diff --git a/workspaces/arborist/package.json b/workspaces/arborist/package.json
index 5b923f357347a..8732f41bf9c91 100644
--- a/workspaces/arborist/package.json
+++ b/workspaces/arborist/package.json
@@ -10,7 +10,7 @@
     "@npmcli/metavuln-calculator": "^5.0.0",
     "@npmcli/name-from-folder": "^1.0.1",
     "@npmcli/node-gyp": "^3.0.0",
-    "@npmcli/package-json": "^3.0.0",
+    "@npmcli/package-json": "^5.0.0",
     "@npmcli/query": "^3.0.0",
     "@npmcli/run-script": "^6.0.0",
     "bin-links": "^4.0.1",
diff --git a/workspaces/config/package.json b/workspaces/config/package.json
index 3d70a1565e741..e2de43e7a235c 100644
--- a/workspaces/config/package.json
+++ b/workspaces/config/package.json
@@ -38,12 +38,12 @@
   },
   "dependencies": {
     "@npmcli/map-workspaces": "^3.0.0",
-    "ini": "^3.0.0",
+    "ini": "^4.1.1",
     "nopt": "^7.0.0",
     "proc-log": "^3.0.0",
     "read-package-json-fast": "^3.0.0",
     "semver": "^7.3.5",
-    "walk-up-path": "^1.0.0"
+    "walk-up-path": "^3.0.1"
   },
   "engines": {
     "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
diff --git a/workspaces/libnpmhook/package.json b/workspaces/libnpmhook/package.json
index b157f97e685b4..dbfdf4ee708ce 100644
--- a/workspaces/libnpmhook/package.json
+++ b/workspaces/libnpmhook/package.json
@@ -33,7 +33,7 @@
   "license": "ISC",
   "dependencies": {
     "aproba": "^2.0.0",
-    "npm-registry-fetch": "^14.0.3"
+    "npm-registry-fetch": "^16.0.0"
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
diff --git a/workspaces/libnpmpublish/package.json b/workspaces/libnpmpublish/package.json
index c293d566d1dc2..0983e881deee3 100644
--- a/workspaces/libnpmpublish/package.json
+++ b/workspaces/libnpmpublish/package.json
@@ -40,7 +40,7 @@
   "homepage": "https://npmjs.com/package/libnpmpublish",
   "dependencies": {
     "normalize-package-data": "^5.0.0",
-    "npm-package-arg": "^10.1.0",
+    "npm-package-arg": "^11.0.1",
     "npm-registry-fetch": "^14.0.3",
     "semver": "^7.3.7",
     "ssri": "^10.0.1"