diff --git a/build.zig.zon b/build.zig.zon
index b52788c..a55e9e9 100644
--- a/build.zig.zon
+++ b/build.zig.zon
@@ -5,8 +5,8 @@
     .minimum_zig_version = "0.16.0-dev.3070+b22eb176b",
     .dependencies = .{
         .websocket = .{
-            .url = "https://github.com/karlseguin/websocket.zig/archive/6d309f7a9790030f2fc070323b5defc64a15c13b.tar.gz",
-            .hash = "websocket-0.1.0-ZPISdV_aBACU9pGuvrTQ2z8uxz_Sp8JnJgQaiGKQIx1l",
+            .url = "https://github.com/zzstoatzz/websocket.zig/archive/refs/tags/v0.1.5.tar.gz",
+            .hash = "websocket-0.1.2-ZPISdUpYBAA-B2Ru4-MN2TLWlTUMcZd3Yu87eLS-et-V",
         },
         .@"atproto-interop-tests" = .{
             .url = "https://github.com/bluesky-social/atproto-interop-tests/archive/35bb5638ab1e5ce71fb88a0c95953fc557ef1925.tar.gz",
diff --git a/src/root.zig b/src/root.zig
index bb3f148..242ad47 100644
--- a/src/root.zig
+++ b/src/root.zig
@@ -53,6 +53,10 @@ pub const loadCommitFromCAR = repo_verifier.loadCommitFromCAR;
 pub const verifyCommitDiff = repo_verifier.verifyCommitDiff;
 pub const CommitDiffResult = repo_verifier.CommitDiffResult;
 
+// websocket transport (re-exported so dependents share zat's single pinned
+// version instead of taking a direct dependency)
+pub const websocket = @import("websocket");
+
 // sync / streaming
 const sync = @import("internal/streaming/sync.zig");
 pub const CommitAction = sync.CommitAction;