diff --git a/workspaces/scanner/package.json b/workspaces/scanner/package.json
index d91d2595..8faf0236 100644
--- a/workspaces/scanner/package.json
+++ b/workspaces/scanner/package.json
@@ -80,7 +80,7 @@
     "@openally/mutex": "^2.0.0",
     "fastest-levenshtein": "^1.0.16",
     "frequency-set": "^2.1.0",
-    "pacote": "^21.0.0",
+    "pacote": "^22.0.0",
     "semver": "^7.5.4",
     "type-fest": "^5.0.1"
   },
diff --git a/workspaces/tarball/package.json b/workspaces/tarball/package.json
index 52019813..840247ef 100644
--- a/workspaces/tarball/package.json
+++ b/workspaces/tarball/package.json
@@ -54,7 +54,7 @@
     "@openally/result": "2.0.0",
     "hyperid": "4.0.0",
     "ipaddr.js": "2.4.0",
-    "pacote": "^21.0.0"
+    "pacote": "^22.0.0"
   },
   "devDependencies": {
     "get-folder-size": "^5.0.0"
diff --git a/workspaces/tree-walker/package.json b/workspaces/tree-walker/package.json
index e159892e..43cad24c 100644
--- a/workspaces/tree-walker/package.json
+++ b/workspaces/tree-walker/package.json
@@ -41,11 +41,11 @@
     "@nodesecure/mama": "2.3.1",
     "@nodesecure/npm-registry-sdk": "4.5.2",
     "@nodesecure/npm-types": "^1.4.0",
-    "@npmcli/arborist": "9.7.0",
+    "@npmcli/arborist": "9.8.0",
     "combine-async-iterators": "^3.0.0",
     "itertools": "^2.3.1",
     "npm-pick-manifest": "^12.0.0",
-    "pacote": "^21.0.0",
+    "pacote": "^22.0.0",
     "semver": "^7.6.0"
   },
   "devDependencies": {