diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index bdffe264a4..43657d10c6 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -69,7 +69,7 @@ jobs:
       run: |
         cp -f .env.example .env
     - name: Checks for new endpoints against AWS WAF rules
-      uses: cds-snc/notification-utils/.github/actions/waffles@52.3.7
+      uses: cds-snc/notification-utils/.github/actions/waffles@52.3.8
       with:
         app-loc: '/github/workspace'
         app-libs: '/github/workspace/env/site-packages'
diff --git a/pyproject.toml b/pyproject.toml
index 4bce92347b..a6067ff908 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -65,7 +65,7 @@ Werkzeug = "3.0.4"
 MarkupSafe = "2.1.5"
 # REVIEW: v2 is using sha512 instead of sha1 by default (in v1)
 itsdangerous = "2.2.0"
-notifications-utils = { git = "https://github.com/cds-snc/notifier-utils.git", tag = "52.3.7" }
+notifications-utils = { git = "https://github.com/cds-snc/notifier-utils.git", tag = "52.3.8" }
 
 # rsa = "4.9  # awscli 1.22.38 depends on rsa<4.8
 typing-extensions = "4.12.2"