diff --git a/.github/requirements-semgrep.in b/.github/requirements-semgrep.in
index 100efa6a..f71b7273 100644
--- a/.github/requirements-semgrep.in
+++ b/.github/requirements-semgrep.in
@@ -51,4 +51,4 @@
 # for Dependabot: certifi 2026.10.23 (new roots, #204) is younger than that and
 # was put back by hand on 2026-10-26. Then run the plain command above once
 # more. If it changes nothing, pip accepts the set as it stands.
-semgrep==1.183.0
+semgrep==1.184.0
diff --git a/.github/requirements-semgrep.txt b/.github/requirements-semgrep.txt
index 51e5a3f2..e4b2140c 100644
--- a/.github/requirements-semgrep.txt
+++ b/.github/requirements-semgrep.txt
@@ -169,7 +169,7 @@ ruamel-yaml-clib==0.2.15
     # via semgrep
 semantic-version==2.10.0
     # via semgrep
-semgrep==1.183.0
+semgrep==1.184.0
     # via -r requirements-semgrep.in
 sse-starlette==3.5.0
     # via mcp
@@ -177,6 +177,8 @@ starlette==1.9.0
     # via
     #   mcp
     #   sse-starlette
+structlog==26.1.0
+    # via semgrep
 tomli==2.4.1
     # via semgrep
 typing-extensions==4.16.0