diff --git a/packages/npm/package-lock.json b/packages/npm/package-lock.json
index 980fe5b1..9281f080 100644
--- a/packages/npm/package-lock.json
+++ b/packages/npm/package-lock.json
@@ -20,7 +20,7 @@
 			},
 			"devDependencies": {
 				"@mscharley/eslint-config": "4.2.23",
-				"@sigstore/rekor-types": "4.0.0",
+				"@sigstore/rekor-types": "5.0.0",
 				"@types/make-fetch-happen": "10.0.4",
 				"@types/node": "24.12.4",
 				"typescript": "5.9.3"
@@ -761,13 +761,13 @@
 			}
 		},
 		"node_modules/@sigstore/rekor-types": {
-			"version": "4.0.0",
-			"resolved": "https://registry.npmjs.org/@sigstore/rekor-types/-/rekor-types-4.0.0.tgz",
-			"integrity": "sha512-QwLHUoMd0pvMYYJjJJizQo3l6VpJWDs/QlvjQhxzDTlUfXtiOxDsZ9+EXVqJar4hV+DUFysQFgST9Qr4u2m/+Q==",
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/@sigstore/rekor-types/-/rekor-types-5.0.0.tgz",
+			"integrity": "sha512-Mxd9OvHXO52bqE/h3YmWbmBGmMl1ihn2HEnjWAE2RjL1qTE2q66rfZhxWDvxEM/NjdBKrKKJ3S/Ot+r1GSShFg==",
 			"dev": true,
 			"license": "Apache-2.0",
 			"engines": {
-				"node": "^20.17.0 || >=22.9.0"
+				"node": "^22.22.2 || ^24.15.0 || >=26.0.0"
 			}
 		},
 		"node_modules/@sigstore/sign": {
diff --git a/packages/npm/package.json b/packages/npm/package.json
index ab33feb4..7941b14f 100644
--- a/packages/npm/package.json
+++ b/packages/npm/package.json
@@ -37,7 +37,7 @@
 	],
 	"devDependencies": {
 		"@mscharley/eslint-config": "4.2.23",
-		"@sigstore/rekor-types": "4.0.0",
+		"@sigstore/rekor-types": "5.0.0",
 		"@types/make-fetch-happen": "10.0.4",
 		"@types/node": "24.12.4",
 		"typescript": "5.9.3"