diff --git a/package-lock.json b/package-lock.json
index df32db5..489dc1c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "@actions/github": "^9.0.0",
         "adm-zip": "^0.5.16",
         "fast-glob": "^3.3.3",
-        "picomatch": "^4.0.3",
+        "picomatch": "^4.0.4",
         "xml2js": "^0.6.2"
       },
       "devDependencies": {
@@ -7166,9 +7166,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
       "license": "MIT",
       "engines": {
         "node": ">=12"
diff --git a/package.json b/package.json
index ad67906..71f69d3 100644
--- a/package.json
+++ b/package.json
@@ -42,7 +42,7 @@
     "@actions/github": "^9.0.0",
     "adm-zip": "^0.5.16",
     "fast-glob": "^3.3.3",
-    "picomatch": "^4.0.3",
+    "picomatch": "^4.0.4",
     "xml2js": "^0.6.2"
   },
   "devDependencies": {