diff --git a/package-lock.json b/package-lock.json
index e9f9d0e5c..4b5b09bf9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -73,7 +73,7 @@
                 "@vscode/test-electron": "^2.5.2",
                 "@vscode/vsce": "^3.9.2",
                 "ansi-colors": "3.2.4",
-                "brace-expansion": "^5.0.7",
+                "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8",
                 "del": "2.2.0",
                 "devtools-protocol": "0.0.762508",
                 "eslint": "7.19.0",
@@ -3536,12 +3536,6 @@
                 "node": ">= 10.13.0"
             }
         },
-        "node_modules/balanced-match": {
-            "version": "1.0.2",
-            "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-            "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-            "dev": true
-        },
         "node_modules/bare-events": {
             "version": "2.4.2",
             "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.4.2.tgz",
@@ -3629,15 +3623,14 @@
             "dev": true
         },
         "node_modules/brace-expansion": {
-            "version": "5.0.7",
-            "resolved": "https://ms-feed-2.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-5.0.7.tgz",
-            "integrity": "sha1-Gw5GlltHna1lr3N7SgJ5CgVJgzc=",
+            "version": "5.0.8",
+            "resolved": "git+ssh://git@github.com/juliangruber/brace-expansion.git#96a63c0011c0288846ad41773c73e3fbd0906b59",
             "license": "MIT",
             "dependencies": {
                 "balanced-match": "^4.0.2"
             },
             "engines": {
-                "node": "18 || 20 || >=22"
+                "node": "20 || >=22"
             }
         },
         "node_modules/brace-expansion/node_modules/balanced-match": {
@@ -4136,13 +4129,6 @@
             "integrity": "sha1-3dgA2gxmEnOTzKWVDqloo6rxJTs=",
             "dev": true
         },
-        "node_modules/concat-map": {
-            "version": "0.0.1",
-            "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
-            "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
-            "dev": true,
-            "license": "MIT"
-        },
         "node_modules/configstore": {
             "version": "5.0.1",
             "resolved": "https://registry.npmjs.org/configstore/-/configstore-5.0.1.tgz",
@@ -6932,16 +6918,6 @@
                 "node": ">=6"
             }
         },
-        "node_modules/gulp-mocha/node_modules/brace-expansion": {
-            "version": "2.1.2",
-            "resolved": "https://ms-feed-12.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-2.1.2.tgz",
-            "integrity": "sha1-C7oicf631Fiw0xrRNiWqpHVEMeI=",
-            "dev": true,
-            "license": "MIT",
-            "dependencies": {
-                "balanced-match": "^1.0.0"
-            }
-        },
         "node_modules/gulp-mocha/node_modules/escape-string-regexp": {
             "version": "4.0.0",
             "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
@@ -9328,17 +9304,6 @@
                 "node": "*"
             }
         },
-        "node_modules/minimatch/node_modules/brace-expansion": {
-            "version": "1.1.16",
-            "resolved": "https://ms-feed-12.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-1.1.16.tgz",
-            "integrity": "sha1-cj06MMBVjCJavJ/Eeac+FOJsPC8=",
-            "dev": true,
-            "license": "MIT",
-            "dependencies": {
-                "balanced-match": "^1.0.0",
-                "concat-map": "0.0.1"
-            }
-        },
         "node_modules/minimist": {
             "version": "1.2.6",
             "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz",
@@ -16080,7 +16045,7 @@
                     "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
                     "dev": true,
                     "requires": {
-                        "brace-expansion": "^5.0.5"
+                        "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8"
                     }
                 },
                 "path-scurry": {
@@ -16835,12 +16800,6 @@
                 }
             }
         },
-        "balanced-match": {
-            "version": "1.0.2",
-            "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-            "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-            "dev": true
-        },
         "bare-events": {
             "version": "2.4.2",
             "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.4.2.tgz",
@@ -16912,9 +16871,8 @@
             "dev": true
         },
         "brace-expansion": {
-            "version": "5.0.7",
-            "resolved": "https://ms-feed-2.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-5.0.7.tgz",
-            "integrity": "sha1-Gw5GlltHna1lr3N7SgJ5CgVJgzc=",
+            "version": "git+ssh://git@github.com/juliangruber/brace-expansion.git#96a63c0011c0288846ad41773c73e3fbd0906b59",
+            "from": "brace-expansion@github:juliangruber/brace-expansion#v5.0.8",
             "requires": {
                 "balanced-match": "^4.0.2"
             },
@@ -17280,12 +17238,6 @@
             "integrity": "sha1-3dgA2gxmEnOTzKWVDqloo6rxJTs=",
             "dev": true
         },
-        "concat-map": {
-            "version": "0.0.1",
-            "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
-            "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
-            "dev": true
-        },
         "configstore": {
             "version": "5.0.1",
             "resolved": "https://registry.npmjs.org/configstore/-/configstore-5.0.1.tgz",
@@ -19272,7 +19224,7 @@
                     "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.7.tgz",
                     "integrity": "sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==",
                     "requires": {
-                        "brace-expansion": "^5.0.2"
+                        "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8"
                     }
                 },
                 "signal-exit": {
@@ -19640,15 +19592,6 @@
                     "integrity": "sha512-/6w/C21Pm1A7aZitlI5Ni/2J6FFQN8i1Cvz3kHABAAbw93v/NlvKdVOqz7CCWz/3iv/JplRSEEZ83XION15ovw==",
                     "dev": true
                 },
-                "brace-expansion": {
-                    "version": "2.1.2",
-                    "resolved": "https://ms-feed-12.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-2.1.2.tgz",
-                    "integrity": "sha1-C7oicf631Fiw0xrRNiWqpHVEMeI=",
-                    "dev": true,
-                    "requires": {
-                        "balanced-match": "^1.0.0"
-                    }
-                },
                 "escape-string-regexp": {
                     "version": "4.0.0",
                     "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
@@ -19734,7 +19677,7 @@
                     "integrity": "sha512-7RN35vit8DeBclkofOVmBY0eDAZZQd1HzmukRdSyz95CRh8FT54eqnbj0krQr3mrHR6sfRyYkyhwBWjoV5uqlQ==",
                     "dev": true,
                     "requires": {
-                        "brace-expansion": "^2.0.1"
+                        "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8"
                     }
                 },
                 "mocha": {
@@ -21258,19 +21201,7 @@
             "integrity": "sha512-twmL+S8+7yIsE9wsqgzU3E8/LumN3M3QELrBZ20OdmQ9jB2JvW5oZtBEmft84k/Gs5CG9mqtWc6Y9vW+JEzGxw==",
             "dev": true,
             "requires": {
-                "brace-expansion": "^1.1.7"
-            },
-            "dependencies": {
-                "brace-expansion": {
-                    "version": "1.1.16",
-                    "resolved": "https://ms-feed-12.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-1.1.16.tgz",
-                    "integrity": "sha1-cj06MMBVjCJavJ/Eeac+FOJsPC8=",
-                    "dev": true,
-                    "requires": {
-                        "balanced-match": "^1.0.0",
-                        "concat-map": "0.0.1"
-                    }
-                }
+                "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8"
             }
         },
         "minimist": {
@@ -21387,7 +21318,7 @@
                     "integrity": "sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==",
                     "dev": true,
                     "requires": {
-                        "brace-expansion": "^5.0.2"
+                        "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8"
                     }
                 },
                 "p-limit": {
diff --git a/package.json b/package.json
index 866cf417f..f54f50c27 100644
--- a/package.json
+++ b/package.json
@@ -1488,7 +1488,7 @@
         "@vscode/test-electron": "^2.5.2",
         "@vscode/vsce": "^3.9.2",
         "ansi-colors": "3.2.4",
-        "brace-expansion": "^5.0.7",
+        "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8",
         "del": "2.2.0",
         "devtools-protocol": "0.0.762508",
         "eslint": "7.19.0",
@@ -1540,6 +1540,7 @@
     ],
     "overrides": {
         "@babel/core": "7.29.6",
+        "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8",
         "js-yaml": "4.3.0",
         "serialize-javascript": "7.0.5",
         "mochawesome": {
diff --git a/test/smoke/package-lock.json b/test/smoke/package-lock.json
index fa55780fa..fe2b2bd4f 100644
--- a/test/smoke/package-lock.json
+++ b/test/smoke/package-lock.json
@@ -322,16 +322,15 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.7",
-      "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha1-Gw5GlltHna1lr3N7SgJ5CgVJgzc=",
+      "version": "5.0.8",
+      "resolved": "git+ssh://git@github.com/juliangruber/brace-expansion.git#96a63c0011c0288846ad41773c73e3fbd0906b59",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/browser-stdout": {
diff --git a/test/smoke/package.json b/test/smoke/package.json
index 20ca65202..4ec7d05b2 100644
--- a/test/smoke/package.json
+++ b/test/smoke/package.json
@@ -35,7 +35,7 @@
     "url-parse": "^1.5.10"
   },
   "overrides": {
-    "brace-expansion": "5.0.7",
+    "brace-expansion": "github:juliangruber/brace-expansion#v5.0.8",
     "serialize-javascript": "7.0.5"
   }
 }