diff --git a/package.json b/package.json
index cf74d032ebc..eea12fdadaf 100644
--- a/package.json
+++ b/package.json
@@ -87,7 +87,7 @@
     "@commitlint/config-conventional": "^20.5.0",
     "@eslint/eslintrc": "^3.3.5",
     "@eslint/js": "9.31.0",
-    "@faker-js/faker": "^9.9.0",
+    "@faker-js/faker": "^10.0.0",
     "@octokit/rest": "^20.1.2",
     "@playwright/test": "^1.62.1",
     "@stylexjs/eslint-plugin": "0.19.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a9c773b275d..8ec4a8ea583 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -150,8 +150,8 @@ importers:
         specifier: 9.31.0
         version: 9.31.0
       '@faker-js/faker':
-        specifier: ^9.9.0
-        version: 9.9.0
+        specifier: ^10.0.0
+        version: 10.6.0
       '@octokit/rest':
         specifier: ^20.1.2
         version: 20.1.2
@@ -3289,9 +3289,9 @@ packages:
     resolution: {integrity: sha512-ReZxZ8pdnoI3tP/dNnJdnmAk7uLT4FjsKDGW7YeDdvdOMz2XCQSmSCM9IWlrXuWtMF9zeSB6WJtEhCQ41gQOfw==}
     hasBin: true
 
-  '@faker-js/faker@9.9.0':
-    resolution: {integrity: sha512-OEl393iCOoo/z8bMezRlJu+GlRGlsKbUAN7jKB6LhnKoqKve5DXRpalbItIIcwnCjs1k/FOPjFzcA6Qn+H+YbA==}
-    engines: {node: '>=18.0.0', npm: '>=9.0.0'}
+  '@faker-js/faker@10.6.0':
+    resolution: {integrity: sha512-3RQHgEtvL1Frl/d1cSreo7qhJ3Gk1OdNUai/CtZ8G+wYeRQnJih3s9xJ9/kgYekPQRdwgh0HXRPqMlzWGwivIQ==}
+    engines: {node: ^20.19.0 || ^22.13.0 || ^23.5.0 || >=24.0.0, npm: '>=10'}
 
   '@fastify/ajv-compiler@4.0.5':
     resolution: {integrity: sha512-KoWKW+MhvfTRWL4qrhUwAAZoaChluo0m0vbiJlGMt2GXvL4LVPQEjt8kSpHI3IBq5Rez8fg+XeH3cneztq+C7A==}
@@ -17946,7 +17946,7 @@ snapshots:
       find-up: 5.0.0
       js-yaml: 4.3.2
 
-  '@faker-js/faker@9.9.0': {}
+  '@faker-js/faker@10.6.0': {}
 
   '@fastify/ajv-compiler@4.0.5':
     dependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index c666252d1cd..54f927db30d 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -83,6 +83,8 @@ minimumReleaseAgeExclude:
   - '@tanstack/start-storage-context@1.167.36'
   - 'pkglab'
   - 'pkglab-*'
+  # Renovate security update: @faker-js/faker@10.5.0
+  - "@faker-js/faker@10.5.0"
 
 trustPolicy: no-downgrade
 trustPolicyExclude: