diff --git a/spec/fixtures/components/js_app/package-lock.json b/spec/fixtures/components/js_app/package-lock.json
index f52e414..0aee999 100644
--- a/spec/fixtures/components/js_app/package-lock.json
+++ b/spec/fixtures/components/js_app/package-lock.json
@@ -6,7 +6,7 @@
     "": {
       "dependencies": {
         "@bytecodealliance/componentize-js": "^0.18.2",
-        "@bytecodealliance/jco": "^1.11.1"
+        "@bytecodealliance/jco": "^1.11.3"
       },
       "devDependencies": {
         "esbuild": "^0.25.4"
@@ -30,24 +30,13 @@
       }
     },
     "node_modules/@bytecodealliance/jco": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@bytecodealliance/jco/-/jco-1.11.1.tgz",
-      "integrity": "sha512-Vej1Orl5TfVlbGDPcrYXTEMfhjEbeGATOkaQeRLsH8fRAt1HOfvMhh8NBSHkwwfjAYWGplrfDAffnP8vIRaH6Q==",
-      "license": "(Apache-2.0 WITH LLVM-exception)",
-      "workspaces": [
-        ".",
-        "examples/components/add",
-        "examples/components/http-hello-world",
-        "examples/components/node-fetch",
-        "examples/components/string-reverse",
-        "examples/components/string-reverse-upper",
-        "examples/components/webidl-book-library",
-        "packages/preview2-shim"
-      ],
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@bytecodealliance/jco/-/jco-1.11.3.tgz",
+      "integrity": "sha512-Ynv0GDj9iAp+cS03UGg+ss4uo/Hx5e4FyjcFDBfkRt9qJsqbL2AnPqgO/ORNlSXg9zu9PTNC0uGgE7/Vklcn/w==",
       "dependencies": {
         "@bytecodealliance/componentize-js": "^0.17.0",
         "@bytecodealliance/preview2-shim": "^0.17.2",
-        "binaryen": "^122.0.0",
+        "binaryen": "^123.0.0",
         "chalk-template": "^1",
         "commander": "^12",
         "mkdirp": "^3",
@@ -1094,10 +1083,9 @@
       "license": "MIT"
     },
     "node_modules/binaryen": {
-      "version": "122.0.0",
-      "resolved": "https://registry.npmjs.org/binaryen/-/binaryen-122.0.0.tgz",
-      "integrity": "sha512-XOvjvucq04e5UW0cuoiEZX4wxzepuF7q8sz24JtaXltqjgCqQOZHPXAq5ja/eLljF/orWYmaxuWivpp7paVUCQ==",
-      "license": "Apache-2.0",
+      "version": "123.0.0",
+      "resolved": "https://registry.npmjs.org/binaryen/-/binaryen-123.0.0.tgz",
+      "integrity": "sha512-/hls/a309aZCc0itqP6uhoR+5DsKSlJVfB8Opd2BY9Ndghs84IScTunlyidyF4r2Xe3lQttnfBNIDjaNpj6mTw==",
       "bin": {
         "wasm-as": "bin/wasm-as",
         "wasm-ctor-eval": "bin/wasm-ctor-eval",
diff --git a/spec/fixtures/components/js_app/package.json b/spec/fixtures/components/js_app/package.json
index 81209cb..ed64c07 100644
--- a/spec/fixtures/components/js_app/package.json
+++ b/spec/fixtures/components/js_app/package.json
@@ -1,7 +1,7 @@
 {
   "dependencies": {
     "@bytecodealliance/componentize-js": "^0.18.2",
-    "@bytecodealliance/jco": "^1.11.1"
+    "@bytecodealliance/jco": "^1.11.3"
   },
   "scripts": {
     "build": "npm install && esbuild src/index.mjs --bundle --format=esm --platform=node --external:standout:app/http@2.0.1 --outfile=build/bundle.mjs && jco componentize build/bundle.mjs --wit ../../../../ext/app_bridge/wit/world.wit --world-name bridge --out ../js_app.wasm --disable all"