diff --git a/Gemfile b/Gemfile
index e53e079ca..c735b7aa9 100644
--- a/Gemfile
+++ b/Gemfile
@@ -158,6 +158,6 @@ gem "inertia_rails", "~> 3.21"
 
 gem "vite_rails", "~> 3.11"
 
-gem "rubyzip", "~> 3.3", require: false # only used by HeartbeatExportJob
+gem "rubyzip", "~> 3.6", require: false # only used by HeartbeatExportJob
 
 gem "mailkick"
diff --git a/Gemfile.lock b/Gemfile.lock
index 5a913e4dc..6e90b524e 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -501,7 +501,7 @@ GEM
       logger
     ruby_identicon (0.0.6)
       chunky_png (~> 1.4.0)
-    rubyzip (3.5.0)
+    rubyzip (3.6.0)
     sanitize (7.0.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.16.8)
@@ -630,7 +630,7 @@ DEPENDENCIES
   rubocop-rails-omakase
   ruby-vips (~> 2.3)
   ruby_identicon
-  rubyzip (~> 3.3)
+  rubyzip (~> 3.6)
   sentry-rails
   sentry-ruby
   skylight