diff --git a/package-lock.json b/package-lock.json
index 371d621009d..4a0bb2244eb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,6 +7,7 @@
     "": {
       "name": "@google/gemini-cli",
       "version": "0.10.0-nightly.20251007.c195a9aa",
+      "hasInstallScript": true,
       "workspaces": [
         "packages/*"
       ],
@@ -18027,7 +18028,7 @@
         "mime": "4.0.7",
         "mnemonist": "^0.40.3",
         "open": "^10.1.2",
-        "picomatch": "^4.0.1",
+        "picomatch": "^4.0.4",
         "shell-quote": "^1.8.3",
         "simple-git": "^3.28.0",
         "strip-ansi": "^7.1.0",
@@ -18114,9 +18115,9 @@
       }
     },
     "packages/core/node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
       "license": "MIT",
       "engines": {
         "node": ">=12"
diff --git a/packages/core/package.json b/packages/core/package.json
index 43dc8e459d7..dd1d364b02f 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -57,7 +57,7 @@
     "mime": "4.0.7",
     "mnemonist": "^0.40.3",
     "open": "^10.1.2",
-    "picomatch": "^4.0.1",
+    "picomatch": "^4.0.4",
     "shell-quote": "^1.8.3",
     "simple-git": "^3.28.0",
     "strip-ansi": "^7.1.0",