diff --git a/package-lock.json b/package-lock.json
index 536b474..d38a159 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/github": "^6.0.0",
         "@actions/tool-cache": "^2.0.1",
         "async-retry": "^1.3.3",
-        "which": "^4.0.0"
+        "which": "^5.0.0"
       },
       "devDependencies": {
         "@types/async-retry": "^1.4.8",
@@ -7727,9 +7727,9 @@
       }
     },
     "node_modules/which": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/which/-/which-4.0.0.tgz",
-      "integrity": "sha512-GlaYyEb07DPxYCKhKzplCWBJtvxZcZMrL+4UkrTSJHHPyZU4mYYTv3qaOe77H7EODLSSopAUFAc6W8U4yqvscg==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/which/-/which-5.0.0.tgz",
+      "integrity": "sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ==",
       "dependencies": {
         "isexe": "^3.1.1"
       },
@@ -7737,7 +7737,7 @@
         "node-which": "bin/which.js"
       },
       "engines": {
-        "node": "^16.13.0 || >=18.0.0"
+        "node": "^18.17.0 || >=20.5.0"
       }
     },
     "node_modules/which-boxed-primitive": {
diff --git a/package.json b/package.json
index a0ca091..e6642ba 100644
--- a/package.json
+++ b/package.json
@@ -63,7 +63,7 @@
     "@actions/github": "^6.0.0",
     "@actions/tool-cache": "^2.0.1",
     "async-retry": "^1.3.3",
-    "which": "^4.0.0"
+    "which": "^5.0.0"
   },
   "devDependencies": {
     "@types/async-retry": "^1.4.8",