diff --git a/apps/api/go.mod b/apps/api/go.mod
index f6b0df45..693974f7 100644
--- a/apps/api/go.mod
+++ b/apps/api/go.mod
@@ -10,4 +10,4 @@ go 1.24
 // ensures all builds use 1.26.6, which fixes these vulnerabilities.
 toolchain go1.26.6
 
-require github.com/go-chi/chi/v5 v5.3.2
+require github.com/go-chi/chi/v5 v5.4.0
diff --git a/apps/api/go.sum b/apps/api/go.sum
index 5a3b06d3..ffecabee 100644
--- a/apps/api/go.sum
+++ b/apps/api/go.sum
@@ -1,2 +1,2 @@
-github.com/go-chi/chi/v5 v5.3.2 h1:5YQkICvTCSZ25hoRsyJazN0scjzKGiu4VAUc7H1o1nY=
-github.com/go-chi/chi/v5 v5.3.2/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+github.com/go-chi/chi/v5 v5.4.0 h1:+ufzvFTGKyin26Or5DLrlIDq4ygIDBVcj7oVNeeaYFE=
+github.com/go-chi/chi/v5 v5.4.0/go.mod h1:d1IG7GtKPSjPyBP365PH8sAGVHk3qfB/IhjFNRH1wWM=