diff --git a/Cargo.lock b/Cargo.lock
index c3a2afc..184f25a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -136,7 +136,7 @@ dependencies = [
  "addr2line 0.25.1",
  "cfg-if 1.0.4",
  "libc",
- "miniz_oxide",
+ "miniz_oxide 0.8.9",
  "object 0.37.3",
  "rustc-demangle",
  "windows-link",
@@ -2064,6 +2064,15 @@ dependencies = [
  "adler2",
 ]
 
+[[package]]
+name = "miniz_oxide"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b63fbc4a50860e98e7b2aa7804ded1db5cbc3aff9193adaff57a6931bf7c4b4c"
+dependencies = [
+ "adler2",
+]
+
 [[package]]
 name = "mintex"
 version = "0.1.4"
@@ -3887,7 +3896,7 @@ dependencies = [
 name = "stringcheese-tokenizer-tiktoken"
 version = "0.1.0"
 dependencies = [
- "miniz_oxide",
+ "miniz_oxide 0.9.1",
  "proptest",
  "stringcheese-tokenizer",
  "stringcheese-tokenizer-hf",
diff --git a/crates/stringcheese-tokenizer-tiktoken/Cargo.toml b/crates/stringcheese-tokenizer-tiktoken/Cargo.toml
index 9664ce0..409e539 100644
--- a/crates/stringcheese-tokenizer-tiktoken/Cargo.toml
+++ b/crates/stringcheese-tokenizer-tiktoken/Cargo.toml
@@ -42,13 +42,13 @@ stringcheese-tokenizer-hf = { workspace = true, features = ["std"] }
 # Pure-Rust deflate decoder. `miniz_oxide` is the same decoder Rust's
 # `backtrace` uses and needs no C shim, which is what makes it work on
 # every `wasm32-*` target the workspace ships to.
-miniz_oxide = { version = "0.8", default-features = false, features = ["with-alloc"] }
+miniz_oxide = { version = "0.9", default-features = false, features = ["with-alloc"] }
 
 [build-dependencies]
 # The build script runs on the host toolchain and produces the embedded
 # SCUD-lite packs. Same crate as the runtime, but here it's used for its
 # `deflate_to_vec` encoder path.
-miniz_oxide = { version = "0.8", default-features = false, features = ["with-alloc"] }
+miniz_oxide = { version = "0.9", default-features = false, features = ["with-alloc"] }
 
 
 # `proptest` gated off wasm — its transitive `wait-timeout` dep is