diff --git a/.github/ci/constraints-ci.txt b/.github/ci/constraints-ci.txt
index c0d012b32..c94b79127 100644
--- a/.github/ci/constraints-ci.txt
+++ b/.github/ci/constraints-ci.txt
@@ -67,7 +67,7 @@ urllib3==2.8.0
 # means regenerating that file as its header says.
 build==1.6.1
 pyproject-hooks==1.3.3
-setuptools==84.0.0
+setuptools==84.1.0
 wheel==0.48.0
 
 # packaging.yml dependency licences
diff --git a/.github/ci/release-requirements.txt b/.github/ci/release-requirements.txt
index 4bf671739..a7f4f9eb5 100644
--- a/.github/ci/release-requirements.txt
+++ b/.github/ci/release-requirements.txt
@@ -1,6 +1,6 @@
 # Generated by .github/ci/hashed_requirements.py; do not edit by hand.
 # Regenerate after changing a version (Python 3.11):
-#   python3.11 .github/ci/hashed_requirements.py .github/ci/release-requirements.txt pip==26.2.1 build==1.6.1 setuptools==84.0.0 wheel==0.48.0
+#   python3.11 .github/ci/hashed_requirements.py .github/ci/release-requirements.txt pip==26.2.1 build==1.6.1 setuptools==84.1.0 wheel==0.48.0
 # Installed with: pip install --require-hashes -r <this file>
 
 build==1.6.1 \
@@ -15,7 +15,7 @@ pip==26.2.1 \
 pyproject-hooks==1.3.3 \
     --hash=sha256:5fc53fdac9f7bd63fbcdc868fb5f90b4784d78a53a3d3388cd738b807441a20b \
     --hash=sha256:defda19b854fa0d3bd4f76ea4ddcba8abd7dcfcdd585a6690ade050744fc5f43
-setuptools==84.0.0 \
+setuptools==84.1.0 \
     --hash=sha256:51a52592b3b99e102b609654876bd65f19f999935166d1352678931132b0c670 \
     --hash=sha256:f4695c21257f0d9b537ec2692c941d02ee143b7cc1276941349a546573b2ef73
 wheel==0.48.0 \