diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6eef64737..e0e05a7b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bumped `minimatch` transitive dependency to `^3.1.3` via yarn resolutions. [#957](https://github.com/sourcebot-dev/sourcebot/pull/957)
 - Bumped `next` to `15.5.10`. [#960](https://github.com/sourcebot-dev/sourcebot/pull/960)
 - Bumped `nodemailer` to `7.0.11`. [#959](https://github.com/sourcebot-dev/sourcebot/pull/959)
+- Bumped `glob` transitive dependency to `^10.5.0` via scoped yarn resolutions. [#962](https://github.com/sourcebot-dev/sourcebot/pull/962)
 - Bumped `@react-email/preview-server` to `5.2.8`. [#961](https://github.com/sourcebot-dev/sourcebot/pull/961)
 
 ## [4.13.0] - 2026-02-27
diff --git a/package.json b/package.json
index 7f7855c84..2534f99df 100644
--- a/package.json
+++ b/package.json
@@ -32,6 +32,10 @@
         "@lezer/common": "1.3.0",
         "qs": "^6.14.2",
         "rollup": "^4.59.0",
-        "minimatch": "^3.1.3"
+        "minimatch": "^3.1.3",
+        "cacache/glob": "^10.5.0",
+        "node-gyp/glob": "^10.5.0",
+        "sucrase/glob": "^10.5.0",
+        "rimraf@npm:5.0.10/glob": "^10.5.0"
     }
 }
diff --git a/yarn.lock b/yarn.lock
index 6f074486d..b989f047d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -14047,9 +14047,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"glob@npm:^10.2.2, glob@npm:^10.3.10, glob@npm:^10.3.7":
-  version: 10.4.5
-  resolution: "glob@npm:10.4.5"
+"glob@npm:^10.5.0":
+  version: 10.5.0
+  resolution: "glob@npm:10.5.0"
   dependencies:
     foreground-child: "npm:^3.1.0"
     jackspeak: "npm:^3.1.2"
@@ -14059,7 +14059,7 @@ __metadata:
     path-scurry: "npm:^1.11.1"
   bin:
     glob: dist/esm/bin.mjs
-  checksum: 10c0/19a9759ea77b8e3ca0a43c2f07ecddc2ad46216b786bb8f993c445aee80d345925a21e5280c7b7c6c59e860a0154b84e4b2b60321fea92cd3c56b4a7489f160e
+  checksum: 10c0/100705eddbde6323e7b35e1d1ac28bcb58322095bd8e63a7d0bef1a2cdafe0d0f7922a981b2b48369a4f8c1b077be5c171804534c3509dfe950dde15fbe6d828
   languageName: node
   linkType: hard