diff --git a/.github/workflows/build-rasterio.yml b/.github/workflows/build-rasterio.yml
index 1c83596a6976..d70e91e3adc4 100644
--- a/.github/workflows/build-rasterio.yml
+++ b/.github/workflows/build-rasterio.yml
@@ -520,7 +520,11 @@ jobs:
           # test_complex_nodata wraps its call in warnings.simplefilter('error'), turning
           # that warning into a hard failure on every interpreter (gotcha 25: pin the
           # floating test dep below the breaking release rather than patch the test).
-          CIBW_TEST_REQUIRES: numpy aiohttp attrs pytest click mock boto3 packaging affine<3.0.1 hypothesis fsspec s3fs requests
+          # s3fs takes upstream's requirements-dev.txt floor: unbounded, pip backtracks it to
+          # 0.4.2 whenever the newest boto3 outruns aiobotocore's botocore cap, and fsspec's
+          # "s3fs is very old" UserWarning then fails test_fsspec_s3_openfile under
+          # filterwarnings=error.
+          CIBW_TEST_REQUIRES: numpy aiohttp attrs pytest click mock boto3 packaging affine<3.0.1 hypothesis fsspec s3fs>=2025.9.0 requests
           # hypothesis became a Rust extension in 6.156 and PyPI ships no cp314t riscv64
           # wheel for its current release, only cp310-abi3 (incompatible with free
           # threading); pip's default resolver still prefers the newest version's sdist
diff --git a/docs/packages/rasterio.yaml b/docs/packages/rasterio.yaml
index 6164aeee76b9..17c7c8b4c6ae 100644
--- a/docs/packages/rasterio.yaml
+++ b/docs/packages/rasterio.yaml
@@ -24,3 +24,4 @@ versions:
   - filename: rasterio-1.5.1-cp315-cp315t-manylinux_2_39_riscv64.whl
     sha256: 0b9b369903c93bf11df707da0f3cb4e8decb9c2afc941ffd0437bb1158de211f
     requires-python: '>=3.12'
+- version: 1.5.2
diff --git a/patches/rasterio/1.5.2/0001-pyproject-ship-licence-files-of-bundled-libraries.patch b/patches/rasterio/1.5.2/0001-pyproject-ship-licence-files-of-bundled-libraries.patch
new file mode 100644
index 000000000000..0604c43fefb6
--- /dev/null
+++ b/patches/rasterio/1.5.2/0001-pyproject-ship-licence-files-of-bundled-libraries.patch
@@ -0,0 +1,38 @@
+From 43d244bb7ee43150c76547da572deba4cfba2bc2 Mon Sep 17 00:00:00 2001
+From: Ludovic Henry <git@ludovic.dev>
+Date: Fri, 4 Sep 2026 10:24:14 +0200
+Subject: [PATCH] pyproject: ship licence files of bundled libraries
+
+The riscv64 wheel bundles GDAL and its transitive dependency closure
+(GEOS, PROJ, SpatiaLite, libcurl, sqlite, libtiff, expat, libxml2,
+openssl, and more), compiled from source in the manylinux_riscv64 image
+since GDAL has no riscv64 build available another way. auditwheel
+vendors the whole closure's shared libraries into the wheel, but the
+project's explicit license-files list only names its own two files, so
+none of those licences would be packaged.
+
+Extend the list with a glob so any LICENSE_<dep> staged beside the
+project's own LICENSE.txt/AUTHORS.txt is packaged into
+dist-info/licenses/.
+
+Upstream-Status: Inappropriate [glob covers licences generated by our own build image; no other platform vendors this dependency closure]
+---
+ pyproject.toml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/pyproject.toml b/pyproject.toml
+index 16fa4ea..94f1412 100644
+--- a/pyproject.toml
++++ b/pyproject.toml
+@@ -19,7 +19,7 @@ description = "Fast and direct raster I/O for use with NumPy"
+ readme = "README.rst"
+ keywords = ["gis", "raster", "gdal"]
+ license = "BSD-3-Clause"
+-license-files = ["LICENSE.txt", "AUTHORS.txt"]
++license-files = ["LICENSE.txt", "AUTHORS.txt", "LICENSE_*"]
+ classifiers = [
+     "Development Status :: 5 - Production/Stable",
+     "Intended Audience :: Developers",
+-- 
+2.50.1 (Apple Git-155)
+