diff --git a/package-lock.json b/package-lock.json
index e2147af6b5..96fd454178 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,19 +1,19 @@
 {
   "name": "nativescript",
-  "version": "9.0.3",
+  "version": "9.0.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "nativescript",
-      "version": "9.0.3",
+      "version": "9.0.4",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
         "@foxt/js-srp": "0.0.3-patch2",
         "@nativescript/doctor": "2.0.17",
         "@nativescript/hook": "3.0.4",
-        "@npmcli/arborist": "9.1.8",
+        "@npmcli/arborist": "9.4.0",
         "@nstudio/trapezedev-project": "7.2.3",
         "@rigor789/resolve-package-path": "1.0.7",
         "archiver": "7.0.1",
@@ -919,9 +919,9 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "9.1.8",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.1.8.tgz",
-      "integrity": "sha512-TYAzq0oaXQU+uLfXFbR2wYx62qHIOSg/TYhGWJSphJDypyjdNXC7B/+k29ElC2vWlWfX4OJnhmSY5DTwSFiNpg==",
+      "version": "9.4.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.4.0.tgz",
+      "integrity": "sha512-4Bm8hNixJG/sii1PMnag0V9i/sGOX9VRzFrUiZMSBJpGlLR38f+Btl85d07G9GL56xO0l0OZjvrGNYsDYp0xKA==",
       "license": "ISC",
       "dependencies": {
         "@isaacs/string-locale-compare": "^1.1.0",
@@ -937,7 +937,7 @@
         "@npmcli/run-script": "^10.0.0",
         "bin-links": "^6.0.0",
         "cacache": "^20.0.1",
-        "common-ancestor-path": "^1.0.1",
+        "common-ancestor-path": "^2.0.0",
         "hosted-git-info": "^9.0.0",
         "json-stringify-nice": "^1.1.4",
         "lru-cache": "^11.2.1",
@@ -3399,10 +3399,13 @@
       }
     },
     "node_modules/common-ancestor-path": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-1.0.1.tgz",
-      "integrity": "sha512-L3sHRo1pXXEqX8VU28kfgUY+YGsk09hPqZiZmLacNib6XNTCM8ubYeT7ryXQw8asB1sKgcU5lkB7ONug08aB8w==",
-      "license": "ISC"
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-2.0.0.tgz",
+      "integrity": "sha512-dnN3ibLeoRf2HNC+OlCiNc5d2zxbLJXOtiZUudNFSXZrNSydxcCsSpRzXwfu7BBWCIfHPw+xTayeBvJCP/D8Ng==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">= 18"
+      }
     },
     "node_modules/compare-func": {
       "version": "2.0.0",
diff --git a/package.json b/package.json
index fd36d3b581..1494159541 100644
--- a/package.json
+++ b/package.json
@@ -57,7 +57,7 @@
     "@foxt/js-srp": "0.0.3-patch2",
     "@nativescript/doctor": "2.0.17",
     "@nativescript/hook": "3.0.4",
-    "@npmcli/arborist": "9.1.8",
+    "@npmcli/arborist": "9.4.0",
     "@nstudio/trapezedev-project": "7.2.3",
     "@rigor789/resolve-package-path": "1.0.7",
     "archiver": "7.0.1",