diff --git a/internal/third_party_notices/go.mod b/internal/third_party_notices/go.mod
index fa03e17..1d4ab99 100644
--- a/internal/third_party_notices/go.mod
+++ b/internal/third_party_notices/go.mod
@@ -2,4 +2,4 @@ module cloud.google.com/go/cbt/internal/third_party_notices
 
 go 1.24.5
 
-require golang.org/x/mod v0.27.0
+require golang.org/x/mod v0.33.0
diff --git a/internal/third_party_notices/go.sum b/internal/third_party_notices/go.sum
index 20e7713..146b868 100644
--- a/internal/third_party_notices/go.sum
+++ b/internal/third_party_notices/go.sum
@@ -1,2 +1,4 @@
 golang.org/x/mod v0.27.0 h1:kb+q2PyFnEADO2IEF935ehFUXlWiNjJWtRNgBLSfbxQ=
 golang.org/x/mod v0.27.0/go.mod h1:rWI627Fq0DEoudcK+MBkNkCe0EetEaDSwJJkCcjpazc=
+golang.org/x/mod v0.33.0 h1:tHFzIWbBifEmbwtGz65eaWyGiGZatSrT9prnU8DbVL8=
+golang.org/x/mod v0.33.0/go.mod h1:swjeQEj+6r7fODbD2cqrnje9PnziFuw4bmLbBZFrQ5w=