diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 271d5627..2e67f145 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -12,7 +12,7 @@ catalogs:
 
 overrides:
   brace-expansion@<1.1.21: ^1.1.21
-  brace-expansion@>=2.0.0 <2.1.7: ^2.1.7
+  brace-expansion@>=2.0.0 <2.1.7: ^5.0.0
   brace-expansion@>=4.0.0 <5.0.12: ^5.0.12
   glob@>=10.2.0 <10.5.0: ^10.5.0
   js-yaml@>=3.0.0 <3.15.2: ^3.15.2
@@ -1953,9 +1953,6 @@ packages:
   brace-expansion@1.1.21:
     resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==}
 
-  brace-expansion@2.1.7:
-    resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
-
   brace-expansion@5.0.12:
     resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==}
     engines: {node: 20 || >=22}
@@ -5136,10 +5133,6 @@ snapshots:
       balanced-match: 1.0.2
       concat-map: 0.0.1
 
-  brace-expansion@2.1.7:
-    dependencies:
-      balanced-match: 1.0.2
-
   brace-expansion@5.0.12:
     dependencies:
       balanced-match: 4.0.4
@@ -6306,7 +6299,7 @@ snapshots:
 
   minimatch@9.0.9:
     dependencies:
-      brace-expansion: 2.1.7
+      brace-expansion: 5.0.12
 
   minimist@1.2.8: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 140673b1..f0a91b0e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -17,7 +17,7 @@ catalog:
 # Security: force patched versions of transitive deps that parents pin to vulnerable versions.
 overrides:
   brace-expansion@<1.1.21: ^1.1.21
-  brace-expansion@>=2.0.0 <2.1.7: ^2.1.7
+  brace-expansion@>=2.0.0 <2.1.7: ^5.0.0
   brace-expansion@>=4.0.0 <5.0.12: ^5.0.12
   glob@>=10.2.0 <10.5.0: ^10.5.0
   js-yaml@>=3.0.0 <3.15.2: ^3.15.2