diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f20a317cb..37952c425 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,7 +6,7 @@ settings:
 
 overrides:
   react-is: 19.2.7
-  yauzl: 3.3.1
+  yauzl: 3.4.0
   cross-spawn: 7.0.6
   got: 11.8.6
   electron: 42.4.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 81c56c50d..5574538f8 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -12,7 +12,7 @@ overrides:
   # Temporary workaround for electron/electron#51619.
   # Electron installs can miss `path.txt` on Node 24.16+ until the upstream
   # yauzl fix is picked up. Remove this once Electron ships a proper fix.
-  yauzl: '3.3.1'
+  yauzl: '3.4.0'
   # Force patched versions of transitive dev-tooling deps pulled in by
   # react-devtools (old electron/got/cross-spawn) so they don't trip security
   # scanners. None of these ship in the packaged app.