diff --git a/go.mod b/go.mod
index c5787ecb8..b7bc53c30 100644
--- a/go.mod
+++ b/go.mod
@@ -7,7 +7,7 @@ go 1.24.2
 require (
 	github.com/containerd/platforms v1.0.0-rc.1
 	github.com/containernetworking/cni v1.3.0
-	github.com/containers/luksy v0.0.0-20250714213221-8fccf784694e
+	github.com/containers/luksy v0.0.0-20250910190358-2cf5bc928957
 	github.com/containers/ocicrypt v1.2.1
 	github.com/cyphar/filepath-securejoin v0.4.1
 	github.com/docker/distribution v2.8.3+incompatible
diff --git a/go.sum b/go.sum
index d0a20dd37..49c62ecd2 100644
--- a/go.sum
+++ b/go.sum
@@ -51,8 +51,8 @@ github.com/containernetworking/plugins v1.8.0 h1:WjGbV/0UQyo8A4qBsAh6GaDAtu1hevx
 github.com/containernetworking/plugins v1.8.0/go.mod h1:JG3BxoJifxxHBhG3hFyxyhid7JgRVBu/wtooGEvWf1c=
 github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01 h1:Qzk5C6cYglewc+UyGf6lc8Mj2UaPTHy/iF2De0/77CA=
 github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01/go.mod h1:9rfv8iPl1ZP7aqh9YA68wnZv2NUDbXdcdPHVz0pFbPY=
-github.com/containers/luksy v0.0.0-20250714213221-8fccf784694e h1:nrNp2M6tTNGvLVrJpgqge9GwHgsWBGp2HBKg84BdVd8=
-github.com/containers/luksy v0.0.0-20250714213221-8fccf784694e/go.mod h1:kPe8hxQEh1x1Uojxjr//MKkxK5x11sxDoY6rW905OL0=
+github.com/containers/luksy v0.0.0-20250910190358-2cf5bc928957 h1:WxixhZ0typ8o668V0V7RVCZb3lNs58UF42RbwlQ4vdE=
+github.com/containers/luksy v0.0.0-20250910190358-2cf5bc928957/go.mod h1:fGPsLPRi1etbHfe5o6sdx6ajsW810tI43uyF6ugmP/o=
 github.com/containers/ocicrypt v1.2.1 h1:0qIOTT9DoYwcKmxSt8QJt+VzMY18onl9jUXsxpVhSmM=
 github.com/containers/ocicrypt v1.2.1/go.mod h1:aD0AAqfMp0MtwqWgHM1bUwe1anx0VazI108CRrSKINQ=
 github.com/coreos/go-systemd/v22 v22.6.0 h1:aGVa/v8B7hpb0TKl0MWoAavPDmHvobFe5R5zn0bCJWo=
diff --git a/vendor/github.com/containers/luksy/.cirrus.yml b/vendor/github.com/containers/luksy/.cirrus.yml
index 19c6c2340..f9f701dd2 100644
--- a/vendor/github.com/containers/luksy/.cirrus.yml
+++ b/vendor/github.com/containers/luksy/.cirrus.yml
@@ -4,8 +4,8 @@ docker_builder:
         HOME: /root
         DEBIAN_FRONTEND: noninteractive
         CIRRUS_LOG_TIMESTAMP: true
-        GOVERSION: 1.21
-        PATH: /usr/lib/go-1.21/bin:$PATH
+        GOVERSION: 1.23
+        PATH: /usr/lib/go-1.23/bin:$PATH
     setup_script: |
         apt-get -q update
         apt-get -q install -y bats cryptsetup golang-${GOVERSION}
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 6e548ad8d..9cc949de8 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -66,8 +66,8 @@ github.com/containernetworking/plugins/pkg/ns
 # github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01
 ## explicit
 github.com/containers/libtrust
-# github.com/containers/luksy v0.0.0-20250714213221-8fccf784694e
-## explicit; go 1.23.0
+# github.com/containers/luksy v0.0.0-20250910190358-2cf5bc928957
+## explicit; go 1.24.0
 github.com/containers/luksy
 # github.com/containers/ocicrypt v1.2.1
 ## explicit; go 1.22