diff --git a/Cargo.lock b/Cargo.lock
index c2187741535..0a314a65539 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -373,11 +373,13 @@ dependencies = [
 
 [[package]]
 name = "async-compression"
-version = "0.4.27"
+version = "0.4.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddb939d66e4ae03cee6091612804ba446b12878410cfa17f785f4dd67d4014e8"
+checksum = "6448dfb3960f0b038e88c781ead1e7eb7929dfc3a71a1336ec9086c00f6d1e75"
 dependencies = [
  "brotli",
+ "compression-codecs",
+ "compression-core",
  "flate2",
  "futures-core",
  "memchr",
@@ -1235,6 +1237,28 @@ dependencies = [
  "windows-sys 0.59.0",
 ]
 
+[[package]]
+name = "compression-codecs"
+version = "0.4.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46cc6539bf1c592cff488b9f253b30bc0ec50d15407c2cf45e27bd8f308d5905"
+dependencies = [
+ "brotli",
+ "compression-core",
+ "flate2",
+ "futures-core",
+ "memchr",
+ "pin-project-lite",
+ "zstd",
+ "zstd-safe",
+]
+
+[[package]]
+name = "compression-core"
+version = "0.4.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2957e823c15bde7ecf1e8b64e537aa03a6be5fda0e2334e99887669e75b12e01"
+
 [[package]]
 name = "comrak"
 version = "0.40.0"
diff --git a/Cargo.toml b/Cargo.toml
index a51a29456dc..2a894b6593c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -50,7 +50,7 @@ doctest = true
 aes-gcm = { version = "=0.10.3", features = ["std"] }
 anyhow = "=1.0.99"
 astral-tokio-tar = "=0.5.3"
-async-compression = { version = "=0.4.27", default-features = false, features = ["gzip", "tokio"] }
+async-compression = { version = "=0.4.28", default-features = false, features = ["gzip", "tokio"] }
 async-trait = "=0.1.89"
 aws-credential-types = { version = "=1.2.5", features = ["hardcoded-credentials"] }
 aws-ip-ranges = "=0.1376.0"
diff --git a/crates/crates_io_cdn_logs/Cargo.toml b/crates/crates_io_cdn_logs/Cargo.toml
index 435d19911d7..5210cdf984e 100644
--- a/crates/crates_io_cdn_logs/Cargo.toml
+++ b/crates/crates_io_cdn_logs/Cargo.toml
@@ -9,7 +9,7 @@ workspace = true
 
 [dependencies]
 anyhow = "=1.0.99"
-async-compression = { version = "=0.4.27", features = ["gzip", "tokio", "zstd"] }
+async-compression = { version = "=0.4.28", features = ["gzip", "tokio", "zstd"] }
 chrono = { version = "=0.4.41", features = ["serde"] }
 derive_more = { version = "=2.0.1", features = ["deref"] }
 percent-encoding = "=2.3.2"
diff --git a/crates/crates_io_tarball/Cargo.toml b/crates/crates_io_tarball/Cargo.toml
index c4fc253e784..77c7e85cf5e 100644
--- a/crates/crates_io_tarball/Cargo.toml
+++ b/crates/crates_io_tarball/Cargo.toml
@@ -20,7 +20,7 @@ tar = { version = "=0.4.44", optional = true }
 thiserror = "=2.0.16"
 tracing = "=0.1.41"
 tokio = { version = "=1.47.1", features = ["io-util", "macros", "rt-multi-thread"] }
-async-compression = { version = "=0.4.27", default-features = false, features = ["gzip", "tokio"] }
+async-compression = { version = "=0.4.28", default-features = false, features = ["gzip", "tokio"] }
 futures-util = "=0.3.31"
 
 [dev-dependencies]