diff --git a/Cargo.lock b/Cargo.lock
index 0d69370..b6b5a2b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5925,9 +5925,9 @@ dependencies = [
 
 [[package]]
 name = "zip"
-version = "8.6.0"
+version = "9.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b"
+checksum = "711e8c9646791c49b7eb799a19c4ae70a9b8372ddc6a1fa4778defd1e2aa5d5e"
 dependencies = [
  "crc32fast",
  "flate2",
diff --git a/crates/rusty2600-frontend/Cargo.toml b/crates/rusty2600-frontend/Cargo.toml
index 365742f..2c167d8 100644
--- a/crates/rusty2600-frontend/Cargo.toml
+++ b/crates/rusty2600-frontend/Cargo.toml
@@ -175,7 +175,7 @@ toml = "1.1"
 # bzip2/lzma/zstd/xz/aes-crypto (unneeded codecs/encryption that would only
 # bloat the native binary and the wasm bundle for no benefit — ROM zips are
 # plain Deflate or Store).
-zip = { version = "8", default-features = false, features = ["deflate"] }
+zip = { version = "9", default-features = false, features = ["deflate"] }
 
 # Already transitive deps of wgpu; direct here is free.
 pollster = "1.0"