diff --git a/Cargo.lock b/Cargo.lock
index 326626c..66d625c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -914,7 +914,7 @@ dependencies = [
  "anyhow",
  "async-trait",
  "chrono",
- "core-foundation 0.9.4",
+ "core-foundation 0.10.1",
  "criterion",
  "dirs 5.0.1",
  "fastembed",
diff --git a/crates/clx-core/Cargo.toml b/crates/clx-core/Cargo.toml
index c8437a0..e1e0e91 100644
--- a/crates/clx-core/Cargo.toml
+++ b/crates/clx-core/Cargo.toml
@@ -65,7 +65,7 @@ fastembed = "5"
 # non-macOS builds never pull these.
 [target.'cfg(target_os = "macos")'.dependencies]
 security-framework = "2.11"
-core-foundation = "0.9"
+core-foundation = "0.10"
 
 # `bounded_read` opens untrusted-path files with O_NONBLOCK on Unix so the
 # open() call itself cannot hang on a FIFO with no writer attached (a plain