diff --git a/pyproject.toml b/pyproject.toml
index 948b80d..2ebe614 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -36,7 +36,7 @@ dependencies = [
   "jsonschema>=4.9.1",
   "urllib3>=1.25.10",
   "semantic-version>=2.10.0",
-  "oras<=0.2.38",
+  "oras<=0.2.39",
   "python-qpid-proton>=0.39.0"
 ]
 
diff --git a/requirements.txt b/requirements.txt
index 3a78ed0..54c986d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,5 +9,5 @@ subresource-integrity>=0.2
 jsonschema>=4.9.1
 urllib3>=1.25.10
 semantic-version>=2.10.0
-oras<=0.2.38
+oras<=0.2.39
 python-qpid-proton>=0.39.0
\ No newline at end of file