diff --git a/bin/upload-to-cdn.js b/bin/upload-to-cdn.js
index b7e7bcee5..071022a32 100644
--- a/bin/upload-to-cdn.js
+++ b/bin/upload-to-cdn.js
@@ -22,6 +22,7 @@
 //  - Kevin van Zonneveld <kevin@transloadit.com>
 
 const path = require('path')
+const { pipeline } = require('stream/promises')
 const AWS = require('aws-sdk')
 const packlist = require('npm-packlist')
 const tar = require('tar')
@@ -50,8 +51,7 @@ from npm and filtering it down to package/dist/ files.
  */
 async function getRemoteDistFiles (packageName, version) {
   const files = new Map()
-  const tarball = pacote.tarball.stream(`${packageName}@${version}`)
-    .pipe(new tar.Parse())
+  const tarball = await pacote.tarball.stream(`${packageName}@${version}`, stream => pipeline(stream, new tar.Parse()))
 
   tarball.on('entry', (readEntry) => {
     if (readEntry.path.startsWith('package/dist/')) {
diff --git a/package.json b/package.json
index a329e0518..fa38784b2 100644
--- a/package.json
+++ b/package.json
@@ -111,7 +111,7 @@
     "npm-packlist": "^2.2.2",
     "npm-run-all": "4.1.5",
     "onchange": "^7.1.0",
-    "pacote": "9.5.12",
+    "pacote": "^11.3.4",
     "postcss": "8.2.10",
     "postcss-dir-pseudo-class": "^5.0.0",
     "postcss-logical": "^4.0.2",