diff --git a/CHANGELOG.md b/CHANGELOG.md
index 77a14e1b..18951fff 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # sqlite3-ruby Changelog
 
+## next / unreleased
+
+### Dependencies
+
+- Vendored sqlite is updated to [v3.54.1](https://www.sqlite.org/releaselog/3_54_1.html) (from v3.54.0). This release contains a fix for a possible heap buffer overflow on 32-bit builds, including the precompiled `x86-linux-gnu` and `x86-linux-musl` gems. #756 @flavorjones
+
+
 ## 2.10.0 / 2026-10-13
 
 ### Dependencies
diff --git a/dependencies.yml b/dependencies.yml
index 97737982..a60ba065 100644
--- a/dependencies.yml
+++ b/dependencies.yml
@@ -1,13 +1,13 @@
 sqlite3:
   # checksum verified by first checking the published sha3(256) checksum against https://sqlite.org/download.html:
-  # f5e3e724e9c9b3b5d512c76b02082091a59eeea9becd169a9fbf4d376403acce
+  # b6ced585c750916b1052667239a12c25a7ff34e7f06e1e6e01ecb0427657d9c4
   #
-  # $ sha3sum -a 256 ports/archives/sqlite-autoconf-3540000.tar.gz
-  # f5e3e724e9c9b3b5d512c76b02082091a59eeea9becd169a9fbf4d376403acce  ports/archives/sqlite-autoconf-3540000.tar.gz
+  # $ openssl dgst -sha3-256 -r ports/archives/sqlite-autoconf-3540100.tar.gz
+  # b6ced585c750916b1052667239a12c25a7ff34e7f06e1e6e01ecb0427657d9c4 *ports/archives/sqlite-autoconf-3540100.tar.gz
   #
-  # $ sha256sum ports/archives/sqlite-autoconf-3540000.tar.gz
-  # 134ec0802dda5795816e25d25872d20b312cb3973438c49b30bc40b7705ea9ed  ports/archives/sqlite-autoconf-3540000.tar.gz
-  version: "3.54.0"
+  # $ sha256sum ports/archives/sqlite-autoconf-3540100.tar.gz
+  # 926ef8d3eab93fbf6e06011901273eec076b25594a4e1cdadd50c987f4f6d64e  ports/archives/sqlite-autoconf-3540100.tar.gz
+  version: "3.54.1"
   files:
-    - url: "https://sqlite.org/2026/sqlite-autoconf-3540000.tar.gz"
-      sha256: "134ec0802dda5795816e25d25872d20b312cb3973438c49b30bc40b7705ea9ed"
+    - url: "https://sqlite.org/2026/sqlite-autoconf-3540100.tar.gz"
+      sha256: "926ef8d3eab93fbf6e06011901273eec076b25594a4e1cdadd50c987f4f6d64e"