diff --git a/package.json b/package.json
index 692a35cd4..61e77c7a0 100644
--- a/package.json
+++ b/package.json
@@ -81,7 +81,7 @@
       "@babel/runtime@<7.26.10": ">=7.28.6",
       "axios@>=1.0.0 <1.8.2": ">=1.13.6",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.3",
-      "brace-expansion@>=1.0.0 <=1.1.11": ">=4.0.1",
+      "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.4",
       "esbuild@<=0.24.2": ">=0.27.3",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
       "hono@<4.6.5": ">=4.12.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 583177536..ed4ae95ea 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,7 +9,7 @@ overrides:
   '@babel/runtime@<7.26.10': '>=7.28.6'
   axios@>=1.0.0 <1.8.2: '>=1.13.6'
   brace-expansion@>=2.0.0 <=2.0.1: '>=5.0.3'
-  brace-expansion@>=1.0.0 <=1.1.11: '>=4.0.1'
+  brace-expansion@>=1.0.0 <=1.1.11: '>=5.0.4'
   esbuild@<=0.24.2: '>=0.27.3'
   form-data@>=4.0.0 <4.0.4: '>=4.0.5'
   hono@<4.6.5: '>=4.12.3'
@@ -5697,6 +5697,10 @@ packages:
     resolution: {integrity: sha512-fy6KJm2RawA5RcHkLa1z/ScpBeA762UF9KmZQxwIbDtRJrgLzM10depAiEQ+CXYcoiqW1/m96OAAoke2nE9EeA==}
     engines: {node: 18 || 20 || >=22}
 
+  brace-expansion@5.0.4:
+    resolution: {integrity: sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==}
+    engines: {node: 18 || 20 || >=22}
+
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
     engines: {node: '>=8'}
@@ -14648,6 +14652,10 @@ snapshots:
     dependencies:
       balanced-match: 4.0.2
 
+  brace-expansion@5.0.4:
+    dependencies:
+      balanced-match: 4.0.2
+
   braces@3.0.3:
     dependencies:
       fill-range: 7.1.1
@@ -17482,7 +17490,7 @@ snapshots:
 
   minimatch@3.1.2:
     dependencies:
-      brace-expansion: 5.0.2
+      brace-expansion: 5.0.4
 
   minimatch@5.1.6:
     dependencies: