diff --git a/package.json b/package.json
index 143ebf9e..ea2603f0 100644
--- a/package.json
+++ b/package.json
@@ -70,7 +70,6 @@
     "@types/busboy": "^1.5.4",
     "@types/mime-types": "^2.1.4",
     "@types/node": "^24.13.3",
-    "@types/proxy": "^1.0.4",
     "@types/qs": "^6.15.0",
     "@types/selfsigned": "^2.1.0",
     "@types/tar-stream": "^2.2.3",
@@ -79,7 +78,7 @@
     "busboy": "^1.6.0",
     "cross-env": "^10.1.0",
     "iconv-lite": "^0.7.0",
-    "proxy": "^1.0.2",
+    "proxy": "^4.0.0",
     "selfsigned": "^3.0.1",
     "tar-stream": "^2.2.0",
     "typescript": "^7.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 73e0181f..94eb14e1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -219,9 +219,6 @@ importers:
       '@types/node':
         specifier: ^24.13.3
         version: 24.13.6
-      '@types/proxy':
-        specifier: ^1.0.4
-        version: 1.0.4
       '@types/qs':
         specifier: ^6.15.0
         version: 6.15.1
@@ -247,8 +244,8 @@ importers:
         specifier: ^0.7.0
         version: 0.7.3
       proxy:
-        specifier: ^1.0.2
-        version: 1.0.2(supports-color@7.2.0)
+        specifier: ^4.0.0
+        version: 4.1.0(supports-color@7.2.0)
       selfsigned:
         specifier: ^3.0.1
         version: 3.0.1
@@ -651,9 +648,6 @@ packages:
   '@types/node@24.13.6':
     resolution: {integrity: sha512-SGrw/h3KPFshy3OE6ZL53LMBG5vGQQ8/gIpiqz/kRZhPJ7HgwCEs8LBuNtWLa8dvGZVpSF7+Bf+c11HUrCb/yg==}
 
-  '@types/proxy@1.0.4':
-    resolution: {integrity: sha512-KnYy7hpp3wXQ2U0ExvCMF9BvWZ6h2aI0XWb8g705mn26Zmn2HO/eLRi6UuhHELA6MNJtYtiZYWv38gobJN0xXQ==}
-
   '@types/qs@6.15.1':
     resolution: {integrity: sha512-GZHUBZR9hckSUhrxmp1nG6NwdpM9fCunJwyThLW1X3AyHgd9IlHb6VANpQQqDr2o/qQp6McZ3y/IA2rVzKzSbw==}
 
@@ -1134,8 +1128,8 @@ packages:
     resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==}
     engines: {node: '>=10'}
 
-  args@5.0.1:
-    resolution: {integrity: sha512-1kqmFCFsPffavQFGt8OxJdIcETti99kySRUPMpOhaGjL6mRJn8HFU1OxKY5bMqfZKUwTQc1mZkAjmGYaVOHFtQ==}
+  args@5.0.3:
+    resolution: {integrity: sha512-h6k/zfFgusnv3i5TU08KQkVKuCPBtL/PWQbWkHUxvJrZ2nAyeaUupneemcrgn1xmqxPQsPIzwkUhOpoqPDRZuA==}
     engines: {node: '>= 6.0.0'}
 
   aria-query@5.3.0:
@@ -1154,9 +1148,6 @@ packages:
   base64-js@1.5.1:
     resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
 
-  basic-auth-parser@0.0.2:
-    resolution: {integrity: sha512-Y7OBvWn+JnW45JWHLY6ybYub2k9cXCMrtCyO1Hds2s6eqClqWhPnOQpgXUPjAiMHj+A8TEPIQQ1dYENnJoBOHQ==}
-
   bl@4.1.0:
     resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
 
@@ -1564,8 +1555,9 @@ packages:
     resolution: {integrity: sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==}
     engines: {node: ^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0}
 
-  proxy@1.0.2:
-    resolution: {integrity: sha512-KNac2ueWRpjbUh77OAFPZuNdfEqNynm9DD4xHT14CccGpW8wKZwEkN0yjlb7X9G9Z9F55N0Q+1z+WfgAhwYdzQ==}
+  proxy@4.1.0:
+    resolution: {integrity: sha512-X3gqRNkp5dLWQolWksIfFSltI0ls8oQ01+tckxnPoz3bQ5+OUsdE7bwX/i/Q3TDEG4gx2PQjc3D07dIx90CQdg==}
+    engines: {node: '>= 20'}
     hasBin: true
 
   qs@6.16.0:
@@ -2040,10 +2032,6 @@ snapshots:
     dependencies:
       undici-types: 7.18.2
 
-  '@types/proxy@1.0.4':
-    dependencies:
-      '@types/node': 24.13.6
-
   '@types/qs@6.15.1': {}
 
   '@types/selfsigned@2.1.0':
@@ -2361,7 +2349,7 @@ snapshots:
 
   ansi-styles@5.2.0: {}
 
-  args@5.0.1:
+  args@5.0.3:
     dependencies:
       camelcase: 5.0.0
       chalk: 2.4.2
@@ -2384,8 +2372,6 @@ snapshots:
 
   base64-js@1.5.1: {}
 
-  basic-auth-parser@0.0.2: {}
-
   bl@4.1.0:
     dependencies:
       buffer: 5.7.1
@@ -2757,10 +2743,9 @@ snapshots:
       ansi-styles: 5.2.0
       react-is: 17.0.2
 
-  proxy@1.0.2(supports-color@7.2.0):
+  proxy@4.1.0(supports-color@7.2.0):
     dependencies:
-      args: 5.0.1
-      basic-auth-parser: 0.0.2
+      args: 5.0.3
       debug: 4.4.3(supports-color@7.2.0)
     transitivePeerDependencies:
       - supports-color
diff --git a/test/options.dispatcher.test.ts b/test/options.dispatcher.test.ts
index 953fd0e1..2800be0c 100644
--- a/test/options.dispatcher.test.ts
+++ b/test/options.dispatcher.test.ts
@@ -1,6 +1,6 @@
 import { strict as assert } from 'node:assert';
 
-import setup from 'proxy';
+import { createProxy } from 'proxy';
 import { describe, it, beforeAll, afterAll } from 'vite-plus/test';
 
 import { request, ProxyAgent, getGlobalDispatcher, setGlobalDispatcher, Agent } from '../src/index.js';
@@ -16,7 +16,7 @@ describe('options.dispatcher.test.ts', () => {
     const { closeServer, url } = await startServer();
     close = closeServer;
     _url = url;
-    proxyServer = setup();
+    proxyServer = createProxy();
     await new Promise<void>((resolve) => {
       proxyServer.listen(0, () => {
         // console.log('HTTP proxy server listening on port %d', proxyServer.address().port);