diff --git a/flake.nix b/flake.nix
index c490687..3a622b7 100644
--- a/flake.nix
+++ b/flake.nix
@@ -25,7 +25,7 @@
 
         npmDeps = pkgs.fetchNpmDeps {
           src = ./.;
-          hash = "sha256-wmQI0GrzNmMEVnnVxS6V4hKrVfNqsJ/4WBulnsOeGEw=";
+          hash = "sha256-fXg5/SDLzhm+IdEVBYh4aDo7xgq59LB8cHP5vqaWZgs=";
         };
 
         # Build TypeScript + WASM assets with the native toolchain. These are
diff --git a/package-lock.json b/package-lock.json
index 5a48661..e1efc2d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -21,7 +21,7 @@
         "@playwright/test": "^1.59.1",
         "@types/adm-zip": "^0.5.8",
         "@types/node": "^25.9.3",
-        "adm-zip": "^0.5.18",
+        "adm-zip": "^0.6.0",
         "esbuild": "^0.28.1",
         "typescript": "^6.0.3"
       }
@@ -851,13 +851,13 @@
       "license": "LGPL-2.1+"
     },
     "node_modules/adm-zip": {
-      "version": "0.5.18",
-      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.5.18.tgz",
-      "integrity": "sha512-ufJnssQGbxzLNS1Ho9bCtX4rQKCCvoVuDLHoJyc3F9dOGDB4BkWs2Ci0kv53lqocAEQ/Cbi+I2XCsNYGqVYqng==",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.6.0.tgz",
+      "integrity": "sha512-XleryMhbuksdKtofnWZ9Sk+4CUTbms4Mb/EU32SZwToAyZ5RgVos/ki8n+yr0LWHOGKuakbXTuuYNHLQjhddgg==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=12.0"
+        "node": ">=14.0"
       }
     },
     "node_modules/age-encryption": {
diff --git a/package.json b/package.json
index c9b6a2c..73be610 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "@playwright/test": "^1.59.1",
     "@types/adm-zip": "^0.5.8",
     "@types/node": "^25.9.3",
-    "adm-zip": "^0.5.18",
+    "adm-zip": "^0.6.0",
     "esbuild": "^0.28.1",
     "typescript": "^6.0.3"
   }