diff --git a/package-lock.json b/package-lock.json
index aadf90a099..c7cf55d9a7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -35967,9 +35967,9 @@
       }
     },
     "node_modules/which": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/which/-/which-6.0.1.tgz",
-      "integrity": "sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==",
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/which/-/which-7.0.0.tgz",
+      "integrity": "sha512-RancgH2dmbLdHl6LRhEqvklWMgl/Hdnun0Y90KhBOLkMefg8Qa7/Zel8Sm+8HEcP6DEjzsWzpkuBQEZok58isA==",
       "license": "ISC",
       "dependencies": {
         "isexe": "^4.0.0"
@@ -35978,7 +35978,7 @@
         "node-which": "bin/which.js"
       },
       "engines": {
-        "node": "^20.17.0 || >=22.9.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
     "node_modules/which-boxed-primitive": {
@@ -36606,7 +36606,7 @@
         "semver": "7.8.2",
         "title-case": "4.3.2",
         "valibot": "1.4.1",
-        "which": "6.0.1",
+        "which": "7.0.0",
         "yaml": "2.9.0"
       },
       "bin": {
diff --git a/packages/create-plugin/package.json b/packages/create-plugin/package.json
index 7ed28a584c..dd95229920 100644
--- a/packages/create-plugin/package.json
+++ b/packages/create-plugin/package.json
@@ -40,7 +40,7 @@
     "semver": "7.8.2",
     "title-case": "4.3.2",
     "valibot": "1.4.1",
-    "which": "6.0.1",
+    "which": "7.0.0",
     "yaml": "2.9.0"
   },
   "devDependencies": {