diff --git a/package.json b/package.json
index a576f89cb..5cfb85f22 100644
--- a/package.json
+++ b/package.json
@@ -82,7 +82,7 @@
       "axios@>=1.0.0 <1.8.2": ">=1.14.0",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=5.0.5",
       "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.5",
-      "esbuild@<=0.24.2": ">=0.27.5",
+      "esbuild@<=0.24.2": ">=0.28.0",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.5",
       "hono@<4.6.5": ">=4.12.10",
       "linkifyjs@<4.3.2": ">=4.3.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f9ffa1277..1ebfd43b3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10,7 +10,7 @@ overrides:
   axios@>=1.0.0 <1.8.2: '>=1.14.0'
   brace-expansion@>=2.0.0 <=2.0.1: '>=5.0.5'
   brace-expansion@>=1.0.0 <=1.1.11: '>=5.0.5'
-  esbuild@<=0.24.2: '>=0.27.5'
+  esbuild@<=0.24.2: '>=0.28.0'
   form-data@>=4.0.0 <4.0.4: '>=4.0.5'
   hono@<4.6.5: '>=4.12.10'
   linkifyjs@<4.3.2: '>=4.3.2'
@@ -12506,7 +12506,7 @@ snapshots:
       '@rrweb/types': 2.0.0-alpha.16
       babel-plugin-syntax-hermes-parser: 0.21.1
       ci-info: 4.0.0
-      esbuild: 0.27.7
+      esbuild: 0.28.0
       faster-babel-types: 0.1.0(@babel/types@7.26.0)
       hono: 4.12.10
       isomorphic-fetch: 3.0.0