diff --git a/package-lock.json b/package-lock.json
index b3f15c0d554e..14e3fb106aa5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -40072,7 +40072,7 @@
         "json5": "^2.2.3",
         "latest-version": "^5.1.0",
         "lodash": "^4.17.23",
-        "minimatch": "^10.1.2",
+        "minimatch": "^10.2.2",
         "minimist": "^1.2.8",
         "mkdirp": "^3.0.1",
         "natural-compare": "^1.4.0",
@@ -40340,6 +40340,15 @@
         "node": ">= 14"
       }
     },
+    "packages/cli/node_modules/balanced-match": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.3.tgz",
+      "integrity": "sha512-1pHv8LX9CpKut1Zp4EXey7Z8OfH11ONNH6Dhi2WDUt31VVZFXZzKwXcysBgqSumFCmR+0dqjMK5v5JiFHzi0+g==",
+      "license": "MIT",
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
     "packages/cli/node_modules/camelcase-keys": {
       "version": "7.0.2",
       "resolved": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-7.0.2.tgz",
@@ -40521,20 +40530,32 @@
       }
     },
     "packages/cli/node_modules/minimatch": {
-      "version": "10.1.2",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.2.tgz",
-      "integrity": "sha512-fu656aJ0n2kcXwsnwnv9g24tkU5uSmOlTjd6WyyaKm2Z+h1qmY6bAjrcaIxF/BslFqbZ8UBtbJi7KgQOZD2PTw==",
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.2.tgz",
+      "integrity": "sha512-+G4CpNBxa5MprY+04MbgOw1v7So6n5JY166pFi9KfYwT78fxScCeSNQSNzp6dpPSW2rONOps6Ocam1wFhCgoVw==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
-        "@isaacs/brace-expansion": "^5.0.1"
+        "brace-expansion": "^5.0.2"
       },
       "engines": {
-        "node": "20 || >=22"
+        "node": "18 || 20 || >=22"
       },
       "funding": {
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "packages/cli/node_modules/minimatch/node_modules/brace-expansion": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.2.tgz",
+      "integrity": "sha512-Pdk8c9poy+YhOgVWw1JNN22/HcivgKWwpxKq04M/jTmHyCZn12WPJebZxdjSa5TmBqISrUSgNYU3eRORljfCCw==",
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
     "packages/cli/node_modules/minipass-collect": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/minipass-collect/-/minipass-collect-2.0.1.tgz",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index ed107772f37b..d76c78858eb8 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -55,7 +55,7 @@
     "json5": "^2.2.3",
     "latest-version": "^5.1.0",
     "lodash": "^4.17.23",
-    "minimatch": "^10.1.2",
+    "minimatch": "^10.2.2",
     "minimist": "^1.2.8",
     "mkdirp": "^3.0.1",
     "natural-compare": "^1.4.0",