diff --git a/CHANGELOG.md b/CHANGELOG.md
index d6123713..d68363c9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,11 @@
+0.22.16
+=======
+
+* Update expat to 2.8.2
+* Update libffi to 3.6.0
+* Update sqlite to 3.53.3.0
+
+
 0.22.15
 =======
 
diff --git a/relenv/common.py b/relenv/common.py
index 07e79c3f..166d4d27 100644
--- a/relenv/common.py
+++ b/relenv/common.py
@@ -27,7 +27,7 @@
     from collections.abc import Callable, Iterable, Mapping
 
 # relenv package version
-__version__ = "0.22.15"
+__version__ = "0.22.16"
 
 log = logging.getLogger(__name__)
 
diff --git a/relenv/python-versions.json b/relenv/python-versions.json
index 3077e1bb..fc49986d 100644
--- a/relenv/python-versions.json
+++ b/relenv/python-versions.json
@@ -322,6 +322,16 @@
      "darwin",
      "win32"
     ]
+   },
+   "3.53.3.0": {
+    "url": "https://sqlite.org/2026/sqlite-autoconf-{version}.tar.gz",
+    "sha256": "c917d7db16648ec95f714974ace5e5dcf46b7dc70e26600a0a102a3141125db0",
+    "sqliteversion": "3530300",
+    "platforms": [
+     "linux",
+     "darwin",
+     "win32"
+    ]
    }
   },
   "xz": {
@@ -358,6 +368,13 @@
     "platforms": [
      "win32"
     ]
+   },
+   "3.6.0": {
+    "url": "https://github.com/libffi/libffi/releases/download/v{version}/libffi-{version}.tar.gz",
+    "sha256": "31ff1fe32deaebfbb388727f32677bb254bf2a41382c51464c0b1837c9ee9828",
+    "platforms": [
+     "linux"
+    ]
    }
   },
   "zlib": {
@@ -540,6 +557,15 @@
      "darwin",
      "win32"
     ]
+   },
+   "2.8.2": {
+    "url": "https://github.com/libexpat/libexpat/releases/download/R_2_8_2/expat-{version}.tar.xz",
+    "sha256": "3ad89b8588e6644bd4e49981480d48b21289eebbcd4f0a1a4afb1c29f99b6ab4",
+    "platforms": [
+     "linux",
+     "darwin",
+     "win32"
+    ]
    }
   }
  }
diff --git a/relenv/pyversions.py b/relenv/pyversions.py
index e8a2f99e..c9f210ab 100644
--- a/relenv/pyversions.py
+++ b/relenv/pyversions.py
@@ -723,7 +723,13 @@ def update_dependency_versions(path: pathlib.Path, deps_to_update: list[str] | N
                     dependencies["libffi"][latest] = {
                         "url": "https://github.com/libffi/libffi/releases/download/v{version}/libffi-{version}.tar.gz",
                         "sha256": checksum,
-                        "platforms": ["linux", "win32"],
+                        # libffi/libffi source releases ship configure/Makefile
+                        # only; Windows libffi (ffi.h, libffi-8.lib, libffi-8.dll)
+                        # comes from python/cpython-bin-deps, handled by the
+                        # detect_cpython_bin_deps_versions branch below.
+                        # Don't claim win32 here or get_dependency_version picks
+                        # this entry by version-sort and fails the _ctypes build.
+                        "platforms": ["linux"],
                     }
                     os.remove(download_path)
                 except Exception as e: