diff --git a/actions/setup/js/package-lock.json b/actions/setup/js/package-lock.json
index 285a98c5362..02f9da0f572 100644
--- a/actions/setup/js/package-lock.json
+++ b/actions/setup/js/package-lock.json
@@ -16,7 +16,7 @@
         "@types/node": "^26.1.1",
         "@vitest/coverage-v8": "^4.1.8",
         "@vitest/ui": "^4.1.10",
-        "minimatch": ">=3.1.3",
+        "minimatch": ">=10.2.6",
         "prettier": "^3.9.6",
         "typescript": "^7.0.2",
         "vite": "^8.1.5",
@@ -3580,13 +3580,13 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.2.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
-      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
-        "brace-expansion": "^5.0.5"
+        "brace-expansion": "^5.0.8"
       },
       "engines": {
         "node": "18 || 20 || >=22"
diff --git a/actions/setup/js/package.json b/actions/setup/js/package.json
index 5132d10d29a..f00b465e5fc 100644
--- a/actions/setup/js/package.json
+++ b/actions/setup/js/package.json
@@ -11,7 +11,7 @@
     "@types/node": "^26.1.1",
     "@vitest/coverage-v8": "^4.1.8",
     "@vitest/ui": "^4.1.10",
-    "minimatch": ">=3.1.3",
+    "minimatch": ">=10.2.6",
     "prettier": "^3.9.6",
     "typescript": "^7.0.2",
     "vite": "^8.1.5",