diff --git a/packages/cli/package.json b/packages/cli/package.json
index a22fda1f5..0e80f85e1 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -118,7 +118,7 @@
     "newtype-ts": "^0.3.5",
     "query-string": "=7.0.0",
     "semver": "catalog:",
-    "undici": "6.27.0",
+    "undici": "6.28.0",
     "yaml": "catalog:",
     "yargs-parser": "^21.1.1"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d7483a0d1..4310dd389 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -392,8 +392,8 @@ importers:
         specifier: 'catalog:'
         version: 7.8.4
       undici:
-        specifier: 6.27.0
-        version: 6.27.0
+        specifier: 6.28.0
+        version: 6.28.0
       yaml:
         specifier: 'catalog:'
         version: 2.9.0
@@ -5459,8 +5459,8 @@ packages:
   undici-types@6.21.0:
     resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
 
-  undici@6.27.0:
-    resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
+  undici@6.28.0:
+    resolution: {integrity: sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==}
     engines: {node: '>=18.17'}
 
   unicode-emoji-modifier-base@1.0.0:
@@ -10028,7 +10028,7 @@ snapshots:
 
   undici-types@6.21.0: {}
 
-  undici@6.27.0: {}
+  undici@6.28.0: {}
 
   unicode-emoji-modifier-base@1.0.0: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 638da583c..f867b46de 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -49,6 +49,8 @@ minimumReleaseAgeExclude:
   - '@transcend-io/*'
   # Renovate security update: pnpm@10.34.4
   - pnpm@10.34.4
+  # Renovate security update: undici@6.28.0
+  - undici@6.28.0
 
 onlyBuiltDependencies:
   - esbuild