diff --git a/composer.json b/composer.json
index 60402d7..0f0f8e7 100644
--- a/composer.json
+++ b/composer.json
@@ -21,7 +21,7 @@
         "guzzlehttp/guzzle": "^7.12.1",
         "phpstan/phpstan": "^2.1",
         "phpunit/phpunit": "^10.5|^11.0",
-        "squizlabs/php_codesniffer": "^3.7"
+        "squizlabs/php_codesniffer": "^4.0"
     },
     "suggest": {
         "guzzlehttp/guzzle": "^7.12.1 — required by the default HTTP client (GuzzleHttpClient). Earlier 7.x releases carry CVE-2026-55568 (silent HTTPS proxy downgrade to cleartext) and CVE-2026-55767.",