diff --git a/Cargo.lock b/Cargo.lock
index 92824acd2..94559d8bf 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6983,9 +6983,12 @@ dependencies = [
 
 [[package]]
 name = "webpki-roots"
-version = "0.25.4"
+version = "0.26.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f20c57d8d7db6d3b86154206ae5d8fba62dd39573114de97c2cb0578251f8e1"
+checksum = "3c452ad30530b54a4d8e71952716a212b08efd0f3562baa66c29a618b07da7c3"
+dependencies = [
+ "rustls-pki-types",
+]
 
 [[package]]
 name = "which"
diff --git a/clash_lib/Cargo.toml b/clash_lib/Cargo.toml
index 8c359769b..638a29c96 100644
--- a/clash_lib/Cargo.toml
+++ b/clash_lib/Cargo.toml
@@ -88,7 +88,7 @@ hickory-proto = { version = "0.24", features = ["dns-over-rustls", "dns-over-htt
 # ideally we should make a CryptoProvider with boringssl and get rid of rings
 rustls = { version  = "0.21", features=["dangerous_configuration", "quic"] }
 rustls-pemfile = "1.0.4"
-webpki-roots = "0.25"
+webpki-roots = "0.26"
 dhcproto = "0.12"
 ring-compat = { version = "0.8", features = ["aead"] }