diff --git a/packages/cli-kit/package.json b/packages/cli-kit/package.json
index 43b31e0fc7..8bfec5cd54 100644
--- a/packages/cli-kit/package.json
+++ b/packages/cli-kit/package.json
@@ -145,7 +145,7 @@
     "liquidjs": "10.20.1",
     "lodash": "4.17.23",
     "macaddress": "0.5.3",
-    "minimatch": "9.0.5",
+    "minimatch": "9.0.6",
     "mrmime": "1.0.1",
     "network-interfaces": "1.1.0",
     "node-abort-controller": "3.1.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b57a8b9c07..1f15774c0f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -457,8 +457,8 @@ importers:
         specifier: 0.5.3
         version: 0.5.3
       minimatch:
-        specifier: 9.0.5
-        version: 9.0.5
+        specifier: 9.0.6
+        version: 9.0.6
       mrmime:
         specifier: 1.0.1
         version: 1.0.1
@@ -7371,6 +7371,10 @@ packages:
     resolution: {integrity: sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==}
     engines: {node: '>=16 || 14 >=14.17'}
 
+  minimatch@9.0.6:
+    resolution: {integrity: sha512-kQAVowdR33euIqeA0+VZTDqU+qo1IeVY+hrKYtZMio3Pg0P0vuh/kwRylLUddJhB6pf3q/botcOvRtx4IN1wqQ==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
   minimist-options@4.1.0:
     resolution: {integrity: sha512-Q4r8ghd80yhO/0j1O3B2BjweX3fiHg9cdOwjJd2J76Q135c+NDxGCqdYKQ1SKBuFfgWbAUzBfvYjPUEeNgqN1A==}
     engines: {node: '>= 6'}
@@ -12692,7 +12696,7 @@ snapshots:
       indent-string: 4.0.0
       is-wsl: 2.2.0
       js-yaml: 3.14.2
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       natural-orderby: 2.0.3
       object-treeify: 1.1.33
       password-prompt: 1.1.3
@@ -13536,7 +13540,7 @@ snapshots:
       jsonc-parser: 3.3.1
       line-column: 1.0.2
       lodash: 4.17.23
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       vscode-json-languageservice: 5.7.2
       vscode-uri: 3.1.0
     transitivePeerDependencies:
@@ -14316,7 +14320,7 @@ snapshots:
       debug: 4.4.0(supports-color@8.1.1)
       fast-glob: 3.3.3
       is-glob: 4.0.3
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       semver: 7.6.3
       ts-api-utils: 2.4.0(typescript@5.8.3)
       typescript: 5.8.3
@@ -16018,7 +16022,7 @@ snapshots:
       eslint: 9.39.3(jiti@2.6.1)
       eslint-import-context: 0.1.9(unrs-resolver@1.11.1)
       is-glob: 4.0.3
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       semver: 7.7.4
       stable-hash-x: 0.2.0
       unrs-resolver: 1.11.1
@@ -16642,7 +16646,7 @@ snapshots:
     dependencies:
       foreground-child: 3.3.1
       jackspeak: 3.4.3
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       minipass: 7.1.3
       package-json-from-dist: 1.0.1
       path-scurry: 1.11.1
@@ -16765,7 +16769,7 @@ snapshots:
       cosmiconfig: 8.3.6(typescript@5.8.3)
       graphql: 16.10.0
       jiti: 2.6.1
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       string-env-interpolation: 1.0.1
       tslib: 2.8.1
     transitivePeerDependencies:
@@ -16788,7 +16792,7 @@ snapshots:
       cosmiconfig: 8.3.6(typescript@5.8.3)
       graphql: 16.10.0
       jiti: 2.6.1
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       string-env-interpolation: 1.0.1
       tslib: 2.8.1
     transitivePeerDependencies:
@@ -17826,6 +17830,10 @@ snapshots:
     dependencies:
       brace-expansion: 2.0.2
 
+  minimatch@9.0.6:
+    dependencies:
+      brace-expansion: 5.0.3
+
   minimist-options@4.1.0:
     dependencies:
       arrify: 1.0.1
@@ -19755,7 +19763,7 @@ snapshots:
       '@gerrit0/mini-shiki': 1.27.2
       lunr: 2.3.9
       markdown-it: 14.1.1
-      minimatch: 9.0.5
+      minimatch: 9.0.6
       typescript: 5.8.3
       yaml: 2.7.0