diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 424f66c..e685805 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -131,7 +131,7 @@ dependencies {
     // compiles everywhere; builds without the .so fall back to the bridge.
     implementation(project(":openvpn-core"))
     // ---- Embedded WireGuard engine (official tunnel library, Apache-2.0) ---
-    implementation("com.wireguard.android:tunnel:1.0.20230706")
+    implementation("com.wireguard.android:tunnel:1.0.20260102")
     coreLibraryDesugaring("com.android.tools:desugar_jdk_libs:2.1.5")
     // ---- Runtime: first-party Android only --------------------------------
     implementation(libs.androidx.core.ktx)