diff --git a/package-lock.json b/package-lock.json
index 0adf5dc..ebad717 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -21,7 +21,7 @@
         "eslint-plugin-import": "^2.32.0",
         "eslint-plugin-jest": "^29.2.1",
         "jest": "^30.2.0",
-        "jose": "^5.9.6",
+        "jose": "^6.1.2",
         "markdownlint-cli": "^0.46.0",
         "nock": "^14.0.10",
         "prettier": "^3.6.2",
@@ -48,6 +48,15 @@
         "jose": "^5.10.0"
       }
     },
+    "node_modules/@actions/attest/node_modules/jose": {
+      "version": "5.10.0",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-5.10.0.tgz",
+      "integrity": "sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/panva"
+      }
+    },
     "node_modules/@actions/core": {
       "version": "1.11.1",
       "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
@@ -6059,9 +6068,10 @@
       }
     },
     "node_modules/jose": {
-      "version": "5.10.0",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-5.10.0.tgz",
-      "integrity": "sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg==",
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.1.2.tgz",
+      "integrity": "sha512-MpcPtHLE5EmztuFIqB0vzHAWJPpmN1E6L4oo+kze56LIs3MyXIj9ZHMDxqOvkP38gBR7K1v3jqd4WU2+nrfONQ==",
+      "dev": true,
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
diff --git a/package.json b/package.json
index ad0873c..e94db5a 100644
--- a/package.json
+++ b/package.json
@@ -82,7 +82,7 @@
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-jest": "^29.2.1",
     "jest": "^30.2.0",
-    "jose": "^5.9.6",
+    "jose": "^6.1.2",
     "markdownlint-cli": "^0.46.0",
     "nock": "^14.0.10",
     "prettier": "^3.6.2",