diff --git a/package-lock.json b/package-lock.json
index 7d730479..54efa986 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@adobe/helix-html-pipeline",
-  "version": "5.14.10",
+  "version": "5.14.11",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@adobe/helix-html-pipeline",
-      "version": "5.14.10",
+      "version": "5.14.11",
       "license": "Apache-2.0",
       "dependencies": {
         "@adobe/helix-markdown-support": "7.1.12",
@@ -20,7 +20,7 @@
         "hast-util-to-html": "9.0.5",
         "hast-util-to-string": "3.0.1",
         "hastscript": "9.0.1",
-        "jose": "6.0.8",
+        "jose": "6.0.10",
         "lodash.escape": "4.0.1",
         "mdast-util-to-hast": "13.2.0",
         "mdast-util-to-string": "4.0.0",
@@ -53,7 +53,7 @@
         "js-yaml": "4.1.0",
         "jsdom": "26.0.0",
         "junit-report-builder": "5.1.1",
-        "lint-staged": "15.4.3",
+        "lint-staged": "15.5.0",
         "mocha": "11.1.0",
         "mocha-multi-reporters": "1.5.1",
         "mocha-suppress-logs": "0.5.1",
@@ -5772,9 +5772,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "6.0.8",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.0.8.tgz",
-      "integrity": "sha512-EyUPtOKyTYq+iMOszO42eobQllaIjJnwkZ2U93aJzNyPibCy7CEvT9UQnaCVB51IAd49gbNdCew1c0LcLTCB2g==",
+      "version": "6.0.10",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.0.10.tgz",
+      "integrity": "sha512-skIAxZqcMkOrSwjJvplIPYrlXGpxTPnro2/QWTDCxAdWQrSTV5/KqspMWmi5WAx5+ULswASJiZ0a+1B/Lxt9cw==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -5987,9 +5987,9 @@
       "license": "MIT"
     },
     "node_modules/lint-staged": {
-      "version": "15.4.3",
-      "resolved": "https://registry.npmjs.org/lint-staged/-/lint-staged-15.4.3.tgz",
-      "integrity": "sha512-FoH1vOeouNh1pw+90S+cnuoFwRfUD9ijY2GKy5h7HS3OR7JVir2N2xrsa0+Twc1B7cW72L+88geG5cW4wIhn7g==",
+      "version": "15.5.0",
+      "resolved": "https://registry.npmjs.org/lint-staged/-/lint-staged-15.5.0.tgz",
+      "integrity": "sha512-WyCzSbfYGhK7cU+UuDDkzUiytbfbi0ZdPy2orwtM75P3WTtQBzmG40cCxIa8Ii2+XjfxzLH6Be46tUfWS85Xfg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index a99c8033..e6b13365 100644
--- a/package.json
+++ b/package.json
@@ -54,7 +54,7 @@
     "hast-util-to-html": "9.0.5",
     "hast-util-to-string": "3.0.1",
     "hastscript": "9.0.1",
-    "jose": "6.0.8",
+    "jose": "6.0.10",
     "lodash.escape": "4.0.1",
     "mdast-util-to-hast": "13.2.0",
     "mdast-util-to-string": "4.0.0",
@@ -87,7 +87,7 @@
     "js-yaml": "4.1.0",
     "jsdom": "26.0.0",
     "junit-report-builder": "5.1.1",
-    "lint-staged": "15.4.3",
+    "lint-staged": "15.5.0",
     "mocha": "11.1.0",
     "mocha-multi-reporters": "1.5.1",
     "mocha-suppress-logs": "0.5.1",