diff --git a/package-lock.json b/package-lock.json
index 1845cc94..9062f6de 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5328,27 +5328,29 @@
       }
     },
     "node_modules/@tufjs/models": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/@tufjs/models/-/models-3.0.1.tgz",
-      "integrity": "sha512-UUYHISyhCU3ZgN8yaear3cGATHb3SMuKHsQ/nVbHXcmnBf+LzQ/cQfhNG+rfaSHgqGKNEm2cOCLVLELStUQ1JA==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@tufjs/models/-/models-4.0.0.tgz",
+      "integrity": "sha512-h5x5ga/hh82COe+GoD4+gKUeV4T3iaYOxqLt41GRKApinPI7DMidhCmNVTjKfhCWFJIGXaFJee07XczdT4jdZQ==",
+      "license": "MIT",
       "dependencies": {
         "@tufjs/canonical-json": "2.0.0",
         "minimatch": "^9.0.5"
       },
       "engines": {
-        "node": "^18.17.0 || >=20.5.0"
+        "node": "^20.17.0 || >=22.9.0"
       }
     },
     "node_modules/@tufjs/repo-mock": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/@tufjs/repo-mock/-/repo-mock-3.0.1.tgz",
-      "integrity": "sha512-9as4Bg7trZ06+qQ4aqPcYWY0TUYuewG0e7kPsrAVokdBJh35TTqPR68o9L8ojyJcBM5xgSIDvLy0XPM1RCZdJA==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@tufjs/repo-mock/-/repo-mock-4.0.0.tgz",
+      "integrity": "sha512-Z/w5mFJC26ZbrGYduDkWzGCxui9rSXkJqWROSOhaLk8s+PcVAv/W03nOBqpcfbgMVLYVYtMYaopoGSuC1mbNsQ==",
+      "license": "MIT",
       "dependencies": {
-        "@tufjs/models": "3.0.1",
+        "@tufjs/models": "4.0.0",
         "nock": "^13.5.5"
       },
       "engines": {
-        "node": "^18.17.0 || >=20.5.0"
+        "node": "^20.17.0 || >=22.9.0"
       }
     },
     "node_modules/@tybys/wasm-util": {
@@ -12510,19 +12512,6 @@
         "node": "^20.17.0 || >=22.9.0"
       }
     },
-    "node_modules/tuf-js/node_modules/@tufjs/models": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/@tufjs/models/-/models-4.0.0.tgz",
-      "integrity": "sha512-h5x5ga/hh82COe+GoD4+gKUeV4T3iaYOxqLt41GRKApinPI7DMidhCmNVTjKfhCWFJIGXaFJee07XczdT4jdZQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@tufjs/canonical-json": "2.0.0",
-        "minimatch": "^9.0.5"
-      },
-      "engines": {
-        "node": "^20.17.0 || >=22.9.0"
-      }
-    },
     "node_modules/tunnel-agent": {
       "version": "0.6.0",
       "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
@@ -13088,7 +13077,7 @@
         "@sigstore/jest": "^0.0.0",
         "@sigstore/mock": "^0.11.0",
         "@sigstore/rekor-types": "^4.0.0",
-        "@tufjs/repo-mock": "^3.0.1",
+        "@tufjs/repo-mock": "^4.0.0",
         "@types/make-fetch-happen": "^10.0.4"
       },
       "engines": {
@@ -13174,7 +13163,7 @@
         "@oclif/color": "^1.0.13",
         "@oclif/core": "^4",
         "@sigstore/mock": "^0.11.0",
-        "@tufjs/repo-mock": "^3.0.1",
+        "@tufjs/repo-mock": "^4.0.0",
         "express": "5.1.0"
       },
       "bin": {
@@ -13249,7 +13238,7 @@
       },
       "devDependencies": {
         "@sigstore/jest": "^0.0.0",
-        "@tufjs/repo-mock": "^3.0.1",
+        "@tufjs/repo-mock": "^4.0.0",
         "@types/make-fetch-happen": "^10.0.4"
       },
       "engines": {
diff --git a/packages/client/package.json b/packages/client/package.json
index b036dc78..1f46c26e 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -30,7 +30,7 @@
     "@sigstore/rekor-types": "^4.0.0",
     "@sigstore/jest": "^0.0.0",
     "@sigstore/mock": "^0.11.0",
-    "@tufjs/repo-mock": "^3.0.1",
+    "@tufjs/repo-mock": "^4.0.0",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
diff --git a/packages/mock-server/package.json b/packages/mock-server/package.json
index 0d989ce8..67ab6e95 100644
--- a/packages/mock-server/package.json
+++ b/packages/mock-server/package.json
@@ -21,7 +21,7 @@
     "@oclif/color": "^1.0.13",
     "@oclif/core": "^4",
     "@sigstore/mock": "^0.11.0",
-    "@tufjs/repo-mock": "^3.0.1",
+    "@tufjs/repo-mock": "^4.0.0",
     "express": "5.1.0"
   },
   "devDependencies": {
diff --git a/packages/tuf/package.json b/packages/tuf/package.json
index 42dad938..479dd1cb 100644
--- a/packages/tuf/package.json
+++ b/packages/tuf/package.json
@@ -28,7 +28,7 @@
   },
   "devDependencies": {
     "@sigstore/jest": "^0.0.0",
-    "@tufjs/repo-mock": "^3.0.1",
+    "@tufjs/repo-mock": "^4.0.0",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {