diff --git a/Cargo.lock b/Cargo.lock
index 1c04fcc677..8071a59930 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -479,7 +479,7 @@ checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776"
 
 [[package]]
 name = "libgit2-sys"
-version = "0.18.6+1.9.5"
+version = "0.18.7+1.9.6"
 dependencies = [
  "cc",
  "libc",
diff --git a/Cargo.toml b/Cargo.toml
index 025f6791e8..b7b0d069c9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -20,7 +20,7 @@ url = { version = "2.5.4", optional = true }
 bitflags = "2.1.0"
 libc = "0.2"
 log = "0.4.8"
-libgit2-sys = { path = "libgit2-sys", version = "0.18.6" }
+libgit2-sys = { path = "libgit2-sys", version = "0.18.7" }
 
 [target."cfg(all(unix, not(target_os = \"macos\")))".dependencies]
 openssl-sys = { version = "0.9.45", optional = true }
diff --git a/README.md b/README.md
index 0fceaea583..d25e9dbb2d 100644
--- a/README.md
+++ b/README.md
@@ -27,7 +27,7 @@ stable release as well.
 
 ## Version of libgit2
 
-Currently this library requires libgit2 1.9.5 (or newer patch versions). The
+Currently this library requires libgit2 1.9.6 (or newer patch versions). The
 source for libgit2 is included in the libgit2-sys crate so there's no need to
 pre-install the libgit2 library, the libgit2-sys crate will figure that and/or
 build that for you. On the other hand, if an appropriate version of `libgit2`
diff --git a/libgit2-sys/CHANGELOG.md b/libgit2-sys/CHANGELOG.md
index 179953fff9..0841cc61ec 100644
--- a/libgit2-sys/CHANGELOG.md
+++ b/libgit2-sys/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.18.7+1.9.6 - 2026-07-22
+[0.18.6...0.18.7](https://github.com/rust-lang/git2-rs/compare/libgit2-sys-0.18.6+1.9.5...libgit2-sys-0.18.7+1.9.6)
+
+### Changed
+
+- Updated to libgit2 [1.9.6](https://github.com/libgit2/libgit2/releases/tag/v1.9.6).
+  This fixes SSH known-host loading with an invalid home directory,
+  an Android crash when `HOME` is unset,
+  and hidden symbol visibility for static builds.
+
 ## 0.18.6+1.9.5 - 2026-07-22
 [0.18.5...0.18.6](https://github.com/rust-lang/git2-rs/compare/libgit2-sys-0.18.5+1.9.4...libgit2-sys-0.18.6+1.9.5)
 
diff --git a/libgit2-sys/Cargo.toml b/libgit2-sys/Cargo.toml
index d0f1460588..67b8b49c81 100644
--- a/libgit2-sys/Cargo.toml
+++ b/libgit2-sys/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "libgit2-sys"
-version = "0.18.6+1.9.5"
+version = "0.18.7+1.9.6"
 authors = ["Josh Triplett <josh@joshtriplett.org>", "Alex Crichton <alex@alexcrichton.com>"]
 links = "git2"
 build = "build.rs"
diff --git a/libgit2-sys/build.rs b/libgit2-sys/build.rs
index 390fd5acb0..6ecd018233 100644
--- a/libgit2-sys/build.rs
+++ b/libgit2-sys/build.rs
@@ -9,7 +9,7 @@ fn try_system_libgit2(
     experimental_sha256: bool,
 ) -> Result<pkg_config::Library, Box<dyn std::error::Error>> {
     let mut cfg = pkg_config::Config::new();
-    let range_version = "1.9.5".."1.10.0";
+    let range_version = "1.9.6".."1.10.0";
 
     let lib = if experimental_sha256 {
         // Determine whether experimental SHA256 object support is enabled.
diff --git a/libgit2-sys/libgit2 b/libgit2-sys/libgit2
index f7a4071c76..26055f5af7 160000
--- a/libgit2-sys/libgit2
+++ b/libgit2-sys/libgit2
@@ -1 +1 @@
-Subproject commit f7a4071c766ceea3915415e22134cbe3e581c420
+Subproject commit 26055f5af74ab1cf636d272e8a34315496d3f06f