diff --git a/infra/requirements.txt b/infra/requirements.txt
index a4739c0..f5f0955 100644
--- a/infra/requirements.txt
+++ b/infra/requirements.txt
@@ -5,5 +5,5 @@
 # NOTE: cdk-nag stays on 2.x — 3.0 removed the NagSuppressions API this stack
 # uses (see stacks/platform/nag_suppressions.py).
 aws-cdk-lib==2.261.0
-constructs==10.6.0
+constructs==10.8.1
 cdk-nag==2.37.55