diff --git a/package-lock.json b/package-lock.json
index 66222a0eb6d..8950d30b3e4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3265,6 +3265,12 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/@isaacs/nonrecursive-glob-match": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@isaacs/nonrecursive-glob-match/-/nonrecursive-glob-match-1.0.3.tgz",
+      "integrity": "sha512-SI7kyKHq4XXDRozw+r9GlRZkia1ZkFrpLW98r2IC2Bpr8YkFGE3fvjzmxCG0x78A++69HmDNrDvSMYBZmHGpKA==",
+      "license": "BlueOak-1.0.0"
+    },
     "node_modules/@jackwener/opencli": {
       "version": "1.8.8",
       "resolved": "https://registry.npmjs.org/@jackwener/opencli/-/opencli-1.8.8.tgz",
@@ -16442,7 +16448,7 @@
         "https-proxy-agent": "^9.1.0",
         "image-dimensions": "^2.6.0",
         "linkedom": "^0.18.13",
-        "minimatch": "10.2.5",
+        "minimatch": "^11.0.1",
         "minisearch": "7.2.0",
         "node-pty": "^1.2.0-beta.15",
         "qrcode": "^1.5.4",
@@ -16534,6 +16540,22 @@
         "node": ">= 20"
       }
     },
+    "packages/runtime/node_modules/minimatch": {
+      "version": "11.0.1",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-11.0.1.tgz",
+      "integrity": "sha512-t+Vn6DX4wPCxS23y03C0uhF7S1jpi1GfqPrnlEipCJaA2ykiNbMkVlDutZtmvLfRcUN6R8AYVlzTsQrT4RZoLQ==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "@isaacs/nonrecursive-glob-match": "^1.0.1",
+        "brace-expansion": "^5.0.12"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
     "packages/runtime/node_modules/undici": {
       "version": "8.12.3",
       "resolved": "https://registry.npmjs.org/undici/-/undici-8.12.3.tgz",
diff --git a/packages/runtime/package.json b/packages/runtime/package.json
index 1f84aabe435..ead61f315ea 100644
--- a/packages/runtime/package.json
+++ b/packages/runtime/package.json
@@ -184,7 +184,7 @@
     "https-proxy-agent": "^9.1.0",
     "image-dimensions": "^2.6.0",
     "linkedom": "^0.18.13",
-    "minimatch": "10.2.5",
+    "minimatch": "11.0.1",
     "minisearch": "7.2.0",
     "node-pty": "^1.2.0-beta.15",
     "qrcode": "^1.5.4",