diff --git a/package-lock.json b/package-lock.json
index ba6b38a56..8d6ed713a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -73,11 +73,11 @@
         "@types/hapi__catbox-memory": "^6.0.2",
         "@types/hapi__cookie": "^12.0.5",
         "@types/hapi__crumb": "^7.3.7",
-        "@types/hapi__yar": "^10.1.6",
+        "@types/hapi__yar": "^11.0.2",
         "@types/hoek": "^4.1.7",
         "@types/jest": "^30.0.0",
         "@types/jsdom": "^21.1.7",
-        "@types/lodash": "^4.17.20",
+        "@types/lodash": "^4.17.21",
         "@types/mysql": "^2.15.27",
         "@types/node": "^24.10.1",
         "@types/nunjucks": "^3.2.6",
@@ -136,7 +136,7 @@
       },
       "engines": {
         "node": ">=22.11.0 <25.0.0",
-        "npm": "^10.9.0"
+        "npm": ">=10.9.0 <11.6.4"
       }
     },
     "node_modules/@adobe/css-tools": {
@@ -4917,13 +4917,6 @@
         "joi": "^17.3.0"
       }
     },
-    "node_modules/@types/hapi__catbox": {
-      "version": "10.2.6",
-      "resolved": "https://registry.npmjs.org/@types/hapi__catbox/-/hapi__catbox-10.2.6.tgz",
-      "integrity": "sha512-qdMHk4fBlwRfnBBDJaoaxb+fU9Ewi2xqkXD3mNjSPl2v/G/8IJbDpVRBuIcF7oXrcE8YebU5M8cCeKh1NXEn0w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/@types/hapi__catbox-memory": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/@types/hapi__catbox-memory/-/hapi__catbox-memory-6.0.2.tgz",
@@ -4960,16 +4953,14 @@
       }
     },
     "node_modules/@types/hapi__yar": {
-      "version": "10.1.6",
-      "resolved": "https://registry.npmjs.org/@types/hapi__yar/-/hapi__yar-10.1.6.tgz",
-      "integrity": "sha512-P7FOASHKDRxsG7wQJuw1USAyJhBDve46JyBUVmO+eqL/kymBpy+2fxZqTJqtegqSHjdqZWVZZEoUuDFP5erPpQ==",
+      "version": "11.0.2",
+      "resolved": "https://registry.npmjs.org/@types/hapi__yar/-/hapi__yar-11.0.2.tgz",
+      "integrity": "sha512-YJdec0AdCqZHPUh7KwWFZUKxm1/47pGAGX+/mI6X9tjkTGLNki3R28qKvP82diYyJWghZWJREDaq3HAXRhGezA==",
+      "deprecated": "This is a stub types definition. @hapi/yar provides its own type definitions, so you do not need this installed.",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@hapi/hapi": "^21.1.0",
-        "@types/hapi__catbox": "*",
-        "@types/node": "*",
-        "joi": "^17.7.0"
+        "@hapi/yar": "*"
       }
     },
     "node_modules/@types/hoek": {
@@ -5095,9 +5086,9 @@
       "license": "MIT"
     },
     "node_modules/@types/lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npmjs.org/@types/lodash/-/lodash-4.17.20.tgz",
-      "integrity": "sha512-H3MHACvFUEiujabxhaI/ImO6gUrd8oOurg7LQtS7mbwIXA/cUqWrvBsaeJ23aZEPk1TAYkurjfMbSELfoCXlGA==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/@types/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-FOvQ0YPD5NOfPgMzJihoT+Za5pdkDJWcbpuj1DjaKZIr/gxodQjY/uWEFlTNqW2ugXHUiL8lRQgw63dzKHZdeQ==",
       "dev": true,
       "license": "MIT"
     },
diff --git a/package.json b/package.json
index 93f32624c..d8343f120 100644
--- a/package.json
+++ b/package.json
@@ -133,11 +133,11 @@
     "@types/hapi__catbox-memory": "^6.0.2",
     "@types/hapi__cookie": "^12.0.5",
     "@types/hapi__crumb": "^7.3.7",
-    "@types/hapi__yar": "^10.1.6",
+    "@types/hapi__yar": "^11.0.2",
     "@types/hoek": "^4.1.7",
     "@types/jest": "^30.0.0",
     "@types/jsdom": "^21.1.7",
-    "@types/lodash": "^4.17.20",
+    "@types/lodash": "^4.17.21",
     "@types/mysql": "^2.15.27",
     "@types/node": "^24.10.1",
     "@types/nunjucks": "^3.2.6",