diff --git a/CHANGELOG.md b/CHANGELOG.md
index cbaa9f0..0a59f9a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@ Changelog
 
 *Also see [Tools and installer changelog](https://github.com/clojure/brew-install/blob/1.12.0/CHANGELOG.md)*
 
+* next
+  * Update to tools.gitlibs 2.6.206
 * 0.21.1460 on Nov 21, 2024
   * Update to tools.deps.cli 0.11.78
 * 0.21.1456 on Nov 21, 2024
diff --git a/deps.edn b/deps.edn
index 1438a5c..b635886 100644
--- a/deps.edn
+++ b/deps.edn
@@ -12,7 +12,7 @@
    org.apache.maven/maven-core {:mvn/version "3.8.8" :exclusions [com.google.guava/guava]}
    ;  com.google.guava/guava {:mvn/version "33.0.0-jre"} ;; update transitive dep due to CVE-2020-8908
    org.clojure/data.xml {:mvn/version "0.2.0-alpha9"}
-   org.clojure/tools.gitlibs {:mvn/version "2.5.197"}
+   org.clojure/tools.gitlibs {:mvn/version "2.6.206"}
    org.clojure/tools.cli {:mvn/version "1.1.230"}
    com.cognitect.aws/api {:mvn/version "0.8.692" :exclusions [org.eclipse.jetty/jetty-http org.eclipse.jetty/jetty-client org.eclipse.jetty/jetty-util]}  ;; override for CVEs
      org.eclipse.jetty/jetty-http {:mvn/version "9.4.53.v20231009"}
diff --git a/pom.xml b/pom.xml
index bb59c2e..0fc172f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@
     <dependency>
       <groupId>org.clojure</groupId>
       <artifactId>tools.gitlibs</artifactId>
-      <version>2.5.197</version>
+      <version>2.6.206</version>
     </dependency>
     <dependency>
       <groupId>org.clojure</groupId>