diff --git a/packages/publish-flat/package.json b/packages/publish-flat/package.json
index 75108c2c..725babfc 100644
--- a/packages/publish-flat/package.json
+++ b/packages/publish-flat/package.json
@@ -8,7 +8,7 @@
     "@npmcli/arborist": "9.4.0",
     "commander": "14.0.3",
     "logdown": "3.3.1",
-    "npm-packlist": "10.0.3"
+    "npm-packlist": "10.0.4"
   },
   "description": "Publish your project without the dist directory",
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index 4f9b3311..1c0c26db 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9742,6 +9742,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"npm-packlist@npm:10.0.4":
+  version: 10.0.4
+  resolution: "npm-packlist@npm:10.0.4"
+  dependencies:
+    ignore-walk: "npm:^8.0.0"
+    proc-log: "npm:^6.0.0"
+  checksum: 10c0/500ec00ed5edc3f7136255a8c17dfd36fb718182af61a86a68768aa3b325f69739953fe8888fa8e4765db00e7892a9d0a30093b145d091b23e96b7d1bbf1187e
+  languageName: node
+  linkType: hard
+
 "npm-packlist@npm:^10.0.1":
   version: 10.0.2
   resolution: "npm-packlist@npm:10.0.2"
@@ -10972,7 +10982,7 @@ __metadata:
     "@types/npmcli__arborist": "npm:6.3.2"
     commander: "npm:14.0.3"
     logdown: "npm:3.3.1"
-    npm-packlist: "npm:10.0.3"
+    npm-packlist: "npm:10.0.4"
     rimraf: "npm:6.1.3"
     tsx: "npm:4.21.0"
     typescript: "npm:5.9.3"