diff --git a/README.md b/README.md
index 24f9619..d27e8d3 100644
--- a/README.md
+++ b/README.md
@@ -106,4 +106,4 @@ tr := NewFromAppsTransport(atr, 99)
 
 ## Dependencies
 
-- [github.com/golang-jwt/jwt-go](https://github.com/golang-jwt/jwt-go)
+- [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt)
diff --git a/appsTransport.go b/appsTransport.go
index ada64bc..e5c7864 100644
--- a/appsTransport.go
+++ b/appsTransport.go
@@ -9,7 +9,7 @@ import (
 	"strconv"
 	"time"
 
-	jwt "github.com/golang-jwt/jwt/v4"
+	jwt "github.com/golang-jwt/jwt/v5"
 )
 
 // AppsTransport provides a http.RoundTripper by wrapping an existing
diff --git a/appsTransport_test.go b/appsTransport_test.go
index 37a2b2c..02483b4 100644
--- a/appsTransport_test.go
+++ b/appsTransport_test.go
@@ -9,7 +9,7 @@ import (
 	"strings"
 	"testing"
 
-	jwt "github.com/golang-jwt/jwt/v4"
+	jwt "github.com/golang-jwt/jwt/v5"
 	"github.com/google/go-cmp/cmp"
 )
 
diff --git a/go.mod b/go.mod
index 61f084b..7ef6f1a 100644
--- a/go.mod
+++ b/go.mod
@@ -5,7 +5,7 @@ go 1.24.0
 toolchain go1.24.2
 
 require (
-	github.com/golang-jwt/jwt/v4 v4.5.2
+	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/google/go-cmp v0.7.0
 	github.com/google/go-github/v75 v75.0.0
 )
diff --git a/go.sum b/go.sum
index fb7949d..bdf233c 100644
--- a/go.sum
+++ b/go.sum
@@ -1,5 +1,5 @@
-github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
-github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
+github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
+github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
 github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
diff --git a/sign.go b/sign.go
index 928e10e..e626a60 100644
--- a/sign.go
+++ b/sign.go
@@ -3,7 +3,7 @@ package ghinstallation
 import (
 	"crypto/rsa"
 
-	jwt "github.com/golang-jwt/jwt/v4"
+	jwt "github.com/golang-jwt/jwt/v5"
 )
 
 // Signer is a JWT token signer. This is a wrapper around [jwt.SigningMethod] with predetermined