diff --git a/apps/api/pyproject.toml b/apps/api/pyproject.toml
index e550ce4..4061475 100644
--- a/apps/api/pyproject.toml
+++ b/apps/api/pyproject.toml
@@ -41,7 +41,7 @@ dev = [
     # stale local ruff hasn't, so `ruff check` is green locally but red in CI. Bump
     # deliberately after fixing any new findings locally.
     "ruff==0.15.20",
-    "mypy==2.1.0",
+    "mypy==2.3.0",
     "pip-audit==2.10.1",
     "uv==0.11.15",
     "fakeredis==2.36.2",
diff --git a/apps/api/sandbox-requirements.in b/apps/api/sandbox-requirements.in
index c34a8b6..59765ac 100644
--- a/apps/api/sandbox-requirements.in
+++ b/apps/api/sandbox-requirements.in
@@ -1,6 +1,6 @@
 pytest==9.1.1
 ruff==0.15.20
-mypy==2.1.0
+mypy==2.3.0
 openpyxl==3.1.5
 python-docx==1.2.0
 pandas==3.0.3