diff --git a/go.mod b/go.mod
index d7d14734..16f83d50 100644
--- a/go.mod
+++ b/go.mod
@@ -13,7 +13,7 @@ require (
 	github.com/cespare/xxhash/v2 v2.3.0
 	github.com/docker/docker v28.5.1+incompatible
 	github.com/google/go-containerregistry v0.20.6
-	github.com/jarcoal/httpmock v1.4.0
+	github.com/jarcoal/httpmock v1.4.1
 	github.com/onsi/ginkgo/v2 v2.27.1
 	github.com/onsi/gomega v1.38.2
 	github.com/spf13/cobra v1.10.1
diff --git a/go.sum b/go.sum
index dce3d0ac..c0463244 100644
--- a/go.sum
+++ b/go.sum
@@ -422,8 +422,8 @@ github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSo
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/jarcoal/httpmock v1.4.0 h1:BvhqnH0JAYbNudL2GMJKgOHe2CtKlzJ/5rWKyp+hc2k=
-github.com/jarcoal/httpmock v1.4.0/go.mod h1:ftW1xULwo+j0R0JJkJIIi7UKigZUXCLLanykgjwBXL0=
+github.com/jarcoal/httpmock v1.4.1 h1:0Ju+VCFuARfFlhVXFc2HxlcQkfB+Xq12/EotHko+x2A=
+github.com/jarcoal/httpmock v1.4.1/go.mod h1:ftW1xULwo+j0R0JJkJIIi7UKigZUXCLLanykgjwBXL0=
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A=
 github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99/go.mod h1:1lJo3i6rXxKeerYnT8Nvf0QmHCRC1n8sfWVwXF2Frvo=
 github.com/jgautheron/goconst v1.8.1 h1:PPqCYp3K/xlOj5JmIe6O1Mj6r1DbkdbLtR3AJuZo414=
diff --git a/vendor/github.com/jarcoal/httpmock/response.go b/vendor/github.com/jarcoal/httpmock/response.go
index 94c29a0c..f3b6c80b 100644
--- a/vendor/github.com/jarcoal/httpmock/response.go
+++ b/vendor/github.com/jarcoal/httpmock/response.go
@@ -740,6 +740,7 @@ type lenReadSeeker interface {
 
 type dummyReadCloser struct {
 	orig any           // string or []byte
+	mu   sync.Mutex    // protects operations over body
 	body lenReadSeeker // instanciated on demand from orig
 }
 
@@ -766,17 +767,26 @@ func (d *dummyReadCloser) setup() {
 }
 
 func (d *dummyReadCloser) Read(p []byte) (n int, err error) {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
 	d.setup()
 	return d.body.Read(p)
 }
 
 func (d *dummyReadCloser) Close() error {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
 	d.setup()
 	d.body.Seek(0, io.SeekEnd) //nolint: errcheck
 	return nil
 }
 
 func (d *dummyReadCloser) Len() int {
+	d.mu.Lock()
+	defer d.mu.Unlock()
+
 	d.setup()
 	return d.body.Len()
 }
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 56f22b5e..c6121638 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -895,7 +895,7 @@ github.com/hexops/gotextdiff/span
 # github.com/inconshreveable/mousetrap v1.1.0
 ## explicit; go 1.18
 github.com/inconshreveable/mousetrap
-# github.com/jarcoal/httpmock v1.4.0
+# github.com/jarcoal/httpmock v1.4.1
 ## explicit; go 1.18
 github.com/jarcoal/httpmock
 github.com/jarcoal/httpmock/internal