diff --git a/Cargo.lock b/Cargo.lock
index 3e8ff5ba328..1168b74fb05 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6901,9 +6901,9 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "3.0.0"
+version = "4.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12598812502ed0105f607f941c386f43d441e00148fce9dec3ca5ffb0bde9308"
+checksum = "153a6fff49d264c4babdcfa6b4d534747f520e56e8f0f384f3b808c4b64cc1fd"
 dependencies = [
  "arbitrary",
  "crc32fast",
diff --git a/Cargo.toml b/Cargo.toml
index a976ba5e777..a9cc926b401 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -152,4 +152,4 @@ insta = { version = "=1.43.1", features = ["glob", "json", "redactions"] }
 regex = "=1.11.1"
 sentry = { version = "=0.38.1", features = ["test"] }
 tokio = "=1.45.0"
-zip = { version = "=3.0.0", default-features = false, features = ["deflate"] }
+zip = { version = "=4.0.0", default-features = false, features = ["deflate"] }
diff --git a/crates/crates_io_database_dump/Cargo.toml b/crates/crates_io_database_dump/Cargo.toml
index a59e9864ad0..43a1ddc350e 100644
--- a/crates/crates_io_database_dump/Cargo.toml
+++ b/crates/crates_io_database_dump/Cargo.toml
@@ -18,7 +18,7 @@ tar = "=0.4.44"
 tempfile = "=3.20.0"
 toml = "=0.8.22"
 tracing = "=0.1.41"
-zip = { version = "=3.0.0", default-features = false, features = ["deflate"] }
+zip = { version = "=4.0.0", default-features = false, features = ["deflate"] }
 
 [dev-dependencies]
 crates_io_test_db = { path = "../crates_io_test_db" }