diff --git a/pyproject.toml b/pyproject.toml
index b667868..d0f8237 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
   "jsonschema>=4.9.1",
   "urllib3>=1.25.10",
   "semantic-version>=2.10.0",
-  "oras<=0.2.31",
+  "oras<=0.2.38",
   "python-qpid-proton>=0.39.0"
 ]
 
diff --git a/requirements.txt b/requirements.txt
index d5b5ec7..3a78ed0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,5 +9,5 @@ subresource-integrity>=0.2
 jsonschema>=4.9.1
 urllib3>=1.25.10
 semantic-version>=2.10.0
-oras<=0.2.31
+oras<=0.2.38
 python-qpid-proton>=0.39.0
\ No newline at end of file
diff --git a/setup.py b/setup.py
index 3935d97..8449401 100755
--- a/setup.py
+++ b/setup.py
@@ -58,7 +58,7 @@
         "jsonschema>=4.9.1",
         "urllib3>=1.25.10",
         "semantic-version>=2.10.0",
-        "oras<=0.2.31",
+        "oras<=0.2.38",
         "python-qpid-proton>=0.39.0"
     ],
 )