diff --git a/package.json b/package.json
index 005ba782c..24641297e 100644
--- a/package.json
+++ b/package.json
@@ -82,7 +82,7 @@
     "@types/vscode-webview": "^1.57.5",
     "@vscode/debugadapter-testsupport": "1.68.0",
     "@vscode/test-electron": "2.5.2",
-    "@vscode/vsce": "^3.5.0",
+    "@vscode/vsce": "^3.9.1",
     "chai": "^6.0.1",
     "cli-progress": "^3.12.0",
     "concurrently": "^9.2.1",
diff --git a/yarn.lock b/yarn.lock
index 89d0a4d36..53fd57a25 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1299,10 +1299,10 @@
   optionalDependencies:
     keytar "^7.7.0"
 
-"@vscode/vsce@^3.5.0":
-  version "3.7.1"
-  resolved "https://registry.yarnpkg.com/@vscode/vsce/-/vsce-3.7.1.tgz#55a88ae40e9618fea251e373bc6b23c128915654"
-  integrity sha512-OTm2XdMt2YkpSn2Nx7z2EJtSuhRHsTPYsSK59hr3v8jRArK+2UEoju4Jumn1CmpgoBLGI6ReHLJ/czYltNUW3g==
+"@vscode/vsce@^3.9.1":
+  version "3.9.1"
+  resolved "https://registry.yarnpkg.com/@vscode/vsce/-/vsce-3.9.1.tgz#cf273fe0895a14fe8a5e7fd88630bb5a5876ad6a"
+  integrity sha512-MPn5p+DoudI+3GfJSpAZZraE1lgLv0LcwbH3+xy7RgEhty3UIkmUMUA+5jPTDaxXae00AnX5u77FxGM8FhfKKA==
   dependencies:
     "@azure/identity" "^4.1.0"
     "@secretlint/node" "^10.1.2"
@@ -1331,7 +1331,7 @@
     typed-rest-client "^1.8.4"
     url-join "^4.0.1"
     xml2js "^0.5.0"
-    yauzl "^2.3.1"
+    yauzl "^3.2.1"
     yazl "^2.2.2"
   optionalDependencies:
     keytar "^7.7.0"
@@ -5208,6 +5208,14 @@ yauzl@^2.3.1:
     buffer-crc32 "~0.2.3"
     fd-slicer "~1.1.0"
 
+yauzl@^3.2.1:
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-3.3.0.tgz#5be5e287b9a8112941c177734a34bf61a3e11bb4"
+  integrity sha512-PtGEvEP30p7sbIBJKUBjUnqgTVOyMURc4dLo9iNyAJnNIEz9pm88cCXF21w94Kg3k6RXkeZh5DHOGS0qEONvNQ==
+  dependencies:
+    buffer-crc32 "~0.2.3"
+    pend "~1.2.0"
+
 yazl@^2.2.2:
   version "2.5.1"
   resolved "https://registry.yarnpkg.com/yazl/-/yazl-2.5.1.tgz#a3d65d3dd659a5b0937850e8609f22fffa2b5c35"