diff --git a/requirements.prod.in b/requirements.prod.in
index 234cae653..f62b3ef2f 100644
--- a/requirements.prod.in
+++ b/requirements.prod.in
@@ -36,5 +36,7 @@ structlog
 # 2.1.0 appears to be causing some problems with exporting
 # https://github.com/opensafely-core/job-server/issues/3955
 urllib3<=2.2.3
-whitenoise[brotli]
+# Serves static files. Dependabot wasn't updating past 6.3.0 for
+# unclear reasons, and we want fix #612 from 6.8.0.
+whitenoise[brotli]>=6.8.0
 xkcdpass
diff --git a/requirements.prod.txt b/requirements.prod.txt
index 0f51f6576..b4adfed69 100644
--- a/requirements.prod.txt
+++ b/requirements.prod.txt
@@ -920,9 +920,9 @@ urllib3==2.2.3 \
     #   -r requirements.prod.in
     #   requests
     #   sentry-sdk
-whitenoise==6.3.0 \
-    --hash=sha256:cf8ecf56d86ba1c734fdb5ef6127312e39e92ad5947fef9033dc9e43ba2777d9 \
-    --hash=sha256:fe0af31504ab08faa1ec7fc02845432096e40cc1b27e6a7747263d7b30fb51fa
+whitenoise==6.8.2 \
+    --hash=sha256:486bd7267a375fa9650b136daaec156ac572971acc8bf99add90817a530dd1d4 \
+    --hash=sha256:df12dce147a043d1956d81d288c6f0044147c6d2ab9726e5772ac50fb45d2280
     # via -r requirements.prod.in
 wrapt==1.16.0 \
     --hash=sha256:0d2691979e93d06a95a26257adb7bfd0c93818e89b1406f5a28f36e0d8c1e1fc \