diff --git a/package-lock.json b/package-lock.json
index 9bc17a1e..41d16227 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
         "@types/node": "^25.9.1",
         "eslint": "^10.4.1",
         "jest": "^30.4.2",
-        "nock": "^14.0.11",
+        "nock": "^14.0.17",
         "prettier": "^3.8.3",
         "ts-jest": "^29.4.11",
         "typescript": "^6.0.2",
@@ -3775,9 +3775,9 @@
       }
     },
     "node_modules/@oclif/core": {
-      "version": "4.11.4",
-      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-4.11.4.tgz",
-      "integrity": "sha512-URwiQ5ALx/sJ2iH4vzXEd+H4K6NAI7LRs6Jag3hrgKEpGmaE6alfRC8qjO4GIgb6A3ACaJumqP9twi/M9ywdHQ==",
+      "version": "4.13.2",
+      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-4.13.2.tgz",
+      "integrity": "sha512-YWQs0JvESCliWopKtCZqPLgEB1e3oqR+KYecMReseYWbo7E73Rz2tFwQDFQtAp48VLMiAsiTPKKQaZAo+ghzLw==",
       "dependencies": {
         "ansi-escapes": "^4.3.2",
         "ansis": "^3.17.0",
@@ -3793,7 +3793,7 @@
         "semver": "^7.8.1",
         "string-width": "^4.2.3",
         "supports-color": "^8",
-        "tinyglobby": "^0.2.16",
+        "tinyglobby": "^0.2.17",
         "widest-line": "^3.1.0",
         "wordwrap": "^1.0.0",
         "wrap-ansi": "^7.0.0"
@@ -3828,9 +3828,9 @@
       }
     },
     "node_modules/@oclif/plugin-help": {
-      "version": "6.2.49",
-      "resolved": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-6.2.49.tgz",
-      "integrity": "sha512-fEsO0YU7ThtzHE1RGuoHxFu/OGlqxm7PCfFp+U1PS8sde4E0cDqjVDuv78+VKrr45LpC5lWOApj7pm3FNfHrVA==",
+      "version": "6.2.55",
+      "resolved": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-6.2.55.tgz",
+      "integrity": "sha512-IamFqLPoD8KTZbGSAu24EFe2kNibMrL/WA8+4EvnbdkYqZGUcizVqeXUIxzns3SES99wgqOtsK3DtLB3V3kIJQ==",
       "dependencies": {
         "@oclif/core": "^4"
       },
@@ -8243,11 +8243,11 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.2.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
-      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
       "dependencies": {
-        "brace-expansion": "^5.0.5"
+        "brace-expansion": "^5.0.8"
       },
       "engines": {
         "node": "18 || 20 || >=22"
@@ -8265,14 +8265,14 @@
       }
     },
     "node_modules/minimatch/node_modules/brace-expansion": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz",
-      "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/minimist": {
@@ -8360,10 +8360,9 @@
       }
     },
     "node_modules/nock": {
-      "version": "14.0.11",
-      "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.11.tgz",
-      "integrity": "sha512-u5xUnYE+UOOBA6SpELJheMCtj2Laqx15Vl70QxKo43Wz/6nMHXS7PrEioXLjXAwhmawdEMNImwKCcPhBJWbKVw==",
-      "license": "MIT",
+      "version": "14.0.17",
+      "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.17.tgz",
+      "integrity": "sha512-EjRr1weMa4ALQX35AgZTEnP+weJJjlW1KGDiNM2IQC2069YDHas4f4B4UUYR+TTLyKWxJvOz2wObDKQs/LNreA==",
       "dependencies": {
         "@mswjs/interceptors": "^0.41.0",
         "json-stringify-safe": "^5.0.1",
@@ -9830,9 +9829,9 @@
       "license": "MIT"
     },
     "node_modules/tinyglobby": {
-      "version": "0.2.16",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz",
-      "integrity": "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==",
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
       "dependencies": {
         "fdir": "^6.5.0",
         "picomatch": "^4.0.4"
@@ -10406,8 +10405,8 @@
       "license": "MIT",
       "dependencies": {
         "@oclif/color": "^1.0.13",
-        "@oclif/core": "^4",
-        "@oclif/plugin-help": "^6",
+        "@oclif/core": "^4.13.2",
+        "@oclif/plugin-help": "^6.2.55",
         "tuf-js": "6.0.0"
       },
       "bin": {
@@ -10446,7 +10445,7 @@
       "license": "MIT",
       "dependencies": {
         "@tufjs/canonical-json": "2.0.0",
-        "minimatch": "^10.2.1"
+        "minimatch": "^10.2.6"
       },
       "engines": {
         "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
@@ -10458,7 +10457,7 @@
       "license": "MIT",
       "dependencies": {
         "@tufjs/models": "5.0.0",
-        "nock": "^14.0.11"
+        "nock": "^14.0.17"
       },
       "engines": {
         "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
@@ -13220,9 +13219,9 @@
       }
     },
     "@oclif/core": {
-      "version": "4.11.4",
-      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-4.11.4.tgz",
-      "integrity": "sha512-URwiQ5ALx/sJ2iH4vzXEd+H4K6NAI7LRs6Jag3hrgKEpGmaE6alfRC8qjO4GIgb6A3ACaJumqP9twi/M9ywdHQ==",
+      "version": "4.13.2",
+      "resolved": "https://registry.npmjs.org/@oclif/core/-/core-4.13.2.tgz",
+      "integrity": "sha512-YWQs0JvESCliWopKtCZqPLgEB1e3oqR+KYecMReseYWbo7E73Rz2tFwQDFQtAp48VLMiAsiTPKKQaZAo+ghzLw==",
       "requires": {
         "ansi-escapes": "^4.3.2",
         "ansis": "^3.17.0",
@@ -13238,7 +13237,7 @@
         "semver": "^7.8.1",
         "string-width": "^4.2.3",
         "supports-color": "^8",
-        "tinyglobby": "^0.2.16",
+        "tinyglobby": "^0.2.17",
         "widest-line": "^3.1.0",
         "wordwrap": "^1.0.0",
         "wrap-ansi": "^7.0.0"
@@ -13260,9 +13259,9 @@
       }
     },
     "@oclif/plugin-help": {
-      "version": "6.2.49",
-      "resolved": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-6.2.49.tgz",
-      "integrity": "sha512-fEsO0YU7ThtzHE1RGuoHxFu/OGlqxm7PCfFp+U1PS8sde4E0cDqjVDuv78+VKrr45LpC5lWOApj7pm3FNfHrVA==",
+      "version": "6.2.55",
+      "resolved": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-6.2.55.tgz",
+      "integrity": "sha512-IamFqLPoD8KTZbGSAu24EFe2kNibMrL/WA8+4EvnbdkYqZGUcizVqeXUIxzns3SES99wgqOtsK3DtLB3V3kIJQ==",
       "requires": {
         "@oclif/core": "^4"
       }
@@ -13837,8 +13836,8 @@
       "version": "file:packages/cli",
       "requires": {
         "@oclif/color": "^1.0.13",
-        "@oclif/core": "^4",
-        "@oclif/plugin-help": "^6",
+        "@oclif/core": "^4.13.2",
+        "@oclif/plugin-help": "^6.2.55",
         "oclif": "^4.23.10",
         "shx": "^0.4.0",
         "tslib": "^2.8.1",
@@ -13849,14 +13848,14 @@
       "version": "file:packages/models",
       "requires": {
         "@tufjs/canonical-json": "2.0.0",
-        "minimatch": "^10.2.1"
+        "minimatch": "10.2.6"
       }
     },
     "@tufjs/repo-mock": {
       "version": "file:packages/repo-mock",
       "requires": {
         "@tufjs/models": "5.0.0",
-        "nock": "^14.0.11"
+        "nock": "^14.0.17"
       }
     },
     "@tybys/wasm-util": {
@@ -16469,11 +16468,11 @@
       "dev": true
     },
     "minimatch": {
-      "version": "10.2.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
-      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
       "requires": {
-        "brace-expansion": "^5.0.5"
+        "brace-expansion": "^5.0.8"
       },
       "dependencies": {
         "balanced-match": {
@@ -16482,9 +16481,9 @@
           "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA=="
         },
         "brace-expansion": {
-          "version": "5.0.6",
-          "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz",
-          "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+          "version": "5.0.9",
+          "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+          "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
           "requires": {
             "balanced-match": "^4.0.2"
           }
@@ -16553,9 +16552,9 @@
       }
     },
     "nock": {
-      "version": "14.0.11",
-      "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.11.tgz",
-      "integrity": "sha512-u5xUnYE+UOOBA6SpELJheMCtj2Laqx15Vl70QxKo43Wz/6nMHXS7PrEioXLjXAwhmawdEMNImwKCcPhBJWbKVw==",
+      "version": "14.0.17",
+      "resolved": "https://registry.npmjs.org/nock/-/nock-14.0.17.tgz",
+      "integrity": "sha512-EjRr1weMa4ALQX35AgZTEnP+weJJjlW1KGDiNM2IQC2069YDHas4f4B4UUYR+TTLyKWxJvOz2wObDKQs/LNreA==",
       "requires": {
         "@mswjs/interceptors": "^0.41.0",
         "json-stringify-safe": "^5.0.1",
@@ -17567,9 +17566,9 @@
       "dev": true
     },
     "tinyglobby": {
-      "version": "0.2.16",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz",
-      "integrity": "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==",
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
       "requires": {
         "fdir": "^6.5.0",
         "picomatch": "^4.0.4"
diff --git a/package.json b/package.json
index 5bfa6190..d41fa06f 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "@types/node": "^25.9.1",
     "eslint": "^10.4.1",
     "jest": "^30.4.2",
-    "nock": "^14.0.11",
+    "nock": "^14.0.17",
     "prettier": "^3.8.3",
     "ts-jest": "^29.4.11",
     "typescript": "^6.0.2",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 6b436a0b..471d8d1c 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -41,8 +41,8 @@
   ],
   "dependencies": {
     "@oclif/color": "^1.0.13",
-    "@oclif/core": "^4",
-    "@oclif/plugin-help": "^6",
+    "@oclif/core": "^4.13.2",
+    "@oclif/plugin-help": "^6.2.55",
     "tuf-js": "6.0.0"
   },
   "devDependencies": {
diff --git a/packages/models/package.json b/packages/models/package.json
index de54f517..8dffeed3 100644
--- a/packages/models/package.json
+++ b/packages/models/package.json
@@ -29,7 +29,7 @@
   "homepage": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme",
   "dependencies": {
     "@tufjs/canonical-json": "2.0.0",
-    "minimatch": "^10.2.1"
+    "minimatch": "^10.2.6"
   },
   "engines": {
     "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
diff --git a/packages/repo-mock/package.json b/packages/repo-mock/package.json
index b436268f..ea5adcf0 100644
--- a/packages/repo-mock/package.json
+++ b/packages/repo-mock/package.json
@@ -29,7 +29,7 @@
   "homepage": "https://github.com/theupdateframework/tuf-js/tree/main/packages/repo-mock#readme",
   "dependencies": {
     "@tufjs/models": "5.0.0",
-    "nock": "^14.0.11"
+    "nock": "^14.0.17"
   },
   "engines": {
     "node": "^22.22.2 || ^24.15.0 || >=26.0.0"