diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 7c8e28cd..8a49500e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -13,7 +13,7 @@ catalogs:
   security:
     '@clerk/nextjs': 6.31.2
     next: 15.5.10
-    vite: 6.4.1
+    vite: 8.0.9
 
 # Supply-chain hardening — see skills/stash-supply-chain-security/
 # 7 days in minutes; mirrors the Dependabot cooldown so manual + automated