diff --git a/package-lock.json b/package-lock.json
index 14ba9a45..5f828929 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "@types/node": "^24.0.13",
         "eslint": "^9.31.0",
         "jest": "^30.0.4",
-        "nock": "^13.5.5",
+        "nock": "^14.0.9",
         "prettier": "^3.6.2",
         "ts-jest": "^29.4.0",
         "typescript": "^5.8.3",
@@ -3962,6 +3962,22 @@
         "node": ">=6 <7 || >=8"
       }
     },
+    "node_modules/@mswjs/interceptors": {
+      "version": "0.39.5",
+      "resolved": "https://registry.npmjs.org/@mswjs/interceptors/-/interceptors-0.39.5.tgz",
+      "integrity": "sha512-B9nHSJYtsv79uo7QdkZ/b/WoKm20IkVSmTc/WCKarmDtFwM0dRx2ouEniqwNkzCSLn3fydzKmnMzjtfdOWt3VQ==",
+      "dependencies": {
+        "@open-draft/deferred-promise": "^2.2.0",
+        "@open-draft/logger": "^0.3.0",
+        "@open-draft/until": "^2.0.0",
+        "is-node-process": "^1.2.0",
+        "outvariant": "^1.4.3",
+        "strict-event-emitter": "^0.5.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@napi-rs/wasm-runtime": {
       "version": "0.2.11",
       "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.11.tgz",
@@ -4199,6 +4215,25 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/@open-draft/deferred-promise": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@open-draft/deferred-promise/-/deferred-promise-2.2.0.tgz",
+      "integrity": "sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA=="
+    },
+    "node_modules/@open-draft/logger": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/@open-draft/logger/-/logger-0.3.0.tgz",
+      "integrity": "sha512-X2g45fzhxH238HKO4xbSr7+wBS8Fvw6ixhTDuvLd5mqh6bJJCFAPwU9mPDxbcrRtfxv4u5IHCEH77BmxvXmmxQ==",
+      "dependencies": {
+        "is-node-process": "^1.2.0",
+        "outvariant": "^1.4.0"
+      }
+    },
+    "node_modules/@open-draft/until": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/@open-draft/until/-/until-2.1.0.tgz",
+      "integrity": "sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg=="
+    },
     "node_modules/@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -7874,6 +7909,11 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/is-node-process": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/is-node-process/-/is-node-process-1.2.0.tgz",
+      "integrity": "sha512-Vg4o6/fqPxIjtxgUH5QLJhwZ7gW5diGCVlXpuUfELC62CuxM1iHcRe51f2W1FDy04Ai4KJkagKjx3XaqyfRKXw=="
+    },
     "node_modules/is-number": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
@@ -9318,16 +9358,16 @@
       }
     },
     "node_modules/nock": {
-      "version": "13.5.5",
-      "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.5.tgz",
-      "integrity": "sha512-XKYnqUrCwXC8DGG1xX4YH5yNIrlh9c065uaMZZHUoeUUINTOyt+x/G+ezYk0Ft6ExSREVIs+qBJDK503viTfFA==",
+      "version": "14.0.9",
+      "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.9.tgz",
+      "integrity": "sha512-aVIPgW9WVyb3XPCqfrwETc+hazxzgt8/QvARHAhC6BYHtTsZONUjlXoIB8EGmwqUBkKvOew4yqkGRBmwctdCrw==",
       "dependencies": {
-        "debug": "^4.1.0",
+        "@mswjs/interceptors": "^0.39.5",
         "json-stringify-safe": "^5.0.1",
         "propagate": "^2.0.0"
       },
       "engines": {
-        "node": ">= 10.13"
+        "node": ">=18.20.0 <20 || >=20.12.1"
       }
     },
     "node_modules/node-int64": {
@@ -9532,6 +9572,11 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/outvariant": {
+      "version": "1.4.3",
+      "resolved": "https://registry.npmjs.org/outvariant/-/outvariant-1.4.3.tgz",
+      "integrity": "sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA=="
+    },
     "node_modules/p-cancelable": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-3.0.0.tgz",
@@ -10680,6 +10725,11 @@
         "node": ">=8"
       }
     },
+    "node_modules/strict-event-emitter": {
+      "version": "0.5.1",
+      "resolved": "https://registry.npmjs.org/strict-event-emitter/-/strict-event-emitter-0.5.1.tgz",
+      "integrity": "sha512-vMgjE/GGEPEFnhFub6pa4FmJBRBVOLpIII2hvCZ8Kzb7K0hlHo7mQv6xYrBvCL2LtAIBwFUK8wvuJgTVSQ5MFQ=="
+    },
     "node_modules/string-length": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/string-length/-/string-length-4.0.2.tgz",
@@ -11534,14 +11584,14 @@
     },
     "packages/cli": {
       "name": "@tufjs/cli",
-      "version": "0.3.1",
+      "version": "0.4.0",
       "license": "MIT",
       "dependencies": {
         "@oclif/color": "^1.0.13",
         "@oclif/core": "^4",
         "@oclif/plugin-help": "^6",
         "make-fetch-happen": "^15.0.0",
-        "tuf-js": "3.1.0"
+        "tuf-js": "4.0.0"
       },
       "bin": {
         "tuf": "bin/run"
@@ -11558,15 +11608,15 @@
     },
     "packages/client": {
       "name": "tuf-js",
-      "version": "3.1.0",
+      "version": "4.0.0",
       "license": "MIT",
       "dependencies": {
-        "@tufjs/models": "3.0.1",
+        "@tufjs/models": "4.0.0",
         "debug": "^4.4.1",
         "make-fetch-happen": "^15.0.0"
       },
       "devDependencies": {
-        "@tufjs/repo-mock": "3.0.1",
+        "@tufjs/repo-mock": "4.0.0",
         "@types/debug": "^4.1.12",
         "@types/make-fetch-happen": "^10.0.4"
       },
@@ -11576,7 +11626,7 @@
     },
     "packages/models": {
       "name": "@tufjs/models",
-      "version": "3.0.1",
+      "version": "4.0.0",
       "license": "MIT",
       "dependencies": {
         "@tufjs/canonical-json": "2.0.0",
@@ -11588,11 +11638,11 @@
     },
     "packages/repo-mock": {
       "name": "@tufjs/repo-mock",
-      "version": "3.0.1",
+      "version": "4.0.0",
       "license": "MIT",
       "dependencies": {
-        "@tufjs/models": "3.0.1",
-        "nock": "^13.5.5"
+        "@tufjs/models": "4.0.0",
+        "nock": "^14.0.9"
       },
       "engines": {
         "node": "^20.17.0 || >=22.9.0"
@@ -14495,6 +14545,19 @@
         }
       }
     },
+    "@mswjs/interceptors": {
+      "version": "0.39.5",
+      "resolved": "https://registry.npmjs.org/@mswjs/interceptors/-/interceptors-0.39.5.tgz",
+      "integrity": "sha512-B9nHSJYtsv79uo7QdkZ/b/WoKm20IkVSmTc/WCKarmDtFwM0dRx2ouEniqwNkzCSLn3fydzKmnMzjtfdOWt3VQ==",
+      "requires": {
+        "@open-draft/deferred-promise": "^2.2.0",
+        "@open-draft/logger": "^0.3.0",
+        "@open-draft/until": "^2.0.0",
+        "is-node-process": "^1.2.0",
+        "outvariant": "^1.4.3",
+        "strict-event-emitter": "^0.5.1"
+      }
+    },
     "@napi-rs/wasm-runtime": {
       "version": "0.2.11",
       "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.11.tgz",
@@ -14676,6 +14739,25 @@
         "registry-auth-token": "^5.1.0"
       }
     },
+    "@open-draft/deferred-promise": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@open-draft/deferred-promise/-/deferred-promise-2.2.0.tgz",
+      "integrity": "sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA=="
+    },
+    "@open-draft/logger": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/@open-draft/logger/-/logger-0.3.0.tgz",
+      "integrity": "sha512-X2g45fzhxH238HKO4xbSr7+wBS8Fvw6ixhTDuvLd5mqh6bJJCFAPwU9mPDxbcrRtfxv4u5IHCEH77BmxvXmmxQ==",
+      "requires": {
+        "is-node-process": "^1.2.0",
+        "outvariant": "^1.4.0"
+      }
+    },
+    "@open-draft/until": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/@open-draft/until/-/until-2.1.0.tgz",
+      "integrity": "sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg=="
+    },
     "@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -15342,7 +15424,7 @@
         "oclif": "^4",
         "shx": "^0.4.0",
         "tslib": "^2.8.1",
-        "tuf-js": "3.1.0"
+        "tuf-js": "4.0.0"
       }
     },
     "@tufjs/models": {
@@ -15355,8 +15437,8 @@
     "@tufjs/repo-mock": {
       "version": "file:packages/repo-mock",
       "requires": {
-        "@tufjs/models": "3.0.1",
-        "nock": "^13.5.5"
+        "@tufjs/models": "4.0.0",
+        "nock": "^14.0.9"
       }
     },
     "@tybys/wasm-util": {
@@ -17288,6 +17370,11 @@
         "is-extglob": "^2.1.1"
       }
     },
+    "is-node-process": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/is-node-process/-/is-node-process-1.2.0.tgz",
+      "integrity": "sha512-Vg4o6/fqPxIjtxgUH5QLJhwZ7gW5diGCVlXpuUfELC62CuxM1iHcRe51f2W1FDy04Ai4KJkagKjx3XaqyfRKXw=="
+    },
     "is-number": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
@@ -18343,11 +18430,11 @@
       }
     },
     "nock": {
-      "version": "13.5.5",
-      "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.5.tgz",
-      "integrity": "sha512-XKYnqUrCwXC8DGG1xX4YH5yNIrlh9c065uaMZZHUoeUUINTOyt+x/G+ezYk0Ft6ExSREVIs+qBJDK503viTfFA==",
+      "version": "14.0.9",
+      "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.9.tgz",
+      "integrity": "sha512-aVIPgW9WVyb3XPCqfrwETc+hazxzgt8/QvARHAhC6BYHtTsZONUjlXoIB8EGmwqUBkKvOew4yqkGRBmwctdCrw==",
       "requires": {
-        "debug": "^4.1.0",
+        "@mswjs/interceptors": "^0.39.5",
         "json-stringify-safe": "^5.0.1",
         "propagate": "^2.0.0"
       }
@@ -18503,6 +18590,11 @@
       "integrity": "sha512-/jHxFIzoMXdqPzTaCpFzAAWhpkSjZPF4Vsn6jAfNpmbH/ymsmd7Qc6VE9BGn0L6YMj6uwpQLxCECpus4ukKS9Q==",
       "dev": true
     },
+    "outvariant": {
+      "version": "1.4.3",
+      "resolved": "https://registry.npmjs.org/outvariant/-/outvariant-1.4.3.tgz",
+      "integrity": "sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA=="
+    },
     "p-cancelable": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-3.0.0.tgz",
@@ -19271,6 +19363,11 @@
         }
       }
     },
+    "strict-event-emitter": {
+      "version": "0.5.1",
+      "resolved": "https://registry.npmjs.org/strict-event-emitter/-/strict-event-emitter-0.5.1.tgz",
+      "integrity": "sha512-vMgjE/GGEPEFnhFub6pa4FmJBRBVOLpIII2hvCZ8Kzb7K0hlHo7mQv6xYrBvCL2LtAIBwFUK8wvuJgTVSQ5MFQ=="
+    },
     "string-length": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/string-length/-/string-length-4.0.2.tgz",
@@ -19525,8 +19622,8 @@
     "tuf-js": {
       "version": "file:packages/client",
       "requires": {
-        "@tufjs/models": "3.0.1",
-        "@tufjs/repo-mock": "3.0.1",
+        "@tufjs/models": "4.0.0",
+        "@tufjs/repo-mock": "4.0.0",
         "@types/debug": "^4.1.12",
         "@types/make-fetch-happen": "^10.0.4",
         "debug": "^4.4.1",
diff --git a/package.json b/package.json
index aac4920e..46365b49 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@types/node": "^24.0.13",
     "eslint": "^9.31.0",
     "jest": "^30.0.4",
-    "nock": "^13.5.5",
+    "nock": "^14.0.9",
     "prettier": "^3.6.2",
     "ts-jest": "^29.4.0",
     "typescript": "^5.8.3",
diff --git a/packages/repo-mock/package.json b/packages/repo-mock/package.json
index ccfcaaf5..70083b9b 100644
--- a/packages/repo-mock/package.json
+++ b/packages/repo-mock/package.json
@@ -29,7 +29,7 @@
   "homepage": "https://github.com/theupdateframework/tuf-js/tree/main/packages/repo-mock#readme",
   "dependencies": {
     "@tufjs/models": "4.0.0",
-    "nock": "^13.5.5"
+    "nock": "^14.0.9"
   },
   "engines": {
     "node": "^20.17.0 || >=22.9.0"