diff --git a/packages/angular/build/package.json b/packages/angular/build/package.json
index cb03c7973a5d..bca9e583729f 100644
--- a/packages/angular/build/package.json
+++ b/packages/angular/build/package.json
@@ -35,7 +35,7 @@
     "magic-string": "0.30.21",
     "mrmime": "2.0.1",
     "parse5-html-rewriting-stream": "8.0.0",
-    "picomatch": "4.0.3",
+    "picomatch": "4.0.4",
     "piscina": "5.1.4",
     "rolldown": "1.0.0-rc.4",
     "sass": "1.97.3",
diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json
index d7422e87fbe1..ed47eb31a2bf 100644
--- a/packages/angular_devkit/build_angular/package.json
+++ b/packages/angular_devkit/build_angular/package.json
@@ -40,7 +40,7 @@
     "mini-css-extract-plugin": "2.10.0",
     "open": "11.0.0",
     "ora": "9.3.0",
-    "picomatch": "4.0.3",
+    "picomatch": "4.0.4",
     "piscina": "5.1.4",
     "postcss": "8.5.6",
     "postcss-loader": "8.2.0",
diff --git a/packages/angular_devkit/core/package.json b/packages/angular_devkit/core/package.json
index df7555968b65..fe4a5a13032a 100644
--- a/packages/angular_devkit/core/package.json
+++ b/packages/angular_devkit/core/package.json
@@ -28,7 +28,7 @@
     "ajv": "8.18.0",
     "ajv-formats": "3.0.1",
     "jsonc-parser": "3.3.1",
-    "picomatch": "4.0.3",
+    "picomatch": "4.0.4",
     "rxjs": "7.8.2",
     "source-map": "0.7.6"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3d90ff6bbe5a..f0daed003644 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -389,8 +389,8 @@ importers:
         specifier: 8.0.0
         version: 8.0.0
       picomatch:
-        specifier: 4.0.3
-        version: 4.0.3
+        specifier: 4.0.4
+        version: 4.0.4
       piscina:
         specifier: 5.1.4
         version: 5.1.4
@@ -671,8 +671,8 @@ importers:
         specifier: 9.3.0
         version: 9.3.0
       picomatch:
-        specifier: 4.0.3
-        version: 4.0.3
+        specifier: 4.0.4
+        version: 4.0.4
       piscina:
         specifier: 5.1.4
         version: 5.1.4
@@ -785,8 +785,8 @@ importers:
         specifier: 3.3.1
         version: 3.3.1
       picomatch:
-        specifier: 4.0.3
-        version: 4.0.3
+        specifier: 4.0.4
+        version: 4.0.4
       rxjs:
         specifier: 7.8.2
         version: 7.8.2
@@ -7544,6 +7544,10 @@ packages:
     resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
     engines: {node: '>=12'}
 
+  picomatch@4.0.4:
+    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
+    engines: {node: '>=12'}
+
   pify@2.3.0:
     resolution: {integrity: sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==}
     engines: {node: '>=0.10.0'}
@@ -11818,7 +11822,7 @@ snapshots:
       detect-libc: 2.1.2
       is-glob: 4.0.3
       node-addon-api: 7.1.1
-      picomatch: 4.0.3
+      picomatch: 4.0.4
     optionalDependencies:
       '@parcel/watcher-android-arm64': 2.5.6
       '@parcel/watcher-darwin-arm64': 2.5.6
@@ -12040,10 +12044,10 @@ snapshots:
       '@rollup/pluginutils': 5.3.0(rollup@4.57.1)
       commondir: 1.0.1
       estree-walker: 2.0.2
-      fdir: 6.5.0(picomatch@4.0.3)
+      fdir: 6.5.0(picomatch@4.0.4)
       is-reference: 1.2.1
       magic-string: 0.30.21
-      picomatch: 4.0.3
+      picomatch: 4.0.4
     optionalDependencies:
       rollup: 4.57.1
 
@@ -12077,7 +12081,7 @@ snapshots:
     dependencies:
       '@types/estree': 1.0.8
       estree-walker: 2.0.2
-      picomatch: 4.0.3
+      picomatch: 4.0.4
     optionalDependencies:
       rollup: 4.57.1
 
@@ -12085,7 +12089,7 @@ snapshots:
     dependencies:
       '@types/estree': 1.0.8
       estree-walker: 2.0.2
-      picomatch: 4.0.3
+      picomatch: 4.0.4
     optionalDependencies:
       rollup: 4.57.1
 
@@ -12224,7 +12228,7 @@ snapshots:
       eslint-visitor-keys: 4.2.1
       espree: 10.4.0
       estraverse: 5.3.0
-      picomatch: 4.0.3
+      picomatch: 4.0.4
 
   '@szmarczak/http-timer@4.0.6':
     dependencies:
@@ -14920,9 +14924,9 @@ snapshots:
     dependencies:
       pend: 1.2.0
 
-  fdir@6.5.0(picomatch@4.0.3):
+  fdir@6.5.0(picomatch@4.0.4):
     optionalDependencies:
-      picomatch: 4.0.3
+      picomatch: 4.0.4
 
   fetch-blob@3.2.0:
     dependencies:
@@ -17098,6 +17102,8 @@ snapshots:
 
   picomatch@4.0.3: {}
 
+  picomatch@4.0.4: {}
+
   pify@2.3.0: {}
 
   pify@3.0.0: {}
@@ -18423,8 +18429,8 @@ snapshots:
 
   tinyglobby@0.2.15:
     dependencies:
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
 
   tinyrainbow@3.1.0: {}
 
@@ -18788,8 +18794,8 @@ snapshots:
   vite@7.3.1(@types/node@24.12.0)(jiti@2.6.1)(less@4.4.2)(sass@1.97.3)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.3):
     dependencies:
       esbuild: 0.27.3
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
       postcss: 8.5.6
       rollup: 4.57.1
       tinyglobby: 0.2.15