diff --git a/voice/Cargo.lock b/voice/Cargo.lock
index 9ac5d195..4d84b15b 100644
--- a/voice/Cargo.lock
+++ b/voice/Cargo.lock
@@ -2265,9 +2265,9 @@ dependencies = [
 
 [[package]]
 name = "zeroize"
-version = "1.8.1"
+version = "1.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
 
 [[package]]
 name = "zerotrie"
diff --git a/voice/tts/Cargo.toml b/voice/tts/Cargo.toml
index ac87e13e..0a06e49f 100644
--- a/voice/tts/Cargo.toml
+++ b/voice/tts/Cargo.toml
@@ -22,7 +22,7 @@ piper-rs = "=0.1.2"
 home = "=0.5.9"
 half = "=2.4.1"
 rustls-pki-types = "=1.12.0"
-zeroize = "=1.8.1"
+zeroize = "=1.9.0"
 # Version floors that steer the shared voice/Cargo.lock past the vulnerable
 # transitive crates: ureq >=2.12 pulls rustls-webpki >=0.103.13
 # (clears GHSA-82j2-j2ch-gfr8 et al.) and url >=2.5 pulls idna >=1.0