diff --git a/package-lock.json b/package-lock.json
index 402f5e3..ec3c04a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "@helia/http": "^2.0.5",
         "@helia/interface": "^5.2.1",
         "@helia/routers": "^3.0.1",
-        "@helia/verified-fetch": "^2.6.4",
+        "@helia/verified-fetch": "^2.6.18",
         "@libp2p/bootstrap": "^11.0.32",
         "@libp2p/circuit-relay-v2": "^3.2.8",
         "@libp2p/identify": "^3.0.27",
@@ -3533,9 +3533,9 @@
       }
     },
     "node_modules/@helia/verified-fetch": {
-      "version": "2.6.17",
-      "resolved": "https://registry.npmjs.org/@helia/verified-fetch/-/verified-fetch-2.6.17.tgz",
-      "integrity": "sha512-FMZ65GN2ad61+kRPG+coSRXmg2GOhK2ku/y7o9hOnuQXMBtM7NIExIVMpFoljlyE+AHgkSnVie6Fc64oIU9oog==",
+      "version": "2.6.18",
+      "resolved": "https://registry.npmjs.org/@helia/verified-fetch/-/verified-fetch-2.6.18.tgz",
+      "integrity": "sha512-wa5/F3fZlUsu3RqrO58/o1qFSzlc+Qk5uJJgHv0BSN35KN0X6lNgNJx+YFbrtk/2o/yF140fYrtGfZrHBJlxmg==",
       "license": "Apache-2.0 OR MIT",
       "dependencies": {
         "@helia/block-brokers": "^4.2.1",
@@ -3547,17 +3547,16 @@
         "@helia/unixfs": "^5.0.2",
         "@ipld/dag-cbor": "^9.2.3",
         "@ipld/dag-json": "^10.2.4",
-        "@ipld/dag-pb": "^4.1.4",
-        "@libp2p/interface": "^2.9.0",
-        "@libp2p/kad-dht": "^15.0.2",
-        "@libp2p/logger": "^5.1.15",
-        "@libp2p/peer-id": "^5.1.2",
-        "@libp2p/webrtc": "^5.2.12",
-        "@libp2p/websockets": "^9.2.10",
+        "@ipld/dag-pb": "^4.1.5",
+        "@libp2p/interface": "^2.10.1",
+        "@libp2p/kad-dht": "^15.1.1",
+        "@libp2p/logger": "^5.1.17",
+        "@libp2p/peer-id": "^5.1.4",
+        "@libp2p/webrtc": "^5.2.14",
+        "@libp2p/websockets": "^9.2.12",
         "@multiformats/dns": "^1.0.6",
-        "cborg": "^4.2.10",
+        "cborg": "^4.2.11",
         "file-type": "^20.5.0",
-        "hashlru": "^2.3.0",
         "helia": "^5.4.1",
         "interface-blockstore": "^5.3.1",
         "interface-datastore": "^8.3.1",
@@ -3567,13 +3566,25 @@
         "it-pipe": "^3.0.1",
         "it-tar": "^6.0.5",
         "it-to-browser-readablestream": "^2.0.11",
-        "libp2p": "^2.8.5",
-        "lru-cache": "^11.1.0",
-        "multiformats": "^13.3.3",
+        "libp2p": "^2.8.7",
+        "multiformats": "^13.3.6",
         "progress-events": "^1.0.1",
+        "quick-lru": "^7.0.1",
         "uint8arrays": "^5.1.0"
       }
     },
+    "node_modules/@helia/verified-fetch/node_modules/quick-lru": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/quick-lru/-/quick-lru-7.0.1.tgz",
+      "integrity": "sha512-kLjThirJMkWKutUKbZ8ViqFc09tDQhlbQo2MNuVeLWbRauqYP96Sm6nzlQ24F0HFjUNZ4i9+AgldJ9H6DZXi7g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/@humanfs/core": {
       "version": "0.19.1",
       "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
@@ -20471,6 +20482,7 @@
       "version": "11.1.0",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.1.0.tgz",
       "integrity": "sha512-QIXZUBJUx+2zHUdQujWejBkcD9+cs94tLn0+YL8UrCh+D5sCXZ4c7LaEH48pNwRY3MLDgqUFyhlCyjJPf1WP0A==",
+      "dev": true,
       "license": "ISC",
       "engines": {
         "node": "20 || >=22"
diff --git a/package.json b/package.json
index d256a94..fc74075 100644
--- a/package.json
+++ b/package.json
@@ -75,7 +75,7 @@
     "@helia/http": "^2.0.5",
     "@helia/interface": "^5.2.1",
     "@helia/routers": "^3.0.1",
-    "@helia/verified-fetch": "^2.6.4",
+    "@helia/verified-fetch": "^2.6.18",
     "@libp2p/bootstrap": "^11.0.32",
     "@libp2p/circuit-relay-v2": "^3.2.8",
     "@libp2p/identify": "^3.0.27",