diff --git a/package-lock.json b/package-lock.json
index 421da15..5b57072 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -21,7 +21,7 @@
         "jest": "^29.7.0",
         "octokit": "^3.1.2",
         "semver": "^7.8.5",
-        "spdx-expression-parse": "^4.0.0",
+        "spdx-expression-parse": "^5.0.0",
         "spdx-satisfies": "^6.0.0",
         "ts-jest": "^29.4.11",
         "yaml": "^2.9.0",
@@ -30,7 +30,7 @@
       "devDependencies": {
         "@types/jest": "^29.5.14",
         "@types/node": "^24",
-        "@types/spdx-expression-parse": "^3.0.4",
+        "@types/spdx-expression-parse": "^4.0.0",
         "@typescript-eslint/eslint-plugin": "^6.21.0",
         "@typescript-eslint/parser": "^6.21.0",
         "@vercel/ncc": "^0.44.0",
@@ -2712,10 +2712,11 @@
       "dev": true
     },
     "node_modules/@types/spdx-expression-parse": {
-      "version": "3.0.5",
-      "resolved": "https://registry.npmjs.org/@types/spdx-expression-parse/-/spdx-expression-parse-3.0.5.tgz",
-      "integrity": "sha512-XrojSCTzVxPAfWeAiw8Hg27OW/4jalE7yiohCHRPprqfPyt2oG+Osy1HstUPMF26cEdno3IeEhv31Pzl0wwsQw==",
-      "dev": true
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@types/spdx-expression-parse/-/spdx-expression-parse-4.0.0.tgz",
+      "integrity": "sha512-odQzy87phelGS4inXOzjmusx4hoCVD0IbxUANxHzVkmTzMRTNnUPoq1urIl7S1qf09KcDWKLFIftPmLtgbsAHA==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/@types/stack-utils": {
       "version": "2.0.3",
@@ -8452,9 +8453,9 @@
       "integrity": "sha512-/tTrYOC7PPI1nUAgx34hUpqXuyJG+DTHJTnIULG4rDygi4xu/tfgmq1e1cIRwRzwZgo4NLySi+ricLkZkw4i5A=="
     },
     "node_modules/spdx-expression-parse": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-4.0.0.tgz",
-      "integrity": "sha512-Clya5JIij/7C6bRR22+tnGXbc4VKlibKSVj2iHvVeX5iMW7s1SIQlqu699JkODJJIhh/pUu8L0/VLh8xflD+LQ==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-5.0.0.tgz",
+      "integrity": "sha512-vngmw3Rgn+o2arXNbnZaj5UtOEBuWBfvaI+Wc8GFfykIhA5/vdK9/Sp/XkLv63dykz2rxKDvKEHupF5P0FORcQ==",
       "license": "MIT",
       "dependencies": {
         "spdx-exceptions": "^2.1.0",
diff --git a/package.json b/package.json
index d6c5f17..8c9b2ac 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "jest": "^29.7.0",
     "octokit": "^3.1.2",
     "semver": "^7.8.5",
-    "spdx-expression-parse": "^4.0.0",
+    "spdx-expression-parse": "^5.0.0",
     "spdx-satisfies": "^6.0.0",
     "ts-jest": "^29.4.11",
     "yaml": "^2.9.0",
@@ -46,7 +46,7 @@
   "devDependencies": {
     "@types/jest": "^29.5.14",
     "@types/node": "^24",
-    "@types/spdx-expression-parse": "^3.0.4",
+    "@types/spdx-expression-parse": "^4.0.0",
     "@typescript-eslint/eslint-plugin": "^6.21.0",
     "@typescript-eslint/parser": "^6.21.0",
     "@vercel/ncc": "^0.44.0",