diff --git a/package-lock.json b/package-lock.json
index 0a8e7a4..a390474 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "commander": "^10.0.0",
         "handlebars": "^4.7.7",
         "rimraf": "^4.1.0",
-        "tar-fs": "^2.1.1"
+        "tar-fs": "^2.1.4"
       },
       "bin": {
         "speculate": "bin/speculate.js"
@@ -26,7 +26,7 @@
         "sinon": "^21.0.0"
       },
       "engines": {
-        "node": ">=12.22.0"
+        "node": ">=22.18.0"
       }
     },
     "node_modules/@babel/code-frame": {
@@ -6179,9 +6179,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.1.tgz",
-      "integrity": "sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng==",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
       "dependencies": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
@@ -10965,9 +10965,9 @@
       "dev": true
     },
     "tar-fs": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.1.tgz",
-      "integrity": "sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng==",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
       "requires": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
diff --git a/package.json b/package.json
index 020bbae..5a01354 100644
--- a/package.json
+++ b/package.json
@@ -34,7 +34,7 @@
     "commander": "^10.0.0",
     "handlebars": "^4.7.7",
     "rimraf": "^4.1.0",
-    "tar-fs": "^2.1.1"
+    "tar-fs": "^2.1.4"
   },
   "eslintConfig": {
     "extends": "iplayer",