diff --git a/pyproject.toml b/pyproject.toml
index 897d67cfd7..b68dd8599b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
   "pymdown-extensions>=10.15",
   "pyperscan>=0.3.0",
   "python-magic>=0.4.27",
-  "pyzstd",
+  "pyzstd>0.16.2",
   "rarfile>=4.1",
   "rich>=13.3.5",
   "structlog>=24.1.0",
diff --git a/renovate.json b/renovate.json
index f76f72ed6a..ff556db5c9 100644
--- a/renovate.json
+++ b/renovate.json
@@ -24,6 +24,9 @@
     "enabled": true,
     "description": "opt-in support for nix https://docs.renovatebot.com/modules/manager/nix/#enabling"
   },
+  "pep621": {
+    "rangeStrategy": "update-lockfile"
+  },
   "pre-commit": {
     "enabled": true,
     "description": "opt-in support for pre-commit  https://docs.renovatebot.com/modules/manager/nix/#enabling"
diff --git a/uv.lock b/uv.lock
index e86544752f..46128c4276 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1874,7 +1874,7 @@ requires-dist = [
     { name = "pymdown-extensions", specifier = ">=10.15" },
     { name = "pyperscan", specifier = ">=0.3.0" },
     { name = "python-magic", specifier = ">=0.4.27" },
-    { name = "pyzstd" },
+    { name = "pyzstd", specifier = ">0.16.2" },
     { name = "rarfile", specifier = ">=4.1" },
     { name = "rich", specifier = ">=13.3.5" },
     { name = "structlog", specifier = ">=24.1.0" },