diff --git a/package.json b/package.json
index 7ae95610d..fc371bbd3 100644
--- a/package.json
+++ b/package.json
@@ -170,7 +170,7 @@
       "fast-uri@>=4.0.0 <=4.1.0": ">=4.1.1",
       "uuid@<11.1.1": ">=11.1.1",
       "vitest@<3.2.6": ">=3.2.6",
-      "brace-expansion@>=5.0.0 <5.0.6": ">=5.0.6",
+      "brace-expansion@>=5.0.0 <5.0.6": ">=5.0.8",
       "js-cookie@<=3.0.5": ">=3.0.8",
       "tmp@<0.2.6": ">=0.2.7",
       "esbuild@>=0.27.3 <0.28.1": ">=0.28.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7866865c8..058872c4a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -37,7 +37,7 @@ overrides:
   fast-uri@>=4.0.0 <=4.1.0: '>=4.1.1'
   uuid@<11.1.1: '>=11.1.1'
   vitest@<3.2.6: '>=3.2.6'
-  brace-expansion@>=5.0.0 <5.0.6: '>=5.0.6'
+  brace-expansion@>=5.0.0 <5.0.6: '>=5.0.8'
   js-cookie@<=3.0.5: '>=3.0.8'
   tmp@<0.2.6: '>=0.2.7'
   esbuild@>=0.27.3 <0.28.1: '>=0.28.1'
@@ -2072,9 +2072,9 @@ packages:
     resolution: {integrity: sha512-9gYgQKXx+1nP8mP7CzFyaUARhg7D3n1dF/FnErWmu9l6JvGpNUN278h0aSb+QjoiKSWG+iZ3uHrcqk0qrY9RQQ==}
     engines: {node: '>=10'}
 
-  brace-expansion@5.0.7:
-    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
-    engines: {node: 18 || 20 || >=22}
+  brace-expansion@5.0.8:
+    resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
+    engines: {node: 20 || >=22}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -7917,7 +7917,7 @@ snapshots:
       widest-line: 3.1.0
       wrap-ansi: 7.0.0
 
-  brace-expansion@5.0.7:
+  brace-expansion@5.0.8:
     dependencies:
       balanced-match: 4.0.3
 
@@ -10032,7 +10032,7 @@ snapshots:
 
   minimatch@10.2.5:
     dependencies:
-      brace-expansion: 5.0.7
+      brace-expansion: 5.0.8
 
   minimist@1.2.6: {}