diff --git a/package-lock.json b/package-lock.json
index 05c5913..84523ed 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/core": "^3.0.1",
         "commander": "^15.0.0",
         "fast-glob": "^3.3.3",
-        "picomatch": "^4.0.4",
+        "picomatch": "^4.0.5",
         "yaml": "^2.9.0",
         "zod": "^4.4.3"
       },
@@ -2197,9 +2197,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
-      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
       "license": "MIT",
       "engines": {
         "node": ">=12"
diff --git a/package.json b/package.json
index 2a749c8..1f43227 100644
--- a/package.json
+++ b/package.json
@@ -58,7 +58,7 @@
     "@actions/core": "^3.0.1",
     "commander": "^15.0.0",
     "fast-glob": "^3.3.3",
-    "picomatch": "^4.0.4",
+    "picomatch": "^4.0.5",
     "yaml": "^2.9.0",
     "zod": "^4.4.3"
   },