diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4347951..73c28da 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,7 +6,7 @@ settings:
 
 overrides:
   vite@>=8.0.0 <8.0.16: 8.0.16
-  oxfmt>tinypool: 2.1.2
+  oxfmt>tinypool: 2.2.0
 
 importers:
 
@@ -1569,8 +1569,8 @@ packages:
     resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
     engines: {node: '>=12.0.0'}
 
-  tinypool@2.1.2:
-    resolution: {integrity: sha512-9YodfrxS9g9IbFr/KOjE5bAeJ0p61n3bW6mqvy0jtoeKd1kTW1Cxm0oulm6KX2lyM9Gl6WIe8nEbY7LWv5ZJww==}
+  tinypool@2.2.0:
+    resolution: {integrity: sha512-jBrmx4lYmaC9k/mgPbylxs7kBUxHtD8256up+HjLaDFfXScKJQyil+SWXSvhAtT7XHo+yTVlpB81PGmHP8oLSQ==}
     engines: {node: ^20.0.0 || >=22.0.0}
 
   tinyrainbow@3.1.0:
@@ -2951,7 +2951,7 @@ snapshots:
 
   oxfmt@0.45.0:
     dependencies:
-      tinypool: 2.1.2
+      tinypool: 2.2.0
     optionalDependencies:
       '@oxfmt/binding-android-arm-eabi': 0.45.0
       '@oxfmt/binding-android-arm64': 0.45.0
@@ -3124,7 +3124,7 @@ snapshots:
       fdir: 6.5.0(picomatch@4.0.7)
       picomatch: 4.0.7
 
-  tinypool@2.1.2: {}
+  tinypool@2.2.0: {}
 
   tinyrainbow@3.1.0: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 02f7d08..5fb6352 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -7,7 +7,7 @@ overrides:
   # Exclude the affected Vite 8 range from Vitest's peer resolution.
   "vite@>=8.0.0 <8.0.16": 8.0.16
   # oxfmt 0.45.0 pins tinypool 2.1.0; 2.1.2 fixes the advisory.
-  "oxfmt>tinypool": 2.1.2
+  "oxfmt>tinypool": 2.2.0
 
 auditConfig:
   ignoreCves: []