diff --git a/extra/mbedtls/.SRCINFO b/extra/mbedtls/.SRCINFO
index e4a8fb8aa..87e59d714 100644
--- a/extra/mbedtls/.SRCINFO
+++ b/extra/mbedtls/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = mbedtls
 	pkgdesc = An open source, portable, easy to use, readable and flexible TLS library
-	pkgver = 3.6.0
+	pkgver = 3.6.1
 	pkgrel = 1
 	url = https://tls.mbed.org
 	arch = x86_64
@@ -19,9 +19,9 @@ pkgbase = mbedtls
 	conflicts = polarssl
 	replaces = polarssl
 	options = staticlibs
-	source = git+https://github.com/Mbed-TLS/mbedtls.git#tag=67dc8f869a2ef39b1f19f6a6d3a34965bc50097e
+	source = git+https://github.com/Mbed-TLS/mbedtls.git#tag=b727a6982c8f4d97dc8a979d7af417a08a551e5e
 	source = git+https://github.com/Mbed-TLS/mbedtls-framework.git
-	b2sums = e1baa97607fff9e83b633f2b7ea346783c61ff380a5a65accdc8100534b6b41c2dc479e465c528252d0b01ebc19c043aa3841264a87a0c8fb87a87d6b545c469
+	b2sums = 9a38000d9a88443d9b48f43c811eb5ffc7b03a779c283482f6025235729a7e72474fe71e0293ee48a61e7621e03e0b89462e02c64fc16461bae0e30ff4f8a357
 	b2sums = SKIP
 
 pkgname = mbedtls
diff --git a/extra/mbedtls/.nvchecker.toml b/extra/mbedtls/.nvchecker.toml
new file mode 100644
index 000000000..a9cdcece3
--- /dev/null
+++ b/extra/mbedtls/.nvchecker.toml
@@ -0,0 +1,4 @@
+[mbedtls]
+source = "git"
+git = "https://github.com/Mbed-TLS/mbedtls.git"
+prefix = "v"
diff --git a/extra/mbedtls/PKGBUILD b/extra/mbedtls/PKGBUILD
index cba8dce38..8bbda6a91 100644
--- a/extra/mbedtls/PKGBUILD
+++ b/extra/mbedtls/PKGBUILD
@@ -8,7 +8,7 @@
 #  - patch to fix FTBFS with gcc 14: https://github.com/Mbed-TLS/mbedtls/issues/9003
 
 pkgname=mbedtls
-pkgver=3.6.0
+pkgver=3.6.1
 pkgrel=1
 pkgdesc='An open source, portable, easy to use, readable and flexible TLS library'
 arch=(x86_64)
@@ -34,13 +34,13 @@ provides=(
 replaces=(polarssl)
 conflicts=(polarssl)
 options=(staticlibs)
-_tag=67dc8f869a2ef39b1f19f6a6d3a34965bc50097e
+_tag=b727a6982c8f4d97dc8a979d7af417a08a551e5e
 source=(
   git+https://github.com/Mbed-TLS/mbedtls.git#tag=${_tag}
   git+https://github.com/Mbed-TLS/mbedtls-framework.git
   gcc14.patch
 )
-b2sums=('e1baa97607fff9e83b633f2b7ea346783c61ff380a5a65accdc8100534b6b41c2dc479e465c528252d0b01ebc19c043aa3841264a87a0c8fb87a87d6b545c469'
+b2sums=('9a38000d9a88443d9b48f43c811eb5ffc7b03a779c283482f6025235729a7e72474fe71e0293ee48a61e7621e03e0b89462e02c64fc16461bae0e30ff4f8a357'
         'SKIP'
         'b1f1ac09a40350c508d6019a4f937b73ff5322528285a71ce341eddacc09ac06392c4d91d754786250c724174947d3f2e9fca8f242275212f9adb4d9ecd65bed')