diff --git a/Cargo.lock b/Cargo.lock
index 22e7115..c88987f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -726,7 +726,7 @@ dependencies = [
  "serde",
  "serde_json",
  "thiserror",
- "zip 2.4.2",
+ "zip 8.6.0",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index a5fa5c9..e682616 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -42,7 +42,7 @@ docx-rs = { version = "0.4.20", optional = true }
 [dev-dependencies]
 # `.docx` output is a zip container; the tests re-open the produced bytes and
 # assert on the OOXML parts inside.
-zip = { version = "2", default-features = false, features = ["deflate"] }
+zip = { version = "8", default-features = false, features = ["deflate"] }
 # The spec types are a JSON wire contract; the tests assert they round-trip and
 # that unknown keys are rejected.
 serde_json = "1"