = { version = "0.26", features = ["half"] }
+minicbor = { version = "2.2", features = ["half"] }
 # Harness-side ONLY (never a generated-crate dep): `decode_conformance_replay` parses the committed
 # `tests/decode_conformance/catalog.toml` corpus (same class as ciborium/minicbor above). Navigated
 # via `toml::Value` — no serde derives of our own.