diff --git a/android/app/src/main/python/requirements.txt b/android/app/src/main/python/requirements.txt
index 5b092bd..3af8cc7 100644
--- a/android/app/src/main/python/requirements.txt
+++ b/android/app/src/main/python/requirements.txt
@@ -12,7 +12,7 @@
 # sees it, so this stays safe as long as that check does. the
 # dependabot alerts on the public repo are dismissed with this
 # reasoning. bump the moment a 13.0+ arm64 wheel shows up.
-Pillow==11.0.0
+Pillow==13.0.0
 lz4==4.3.2
 attrs==26.1.0
 fsspec==2026.9.0