diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b4483f69c..2962bc7b8 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -512,8 +512,8 @@ importers:
         specifier: ^0.1.9
         version: 0.1.9
       undici:
-        specifier: ^7.24.4
-        version: 7.25.0
+        specifier: ^8.9.0
+        version: 8.9.0
       web-push:
         specifier: ^3.6.7
         version: 3.6.7
@@ -6124,18 +6124,18 @@ packages:
   undici-types@8.3.0:
     resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
 
-  undici@6.25.0:
-    resolution: {integrity: sha512-ZgpWDC5gmNiuY9CnLVXEH8rl50xhRCuLNA97fAUnKi8RRuV4E6KG31pDTsLVUKnohJE0I3XDrTeEydAXRw47xg==}
+  undici@6.28.0:
+    resolution: {integrity: sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==}
     engines: {node: '>=18.17'}
 
-  undici@7.25.0:
-    resolution: {integrity: sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==}
-    engines: {node: '>=20.18.1'}
-
   undici@7.29.0:
     resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
     engines: {node: '>=20.18.1'}
 
+  undici@8.9.0:
+    resolution: {integrity: sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==}
+    engines: {node: '>=22.19.0'}
+
   unicode-emoji-modifier-base@1.0.0:
     resolution: {integrity: sha512-yLSH4py7oFH3oG/9K+XWrz1pSi3dfUrWEnInbxMfArOfc1+33BlGPQtLsOYwvdMy11AwUBetYuaRxSPqgkq+8g==}
     engines: {node: '>=4'}
@@ -6420,7 +6420,7 @@ snapshots:
   '@actions/http-client@4.0.1':
     dependencies:
       tunnel: 0.0.6
-      undici: 6.25.0
+      undici: 6.28.0
 
   '@actions/io@3.0.2': {}
 
@@ -8046,7 +8046,7 @@ snapshots:
       p-filter: 4.1.0
       semantic-release: 25.0.8(typescript@7.0.2)
       tinyglobby: 0.2.16
-      undici: 7.25.0
+      undici: 7.29.0
       url-join: 5.0.0
     transitivePeerDependencies:
       - supports-color
@@ -10037,7 +10037,7 @@ snapshots:
       saxes: 6.0.0
       symbol-tree: 3.2.4
       tough-cookie: 6.0.1
-      undici: 7.25.0
+      undici: 7.29.0
       w3c-xmlserializer: 5.0.0
       webidl-conversions: 8.0.1
       whatwg-mimetype: 5.0.0
@@ -12213,12 +12213,12 @@ snapshots:
 
   undici-types@8.3.0: {}
 
-  undici@6.25.0: {}
-
-  undici@7.25.0: {}
+  undici@6.28.0: {}
 
   undici@7.29.0: {}
 
+  undici@8.9.0: {}
+
   unicode-emoji-modifier-base@1.0.0: {}
 
   unicorn-magic@0.1.0: {}
diff --git a/reference-implementation/package.json b/reference-implementation/package.json
index 45c81adc8..c3e02b80a 100644
--- a/reference-implementation/package.json
+++ b/reference-implementation/package.json
@@ -62,7 +62,7 @@
     "pino": "^10.3.1",
     "qs": "^6.15.3",
     "sqlite-vec": "^0.1.9",
-    "undici": "^7.24.4",
+    "undici": "^8.9.0",
     "web-push": "^3.6.7"
   },
   "devDependencies": {