diff --git a/package-lock.json b/package-lock.json
index 04a67261ad86..094300164c95 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -98,7 +98,7 @@
         "unified": "^11.0.5",
         "unist-util-visit": "^5.0.0",
         "url-template": "^3.1.1",
-        "walk-sync": "^3.0.0"
+        "walk-sync": "^4.0.1"
       },
       "devDependencies": {
         "@actions/core": "^1.10.1",
@@ -2344,6 +2344,27 @@
         "url": "https://opencollective.com/libvips"
       }
     },
+    "node_modules/@isaacs/balanced-match": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/@isaacs/balanced-match/-/balanced-match-4.0.1.tgz",
+      "integrity": "sha512-yzMTt9lEb8Gv7zRioUilSglI0c0smZ9k5D65677DLWLtWJaXIS3CqcGyUFByYKlnUj6TkjLVs54fBl6+TiGQDQ==",
+      "license": "MIT",
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
+    "node_modules/@isaacs/brace-expansion": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@isaacs/brace-expansion/-/brace-expansion-5.0.0.tgz",
+      "integrity": "sha512-ZT55BDLV0yv0RBm2czMiZ+SqCGO7AvmOM3G/w2xhVPH+te0aKgFjmBvGlL1dH+ql2tgGO3MVrbb3jCKyvpgnxA==",
+      "license": "MIT",
+      "dependencies": {
+        "@isaacs/balanced-match": "^4.0.1"
+      },
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
     "node_modules/@isaacs/cliui": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -16311,35 +16332,39 @@
       }
     },
     "node_modules/walk-sync": {
-      "version": "3.0.0",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/walk-sync/-/walk-sync-4.0.1.tgz",
+      "integrity": "sha512-oXP3IlkfG9Mqdgqh3JGYTPAcryRQd1J1CJOxOgsri2I1MD6N+k4OqxEVP4ZQ0xyYJfYPhBVPRMUVK+N5f13+jQ==",
       "license": "MIT",
       "dependencies": {
-        "@types/minimatch": "^3.0.4",
-        "ensure-posix-path": "^1.1.0",
+        "@types/minimatch": "^5.1.2",
+        "ensure-posix-path": "^1.1.1",
         "matcher-collection": "^2.0.1",
-        "minimatch": "^3.0.4"
+        "minimatch": "^10.0.3"
       },
       "engines": {
-        "node": "10.* || >= 12.*"
+        "node": ">= 20.*"
       }
     },
-    "node_modules/walk-sync/node_modules/brace-expansion": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
-      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
-      "dependencies": {
-        "balanced-match": "^1.0.0",
-        "concat-map": "0.0.1"
-      }
+    "node_modules/walk-sync/node_modules/@types/minimatch": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/@types/minimatch/-/minimatch-5.1.2.tgz",
+      "integrity": "sha512-K0VQKziLUWkVKiRVrx4a40iPaxTUefQmjtkQofBkYRcoaaL/8rhwDWww9qWbrgicNOgnpIsMxyNIUM4+n6dUIA==",
+      "license": "MIT"
     },
     "node_modules/walk-sync/node_modules/minimatch": {
-      "version": "3.1.1",
+      "version": "10.0.3",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz",
+      "integrity": "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==",
       "license": "ISC",
       "dependencies": {
-        "brace-expansion": "^1.1.7"
+        "@isaacs/brace-expansion": "^5.0.0"
       },
       "engines": {
-        "node": "*"
+        "node": "20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
       }
     },
     "node_modules/web-namespaces": {
diff --git a/package.json b/package.json
index afcd29bce7e0..f67881bc8bb9 100644
--- a/package.json
+++ b/package.json
@@ -245,7 +245,7 @@
     "unified": "^11.0.5",
     "unist-util-visit": "^5.0.0",
     "url-template": "^3.1.1",
-    "walk-sync": "^3.0.0"
+    "walk-sync": "^4.0.1"
   },
   "devDependencies": {
     "@actions/core": "^1.10.1",