diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
index ccd62cf8..85410d98 100644
--- a/.github/workflows/wheels.yml
+++ b/.github/workflows/wheels.yml
@@ -69,7 +69,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install cibuildwheel
         # Nb. keep cibuildwheel version pin consistent with job below
-        run: pipx install cibuildwheel==2.16.5
+        run: pipx install cibuildwheel==2.21.3
       - id: set-matrix
         # Once we have the windows build figured out, it can be added here
         # by updating the matrix to include windows builds as well.
@@ -99,6 +99,10 @@ jobs:
       matrix:
         include: ${{ fromJson(needs.generate-wheels-matrix.outputs.include) }}
 
+    env:
+      PYXMLSEC_LIBXML2_VERSION: 2.12.9
+      PYXMLSEC_LIBXSLT_VERSION: 1.1.42
+
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4
@@ -112,7 +116,7 @@ jobs:
           platforms: all
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v2.16.5
+        uses: pypa/cibuildwheel@v2.21.3
         with:
           only: ${{ matrix.only }}
         env:
diff --git a/pyproject.toml b/pyproject.toml
index 9b6469d4..8c03f910 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -58,6 +58,9 @@ skip = [
     "cp37-manylinux_aarch64",
     "cp36-musllinux_aarch64",
     "cp37-musllinux_aarch64",
+    "cp36-macosx*",
+    "cp37-macosx*",
+    "cp38-macosx*",
 ]
 test-command = "pytest -v --color=yes {package}/tests"
 before-test = "pip install -r requirements-test.txt"