diff --git a/build.zig.zon b/build.zig.zon
index 2131b46..ea8b4a3 100644
--- a/build.zig.zon
+++ b/build.zig.zon
@@ -5,8 +5,8 @@
     .minimum_zig_version = "0.16.0-dev.3070+b22eb176b",
     .dependencies = .{
         .websocket = .{
-            .url = "https://github.com/zzstoatzz/websocket.zig/archive/refs/tags/v0.1.4.tar.gz",
-            .hash = "websocket-0.1.2-ZPISdXFPBAB4F0i5uz0NkdgHU4J0PWrGFnjgYKzaBwmJ",
+            .url = "https://github.com/zzstoatzz/websocket.zig/archive/refs/tags/v0.1.5.tar.gz",
+            .hash = "websocket-0.1.2-ZPISdUpYBAA-B2Ru4-MN2TLWlTUMcZd3Yu87eLS-et-V",
         },
         .@"atproto-interop-tests" = .{
             .url = "https://github.com/bluesky-social/atproto-interop-tests/archive/35bb5638ab1e5ce71fb88a0c95953fc557ef1925.tar.gz",
diff --git a/src/root.zig b/src/root.zig
index 6a73f20..ac8af2d 100644
--- a/src/root.zig
+++ b/src/root.zig
@@ -52,6 +52,10 @@ pub const loadCommitFromCAR = repo_verifier.loadCommitFromCAR;
 pub const verifyCommitDiff = repo_verifier.verifyCommitDiff;
 pub const CommitDiffResult = repo_verifier.CommitDiffResult;
 
+// websocket transport (re-exported so dependents share zat's single pinned
+// version instead of taking a direct dependency)
+pub const websocket = @import("websocket");
+
 // sync / streaming
 const sync = @import("internal/streaming/sync.zig");
 pub const CommitAction = sync.CommitAction;