diff --git a/certbot-dns-rfc2136/setup.py b/certbot-dns-rfc2136/setup.py
index 76c12cbd8..d0d9acb6a 100644
--- a/certbot-dns-rfc2136/setup.py
+++ b/certbot-dns-rfc2136/setup.py
@@ -7,7 +7,7 @@ from setuptools import setup
 version = '3.1.0.dev0'
 
 install_requires = [
-    'dnspython>=1.15.0',
+    'dnspython>=2.6.1',
     'setuptools>=41.6.0',
 ]
 
diff --git a/certbot/CHANGELOG.md b/certbot/CHANGELOG.md
index c77a419c1..316bb1bf2 100644
--- a/certbot/CHANGELOG.md
+++ b/certbot/CHANGELOG.md
@@ -11,6 +11,7 @@ Certbot adheres to [Semantic Versioning](https://semver.org/).
 ### Changed
 
 * Python 3.8 support was removed.
+* certbot-dns-rfc2136's minimum required version of dnspython is now 2.6.1.
 * Updated our Docker images to be based on Alpine Linux 3.20.
 
 ### Fixed
diff --git a/pytest.ini b/pytest.ini
index 65932b071..433033e53 100644
--- a/pytest.ini
+++ b/pytest.ini
@@ -11,23 +11,20 @@
 # we release breaking changes.
 #
 # The current warnings being ignored are:
-# 1) A deprecation warning is raised in dnspython==1.15.0 in the oldest tests for
-#    certbot-dns-rfc2136.
-# 2) pytest-cov uses deprecated functionality in pytest-xdist, to be resolved by
+# 1) pytest-cov uses deprecated functionality in pytest-xdist, to be resolved by
 #    https://github.com/pytest-dev/pytest-cov/issues/557.
-# 3) requests-toolbelt<0.10.1 can cause this warning to be raised during our
+# 2) requests-toolbelt<0.10.1 can cause this warning to be raised during our
 #    unit tests. This warning should be ignored until our (transitive)
 #    dependency on requests-toolbelt is removed or our pinned version can be
 #    updated.
-# 4) Ignore DeprecationWarning for datetime.utcfromtimestamp() triggered
+# 3) Ignore DeprecationWarning for datetime.utcfromtimestamp() triggered
 #    from dateutil. See https://github.com/dateutil/dateutil/issues/1314.
-# 5) Ignoring this allows us to continue to update pyOpenSSL (one of our crypto
+# 4) Ignoring this allows us to continue to update pyOpenSSL (one of our crypto
 #    dependencies) until https://github.com/certbot/certbot/issues/9828 is resolved.
-# 6) Similarly to 6), CSR support is deprecated in pyOpenSSL since 24.2, we silence
+# 5) Similarly to 6), CSR support is deprecated in pyOpenSSL since 24.2, we silence
 #    the warning until https://github.com/certbot/certbot/issues/9992 is resolved.
 filterwarnings =
     error
-    ignore:decodestring\(\) is a deprecated alias:DeprecationWarning:dns
     ignore:.*rsyncdir:DeprecationWarning
     ignore:'urllib3.contrib.pyopenssl:DeprecationWarning:requests_toolbelt
     ignore:.*datetime.utcfromtimestamp\(\) is deprecated:DeprecationWarning:dateutil
diff --git a/tools/pinning/oldest/pyproject.toml b/tools/pinning/oldest/pyproject.toml
index ed9ac4619..38fb96d89 100644
--- a/tools/pinning/oldest/pyproject.toml
+++ b/tools/pinning/oldest/pyproject.toml
@@ -55,7 +55,7 @@ configobj = "5.0.6"
 cryptography = "3.2.1"
 distro = "1.0.1"
 dns-lexicon = "3.15.1"
-dnspython = "1.15.0"
+dnspython = "2.6.1"
 funcsigs = "0.4"
 google-api-python-client = "1.6.5"
 google-auth = "2.16.0"