diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a9c773b275d..20fe72d9bb4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -94,7 +94,7 @@ overrides:
   fast-uri@<3.1.6: 3.1.6
   flatted@<=3.4.1: 3.4.2
   follow-redirects@<=1.15.11: 1.16.0
-  ip-address@<10.3.1: 10.3.1
+  ip-address@<10.3.1: 10.7.1
   jws@<3.2.3: 3.2.3
   minimatch@>=9.0.0 <9.0.7: 9.0.7
   picomatch@>=3.0.0 <3.0.2: 3.0.2
@@ -10206,8 +10206,8 @@ packages:
     resolution: {integrity: sha512-EZBErytyVovD8f6pDfG3Kb37N6Y3lmDA9NNj+4+IP13CzzHGeX+OyeRM2Um13khRzoBSzzL+5lVnCX8V2RLeMg==}
     engines: {node: '>=12.22.0'}
 
-  ip-address@10.3.1:
-    resolution: {integrity: sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==}
+  ip-address@10.7.1:
+    resolution: {integrity: sha512-4OUAqU9Z1i3vCnS05hzGiFnEMDpQ+62pAD/MVQOp83fYyNC8GleCqaS0QikQBmcWCrKFiUs/B8ztRRiYOAXuCA==}
     engines: {node: '>= 12'}
 
   ipaddr.js@1.9.1:
@@ -25368,7 +25368,7 @@ snapshots:
   express-rate-limit@8.3.2(express@5.2.1):
     dependencies:
       express: 5.2.1
-      ip-address: 10.3.1
+      ip-address: 10.7.1
 
   express@4.22.2:
     dependencies:
@@ -26475,7 +26475,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  ip-address@10.3.1: {}
+  ip-address@10.7.1: {}
 
   ipaddr.js@1.9.1: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index c666252d1cd..f5abfea571f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -48,7 +48,7 @@ overrides:
   'fast-uri@<3.1.6': 3.1.6
   'flatted@<=3.4.1': 3.4.2
   'follow-redirects@<=1.15.11': 1.16.0
-  'ip-address@<10.3.1': 10.3.1
+  'ip-address@<10.3.1': 10.7.1
   'jws@<3.2.3': 3.2.3
   'minimatch@>=9.0.0 <9.0.7': 9.0.7
   'picomatch@>=3.0.0 <3.0.2': 3.0.2
@@ -83,6 +83,8 @@ minimumReleaseAgeExclude:
   - '@tanstack/start-storage-context@1.167.36'
   - 'pkglab'
   - 'pkglab-*'
+  # Renovate security update: ip-address@10.7.1
+  - ip-address@10.7.1
 
 trustPolicy: no-downgrade
 trustPolicyExclude: