diff --git a/bun.lock b/bun.lock
index d3de35c..8f9ce39 100644
--- a/bun.lock
+++ b/bun.lock
@@ -63,7 +63,7 @@
       "name": "@opencode-cockpit/protocol",
       "version": "0.11.1",
       "dependencies": {
-        "zod": "4.6.5",
+        "zod": "4.6.7",
       },
     },
     "packages/review": {
@@ -564,7 +564,7 @@
 
     "yaml": ["yaml@2.9.1", "", { "bin": { "yaml": "bin.mjs" } }, "sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw=="],
 
-    "zod": ["zod@4.6.5", "", {}, "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q=="],
+    "zod": ["zod@4.6.7", "", {}, "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg=="],
 
     "@opencode-ai/plugin/zod": ["zod@4.1.8", "", {}, "sha512-5R1P+WwQqmmMIEACyzSvo4JXHY5WiAFHRMg+zBZKgKS+Q1viRa0C1hmUKtHltoIFKtIdki3pRxkmpP74jnNYHQ=="],
 
diff --git a/packages/protocol/package.json b/packages/protocol/package.json
index f0f89fe..1578a74 100644
--- a/packages/protocol/package.json
+++ b/packages/protocol/package.json
@@ -39,7 +39,7 @@
     "access": "public"
   },
   "dependencies": {
-    "zod": "4.6.5"
+    "zod": "4.6.7"
   },
   "engines": {
     "bun": ">=1.3.5"