diff --git a/deps/npm/package.json b/deps/npm/package.json
index a95496f1a3eb01..92217adfcb34e3 100644
--- a/deps/npm/package.json
+++ b/deps/npm/package.json
@@ -52,17 +52,17 @@
   },
   "dependencies": {
     "@isaacs/string-locale-compare": "^1.1.0",
-    "@npmcli/arborist": "^7.1.0",
+    "@npmcli/arborist": "^9.0.0",
     "@npmcli/config": "^7.2.0",
     "@npmcli/fs": "^3.1.0",
     "@npmcli/map-workspaces": "^3.0.4",
     "@npmcli/package-json": "^5.0.0",
     "@npmcli/promise-spawn": "^7.0.0",
-    "@npmcli/run-script": "^7.0.1",
-    "@sigstore/tuf": "^2.1.0",
+    "@npmcli/run-script": "^9.0.2",
+    "@sigstore/tuf": "^3.0.0",
     "abbrev": "^2.0.0",
     "archy": "~1.0.0",
-    "cacache": "^18.0.0",
+    "cacache": "^19.0.0",
     "chalk": "^5.3.0",
     "ci-info": "^3.8.0",
     "cli-columns": "^4.0.0",
@@ -77,34 +77,34 @@
     "init-package-json": "^6.0.0",
     "is-cidr": "^4.0.2",
     "json-parse-even-better-errors": "^3.0.0",
-    "libnpmaccess": "^8.0.0",
-    "libnpmdiff": "^6.0.1",
-    "libnpmexec": "^7.0.1",
-    "libnpmfund": "^4.1.1",
-    "libnpmhook": "^10.0.0",
-    "libnpmorg": "^6.0.0",
-    "libnpmpack": "^6.0.1",
-    "libnpmpublish": "^9.0.0",
-    "libnpmsearch": "^7.0.0",
-    "libnpmteam": "^6.0.0",
-    "libnpmversion": "^5.0.0",
-    "make-fetch-happen": "^13.0.0",
+    "libnpmaccess": "^9.0.0",
+    "libnpmdiff": "^8.0.8",
+    "libnpmexec": "^10.0.0",
+    "libnpmfund": "^7.0.0",
+    "libnpmhook": "^11.0.0",
+    "libnpmorg": "^7.0.0",
+    "libnpmpack": "^9.0.0",
+    "libnpmpublish": "^10.0.1",
+    "libnpmsearch": "^8.0.0",
+    "libnpmteam": "^7.0.0",
+    "libnpmversion": "^7.0.0",
+    "make-fetch-happen": "^14.0.1",
     "minimatch": "^9.0.3",
     "minipass": "^7.0.3",
     "minipass-pipeline": "^1.2.4",
     "ms": "^2.1.2",
-    "node-gyp": "^9.4.0",
+    "node-gyp": "^11.0.0",
     "nopt": "^7.2.0",
     "npm-audit-report": "^5.0.0",
     "npm-install-checks": "^6.2.0",
     "npm-package-arg": "^11.0.0",
     "npm-pick-manifest": "^9.0.0",
-    "npm-profile": "^9.0.0",
-    "npm-registry-fetch": "^16.0.0",
+    "npm-profile": "^11.0.1",
+    "npm-registry-fetch": "^18.0.1",
     "npm-user-validate": "^2.0.0",
     "npmlog": "^7.0.1",
     "p-map": "^4.0.0",
-    "pacote": "^17.0.4",
+    "pacote": "^21.0.1",
     "parse-conflict-json": "^3.0.1",
     "proc-log": "^3.0.0",
     "qrcode-terminal": "^0.12.0",
@@ -112,7 +112,7 @@
     "semver": "^7.5.4",
     "ssri": "^10.0.5",
     "supports-color": "^9.4.0",
-    "tar": "^6.1.15",
+    "tar": "^7.5.4",
     "text-table": "~0.2.0",
     "tiny-relative-date": "^1.3.0",
     "treeverse": "^3.0.0",