diff --git a/package-lock.json b/package-lock.json
index f2ea7cb73..a437ca80f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9987,7 +9987,7 @@
       "dependencies": {
         "@tmcp/adapter-zod-v3": "0.2.1",
         "@tmcp/transport-stdio": "^0.4.0",
-        "minimatch": "^10.2.1",
+        "minimatch": "^10.2.3",
         "tmcp": "^1.16.0",
         "zod": "3.25.76"
       },
@@ -10017,15 +10017,15 @@
       }
     },
     "src/coalesce-mcp/node_modules/minimatch": {
-      "version": "10.2.1",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.1.tgz",
-      "integrity": "sha512-MClCe8IL5nRRmawL6ib/eT4oLyeKMGCghibcDWK+J0hh0Q8kqSdia6BvbRMVk6mPa6WqUa5uR2oxt6C5jd533A==",
+      "version": "10.2.3",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.3.tgz",
+      "integrity": "sha512-Rwi3pnapEqirPSbWbrZaa6N3nmqq4Xer/2XooiOKyV3q12ML06f7MOuc5DVH8ONZIFhwIYQ3yzPH4nt7iWHaTg==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "brace-expansion": "^5.0.2"
       },
       "engines": {
-        "node": "20 || >=22"
+        "node": "18 || 20 || >=22"
       },
       "funding": {
         "url": "https://github.com/sponsors/isaacs"
diff --git a/src/coalesce-mcp/package.json b/src/coalesce-mcp/package.json
index 3d2642bb0..18a6f6d41 100644
--- a/src/coalesce-mcp/package.json
+++ b/src/coalesce-mcp/package.json
@@ -31,7 +31,7 @@
   "dependencies": {
     "@tmcp/adapter-zod-v3": "0.2.1",
     "@tmcp/transport-stdio": "^0.4.0",
-    "minimatch": "^10.2.1",
+    "minimatch": "^10.2.3",
     "tmcp": "^1.16.0",
     "zod": "3.25.76"
   }