diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4f4b023..781dd68 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.11.4](https://github.com/SocketDev/socket-lib/releases/tag/v5.11.4) - 2026-03-28
+
+### Changed
+
+- **perf**: Lazy-load heavy external sub-bundles across 7 modules (#119)
+  - `sorts.ts`: Defer semver (2.5 MB via npm-pack) and fastSort until first use
+  - `versions.ts`: Defer semver until first use
+  - `archives.ts`: Defer adm-zip (102 KB) and tar-fs (105 KB) until extraction
+  - `globs.ts`: Defer fast-glob and picomatch (260 KB via pico-pack) until glob execution
+  - `fs.ts`: Defer del (260 KB via pico-pack) until safeDelete call
+  - `spawn.ts`: Defer @npmcli/promise-spawn (17 KB) until async spawn
+  - `strings.ts`: Defer get-east-asian-width (10 KB) until stringWidth call
+- Importing lightweight exports (isObject, httpJson, localeCompare, readJsonSync, stripAnsi) no longer loads heavy externals at module init time
+
 ## [5.11.3](https://github.com/SocketDev/socket-lib/releases/tag/v5.11.3) - 2026-03-26
 
 ### Fixed
diff --git a/package.json b/package.json
index 5484ba1..9d4f85b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "5.11.3",
+  "version": "5.11.4",
   "packageManager": "pnpm@10.33.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
diff --git a/test/unit/cache-with-ttl.test.mts b/test/unit/cache-with-ttl.test.mts
index e69d37b..3e39b3d 100644
--- a/test/unit/cache-with-ttl.test.mts
+++ b/test/unit/cache-with-ttl.test.mts
@@ -185,17 +185,17 @@ describe.sequential('cache-with-ttl', () => {
     })
 
     it('should fetch again after cache expires', async () => {
-      // Use longer TTL (200ms) to avoid flaky failures on slow CI runners.
+      // Use generous TTL to avoid flaky failures on slow CI runners (especially Windows).
       const shortCache = createTtlCache({
-        ttl: 200,
+        ttl: 500,
         prefix: 'short-cache',
       })
       const fetcher = vi.fn(async () => 'value')
       await shortCache.getOrFetch('key', fetcher)
       expect(fetcher).toHaveBeenCalledTimes(1)
 
-      // Wait for TTL to expire (300ms > 200ms TTL).
-      await new Promise(resolve => setTimeout(resolve, 300))
+      // Wait for TTL to expire (700ms > 500ms TTL).
+      await new Promise(resolve => setTimeout(resolve, 700))
 
       await shortCache.getOrFetch('key', fetcher)
       expect(fetcher).toHaveBeenCalledTimes(2)
@@ -327,17 +327,17 @@ describe.sequential('cache-with-ttl', () => {
     })
 
     it('should skip expired entries in getAll', async () => {
-      // Use longer TTL (200ms) to avoid flaky failures on slow CI runners.
+      // Use generous TTL to avoid flaky failures on slow CI runners (especially Windows).
       const shortCache = createTtlCache({
-        ttl: 200,
+        ttl: 500,
         prefix: 'expiry-getall-test',
       })
 
       await shortCache.set('key1', 'value1')
       await shortCache.set('key2', 'value2')
 
-      // Wait for TTL to expire (300ms > 200ms TTL).
-      await new Promise(resolve => setTimeout(resolve, 300))
+      // Wait for TTL to expire (700ms > 500ms TTL).
+      await new Promise(resolve => setTimeout(resolve, 700))
 
       const all = await shortCache.getAll<string>('*')
       expect(all.size).toBe(0)
@@ -416,18 +416,17 @@ describe.sequential('cache-with-ttl', () => {
 
   describe('TTL expiration', () => {
     it('should expire entries after TTL', async () => {
-      // Use longer TTL (200ms) to avoid flaky failures on slow CI runners.
-      // Windows in particular can have significant I/O latency during cacache.put().
+      // Use generous TTL to avoid flaky failures on slow CI runners (especially Windows).
       const shortCache = createTtlCache({
-        ttl: 200,
+        ttl: 500,
         prefix: 'expiry-test',
       })
 
       await shortCache.set('key', 'value')
       expect(await shortCache.get<string>('key')).toBe('value')
 
-      // Wait for TTL to expire (300ms > 200ms TTL).
-      await new Promise(resolve => setTimeout(resolve, 300))
+      // Wait for TTL to expire (700ms > 500ms TTL).
+      await new Promise(resolve => setTimeout(resolve, 700))
 
       expect(await shortCache.get('key')).toBeUndefined()
 
@@ -453,16 +452,16 @@ describe.sequential('cache-with-ttl', () => {
 
     it('should refresh TTL on set', async () => {
       const refreshCache = createTtlCache({
-        ttl: 300,
+        ttl: 2000,
         prefix: 'refresh-cache',
       })
 
       await refreshCache.set('key', 'value1')
-      await new Promise(resolve => setTimeout(resolve, 100))
+      await new Promise(resolve => setTimeout(resolve, 200))
       await refreshCache.set('key', 'value2') // Refresh TTL
 
-      await new Promise(resolve => setTimeout(resolve, 100))
-      // Should still be cached (100 + 100 = 200ms, but TTL refreshed at 100ms to 300ms)
+      await new Promise(resolve => setTimeout(resolve, 200))
+      // Should still be cached (200 + 200 = 400ms, but TTL refreshed at 200ms to 2000ms)
       expect(await refreshCache.get<string>('key')).toBe('value2')
 
       await refreshCache.clear()