diff --git a/Cargo.lock b/Cargo.lock
index c0f5283..42f2d7b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1151,9 +1151,9 @@ checksum = "30bde2b3dc3671ae49d8e2e9f044c7c005836e7a023ee57cffa25ab82764bb9e"
 
 [[package]]
 name = "lzma-rust2"
-version = "0.13.0"
+version = "0.15.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c60a23ffb90d527e23192f1246b14746e2f7f071cb84476dd879071696c18a4a"
+checksum = "48172246aa7c3ea28e423295dd1ca2589a24617cc4e588bb8cfe177cb2c54d95"
 dependencies = [
  "crc",
  "sha2",
@@ -2731,9 +2731,9 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "5.1.1"
+version = "7.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f852905151ac8d4d06fdca66520a661c09730a74c6d4e2b0f27b436b382e532"
+checksum = "bdd8a47718a4ee5fe78e07667cd36f3de80e7c2bfe727c7074245ffc7303c037"
 dependencies = [
  "aes",
  "arbitrary",
@@ -2742,6 +2742,7 @@ dependencies = [
  "crc32fast",
  "deflate64",
  "flate2",
+ "generic-array",
  "getrandom 0.3.2",
  "hmac",
  "indexmap",
diff --git a/gitlab-runner/Cargo.toml b/gitlab-runner/Cargo.toml
index e85cbef..3aee7c7 100644
--- a/gitlab-runner/Cargo.toml
+++ b/gitlab-runner/Cargo.toml
@@ -21,7 +21,7 @@ serde = { version = "1.0.200", features = [ "derive" ] }
 serde_json = "1.0.143"
 thiserror = "2.0.11"
 bytes = "1.9.0"
-zip = "5.1.1"
+zip = "7.0.0"
 pin-project = "1.1.10"
 futures = "0.3.15"
 async-trait = "0.1.86"