diff --git a/package.json b/package.json
index 8169bcf26..a0772e093 100644
--- a/package.json
+++ b/package.json
@@ -63,7 +63,7 @@
     "@graphql-tools/merge": "^9.0.0",
     "@graphql-tools/url-loader": "^8.0.0",
     "@graphql-tools/utils": "^10.0.0",
-    "cosmiconfig": "^8.1.0",
+    "cosmiconfig": "^9.0.0",
     "jiti": "^2.0.0",
     "minimatch": "^9.0.5",
     "string-env-interpolation": "^1.0.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fa0ec0bfa..764078fff 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -24,8 +24,8 @@ dependencies:
     specifier: ^10.0.0
     version: 10.5.4(graphql@16.9.0)
   cosmiconfig:
-    specifier: ^8.1.0
-    version: 8.3.6(typescript@5.6.3)
+    specifier: ^9.0.0
+    version: 9.0.0(typescript@5.6.3)
   jiti:
     specifier: ^2.0.0
     version: 2.3.3
@@ -1852,8 +1852,8 @@ packages:
       '@iarna/toml': 2.2.5
     dev: true
 
-  /cosmiconfig@8.3.6(typescript@5.6.3):
-    resolution: {integrity: sha512-kcZ6+W5QzcJ3P1Mt+83OUv/oHFqZHIx8DuxG6eZ5RGMERoLqp4BuGjhHLYGK+Kf5XVkQvqBSmAy/nGWN3qDgEA==}
+  /cosmiconfig@9.0.0(typescript@5.6.3):
+    resolution: {integrity: sha512-itvL5h8RETACmOTFc4UfIyB2RfEHi71Ax6E/PivVxq9NseKbOWpeyHEOIbmAw1rs8Ak0VursQNww7lf7YtUwzg==}
     engines: {node: '>=14'}
     peerDependencies:
       typescript: '>=4.9.5'
@@ -1861,10 +1861,10 @@ packages:
       typescript:
         optional: true
     dependencies:
+      env-paths: 2.2.1
       import-fresh: 3.3.0
       js-yaml: 4.1.0
       parse-json: 5.2.0
-      path-type: 4.0.0
       typescript: 5.6.3
     dev: false
 
@@ -1989,6 +1989,11 @@ packages:
       strip-ansi: 6.0.1
     dev: true
 
+  /env-paths@2.2.1:
+    resolution: {integrity: sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==}
+    engines: {node: '>=6'}
+    dev: false
+
   /environment@1.1.0:
     resolution: {integrity: sha512-xUtoPkMggbz0MPyPiIWr1Kp4aeWJjDZ6SMvURhimjdZgsRuDplF5/s9hcgGhyXMhs+6vpnuoiZ2kFiu3FMnS8Q==}
     engines: {node: '>=18'}