diff --git a/.github/workflows/package-windows.yml b/.github/workflows/package-windows.yml
index 606a8ccc..d6ce5b34 100644
--- a/.github/workflows/package-windows.yml
+++ b/.github/workflows/package-windows.yml
@@ -43,15 +43,14 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@v7
         with:
-          python-version: 3.11
+          # new enough to not worry about emudhra
+          python-version: 3.13.17
           cache: 'pip'
       - name: Install dependencies
         env:
           PYINSTALLER_COMPILE_BOOTLOADER: 1
         run: |
-          python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"
-          python -m pip install 'certifi>=2026.10.19'
-          python -m pip install --upgrade pip
+          python -m pip install --upgrade pip certifi
           pip install -r ${{ matrix.requirements }}
           pip install pyinstaller --no-binary pyinstaller
       - name: build binary