diff --git a/estargz/go.mod b/estargz/go.mod
index 0c06749ee..f12879cff 100644
--- a/estargz/go.mod
+++ b/estargz/go.mod
@@ -6,5 +6,5 @@ require (
 	github.com/klauspost/compress v1.17.10
 	github.com/opencontainers/go-digest v1.0.0
 	github.com/vbatts/tar-split v0.11.6
-	golang.org/x/sync v0.8.0
+	golang.org/x/sync v0.9.0
 )
diff --git a/estargz/go.sum b/estargz/go.sum
index e4b8fc458..39e6a686a 100644
--- a/estargz/go.sum
+++ b/estargz/go.sum
@@ -4,5 +4,5 @@ github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
 github.com/vbatts/tar-split v0.11.6 h1:4SjTW5+PU11n6fZenf2IPoV8/tz3AaYHMWjf23envGs=
 github.com/vbatts/tar-split v0.11.6/go.mod h1:dqKNtesIOr2j2Qv3W/cHjnvk9I8+G7oAkFDFN6TCBEI=
-golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
-golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ=
+golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=