diff --git a/.changeset/dependabot-d2ec7e9.md b/.changeset/dependabot-d2ec7e9.md
new file mode 100644
index 0000000000..efa4ec5510
--- /dev/null
+++ b/.changeset/dependabot-d2ec7e9.md
@@ -0,0 +1,11 @@
+---
+'@backstage/backend-defaults': patch
+'@backstage/cli': patch
+'@backstage/eslint-plugin': patch
+'@backstage/repo-tools': patch
+'@backstage/plugin-auth-backend': patch
+'@backstage/plugin-catalog-backend-module-github': patch
+'@backstage/plugin-catalog-backend': patch
+---
+
+build(deps): bump `minimatch` from 9.0.5 to 10.2.1
diff --git a/packages/backend-defaults/package.json b/packages/backend-defaults/package.json
index fe16ebcb13..6f705de7ba 100644
--- a/packages/backend-defaults/package.json
+++ b/packages/backend-defaults/package.json
@@ -176,7 +176,7 @@
     "lodash": "^4.17.21",
     "logform": "^2.3.2",
     "luxon": "^3.0.0",
-    "minimatch": "^9.0.0",
+    "minimatch": "^10.2.1",
     "mysql2": "^3.0.0",
     "node-fetch": "^2.7.0",
     "node-forge": "^1.3.2",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 52b2401b6c..1d7480ee51 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -112,7 +112,7 @@
     "jest-css-modules": "^2.1.0",
     "json-schema": "^0.4.0",
     "lodash": "^4.17.21",
-    "minimatch": "^9.0.0",
+    "minimatch": "^10.2.1",
     "node-stdlib-browser": "^1.3.1",
     "npm-packlist": "^5.0.0",
     "ora": "^5.3.0",
diff --git a/packages/eslint-plugin/package.json b/packages/eslint-plugin/package.json
index a0ae22f73a..bfc3996ee3 100644
--- a/packages/eslint-plugin/package.json
+++ b/packages/eslint-plugin/package.json
@@ -19,7 +19,7 @@
   },
   "dependencies": {
     "@manypkg/get-packages": "^1.1.3",
-    "minimatch": "^9.0.0"
+    "minimatch": "^10.2.1"
   },
   "devDependencies": {
     "@backstage/cli": "workspace:^",
diff --git a/packages/repo-tools/package.json b/packages/repo-tools/package.json
index d393556d7e..01e662bd48 100644
--- a/packages/repo-tools/package.json
+++ b/packages/repo-tools/package.json
@@ -78,7 +78,7 @@
     "knex-pglite": "^0.11.0",
     "knip": "^5.42.0",
     "lodash": "^4.17.21",
-    "minimatch": "^9.0.0",
+    "minimatch": "^10.2.1",
     "p-limit": "^3.0.2",
     "portfinder": "^1.0.32",
     "tar": "^7.5.6",
diff --git a/plugins/auth-backend/package.json b/plugins/auth-backend/package.json
index b8a5f21a49..da5f9c4ea6 100644
--- a/plugins/auth-backend/package.json
+++ b/plugins/auth-backend/package.json
@@ -63,7 +63,7 @@
     "lodash": "^4.17.21",
     "luxon": "^3.0.0",
     "matcher": "^4.0.0",
-    "minimatch": "^9.0.0",
+    "minimatch": "^10.2.1",
     "passport": "^0.7.0",
     "uuid": "^11.0.0",
     "zod": "^4.3.5",
diff --git a/plugins/catalog-backend-module-github/package.json b/plugins/catalog-backend-module-github/package.json
index 7f5368ec38..5787333e52 100644
--- a/plugins/catalog-backend-module-github/package.json
+++ b/plugins/catalog-backend-module-github/package.json
@@ -68,7 +68,7 @@
     "@octokit/webhooks-types": "^7.6.1",
     "git-url-parse": "^15.0.0",
     "lodash": "^4.17.21",
-    "minimatch": "^9.0.0",
+    "minimatch": "^10.2.1",
     "octokit": "^3.0.0",
     "uuid": "^11.0.0"
   },
diff --git a/plugins/catalog-backend/package.json b/plugins/catalog-backend/package.json
index 6d5dee8c28..8cb7b8f64d 100644
--- a/plugins/catalog-backend/package.json
+++ b/plugins/catalog-backend/package.json
@@ -89,7 +89,7 @@
     "knex": "^3.0.0",
     "lodash": "^4.17.21",
     "luxon": "^3.0.0",
-    "minimatch": "^9.0.0",
+    "minimatch": "^10.2.1",
     "p-limit": "^3.0.2",
     "prom-client": "^15.0.0",
     "uuid": "^11.0.0",
diff --git a/yarn.lock b/yarn.lock
index cee0c024bc..95649cddbb 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3030,7 +3030,7 @@ __metadata:
     lodash: "npm:^4.17.21"
     logform: "npm:^2.3.2"
     luxon: "npm:^3.0.0"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
     msw: "npm:^1.0.0"
     mysql2: "npm:^3.0.0"
     node-fetch: "npm:^2.7.0"
@@ -3388,7 +3388,7 @@ __metadata:
     json-schema: "npm:^0.4.0"
     lodash: "npm:^4.17.21"
     mini-css-extract-plugin: "npm:^2.4.2"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
     msw: "npm:^1.0.0"
     node-stdlib-browser: "npm:^1.3.1"
     nodemon: "npm:^3.0.1"
@@ -3822,7 +3822,7 @@ __metadata:
     "@manypkg/get-packages": "npm:^1.1.3"
     "@types/estree": "npm:^1.0.5"
     eslint: "npm:^8.33.0"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
   languageName: unknown
   linkType: soft
 
@@ -4768,7 +4768,7 @@ __metadata:
     lodash: "npm:^4.17.21"
     luxon: "npm:^3.0.0"
     matcher: "npm:^4.0.0"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
     msw: "npm:^1.0.0"
     passport: "npm:^0.7.0"
     supertest: "npm:^7.0.0"
@@ -5089,7 +5089,7 @@ __metadata:
     "@types/lodash": "npm:^4.14.151"
     git-url-parse: "npm:^15.0.0"
     lodash: "npm:^4.17.21"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
     msw: "npm:^2.0.0"
     octokit: "npm:^3.0.0"
     type-fest: "npm:^4.41.0"
@@ -5324,7 +5324,7 @@ __metadata:
     knex: "npm:^3.0.0"
     lodash: "npm:^4.17.21"
     luxon: "npm:^3.0.0"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
     msw: "npm:^2.0.0"
     p-limit: "npm:^3.0.2"
     prom-client: "npm:^15.0.0"
@@ -8010,7 +8010,7 @@ __metadata:
     knex-pglite: "npm:^0.11.0"
     knip: "npm:^5.42.0"
     lodash: "npm:^4.17.21"
-    minimatch: "npm:^9.0.0"
+    minimatch: "npm:^10.2.1"
     p-limit: "npm:^3.0.2"
     portfinder: "npm:^1.0.32"
     tar: "npm:^7.5.6"
@@ -39384,7 +39384,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"minimatch@npm:^10.1.1, minimatch@npm:^10.2.0":
+"minimatch@npm:^10.1.1, minimatch@npm:^10.2.0, minimatch@npm:^10.2.1":
   version: 10.2.1
   resolution: "minimatch@npm:10.2.1"
   dependencies:
@@ -39411,7 +39411,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"minimatch@npm:^9.0.0, minimatch@npm:^9.0.4, minimatch@npm:^9.0.5":
+"minimatch@npm:^9.0.4, minimatch@npm:^9.0.5":
   version: 9.0.5
   resolution: "minimatch@npm:9.0.5"
   dependencies: