diff --git a/Cargo.lock b/Cargo.lock
index 90ceef2..8e7cbec 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -79,15 +79,6 @@ version = "1.0.102"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
-[[package]]
-name = "arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
-dependencies = [
- "derive_arbitrary",
-]
-
 [[package]]
 name = "arrayvec"
 version = "0.7.6"
@@ -229,7 +220,7 @@ dependencies = [
  "uuid",
  "walkdir",
  "wiremock",
- "zip 2.4.2",
+ "zip",
  "zstd",
 ]
 
@@ -363,12 +354,6 @@ dependencies = [
  "cfg-if",
 ]
 
-[[package]]
-name = "crossbeam-utils"
-version = "0.8.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
-
 [[package]]
 name = "crypto-common"
 version = "0.1.7"
@@ -413,17 +398,6 @@ version = "0.5.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
 
-[[package]]
-name = "derive_arbitrary"
-version = "1.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
 [[package]]
 name = "difflib"
 version = "0.4.0"
@@ -2056,7 +2030,7 @@ dependencies = [
  "symbolic-ppdb",
  "thiserror 2.0.18",
  "wasmparser 0.243.0",
- "zip 7.2.0",
+ "zip",
  "zstd",
 ]
 
@@ -3102,24 +3076,6 @@ dependencies = [
  "syn",
 ]
 
-[[package]]
-name = "zip"
-version = "2.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fabe6324e908f85a1c52063ce7aa26b68dcb7eb6dbc83a2d148403c9bc3eba50"
-dependencies = [
- "arbitrary",
- "crc32fast",
- "crossbeam-utils",
- "displaydoc",
- "flate2",
- "indexmap",
- "memchr",
- "thiserror 2.0.18",
- "zopfli",
- "zstd",
-]
-
 [[package]]
 name = "zip"
 version = "7.2.0"
@@ -3132,6 +3088,7 @@ dependencies = [
  "memchr",
  "typed-path",
  "zopfli",
+ "zstd",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index dcb5eda..e087c67 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -88,7 +88,7 @@ plist = "1"
 
 # Compression — zstd is the wire format (level 9–11 typical); zip writes archives with Z_STANDARD entries
 zstd = { version = "0.13", features = ["zstdmt"] }
-zip = { version = "2", default-features = false, features = ["zstd", "deflate"] }
+zip = { version = "7", default-features = false, features = ["zstd", "deflate"] }
 
 # gzip — `.xcactivitylog` build logs are gzip of an SLF0 token stream. Already
 # in the dependency tree via `zip`/`reqwest`, so this direct dep adds no new