diff --git a/package.json b/package.json
index a715a4cb62..916d693da7 100644
--- a/package.json
+++ b/package.json
@@ -133,7 +133,7 @@
       "undici@6": "^6.23.0",
       "undici@7": "^7.18.2",
       "tar": "^7.5.7",
-      "fast-xml-parser@5": "5.3.4",
+      "fast-xml-parser@5": "5.3.6",
       "hono": "4.11.7",
       "langsmith": ">=0.4.6",
       "lodash-es": "4.17.23"
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9f71667a7f..d703233edb 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -145,3 +145,5 @@ minimumReleaseAgeExclude:
   - vm2
   - tar
   - qs
+  # Renovate security update: fast-xml-parser@5@5.3.6
+  - fast-xml-parser@5@5.3.6