diff --git a/workspaces/arborist/package.json b/workspaces/arborist/package.json
index 01e3db329ad50..bfe06c3124a1f 100644
--- a/workspaces/arborist/package.json
+++ b/workspaces/arborist/package.json
@@ -5,15 +5,15 @@
   "dependencies": {
     "@isaacs/string-locale-compare": "^1.1.0",
     "@npmcli/installed-package-contents": "^1.0.7",
-    "@npmcli/map-workspaces": "^2.0.0",
-    "@npmcli/metavuln-calculator": "^3.0.1",
+    "@npmcli/map-workspaces": "^3.0.3",
+    "@npmcli/metavuln-calculator": "^7.0.0",
     "@npmcli/move-file": "^2.0.0",
     "@npmcli/name-from-folder": "^1.0.1",
     "@npmcli/node-gyp": "^2.0.0",
     "@npmcli/package-json": "^2.0.0",
-    "@npmcli/run-script": "^3.0.0",
-    "bin-links": "^3.0.0",
-    "cacache": "^16.0.0",
+    "@npmcli/run-script": "^7.0.2",
+    "bin-links": "^4.0.0",
+    "cacache": "^17.0.5",
     "common-ancestor-path": "^1.0.1",
     "json-parse-even-better-errors": "^2.3.1",
     "json-stringify-nice": "^1.1.4",
@@ -23,16 +23,16 @@
     "npm-install-checks": "^5.0.0",
     "npm-package-arg": "^9.0.0",
     "npm-pick-manifest": "^7.0.0",
-    "npm-registry-fetch": "^13.0.0",
+    "npm-registry-fetch": "^14.0.0",
     "npmlog": "^6.0.1",
-    "pacote": "^13.0.5",
+    "pacote": "^17.0.4",
     "parse-conflict-json": "^2.0.1",
     "proc-log": "^2.0.0",
     "promise-all-reject-late": "^1.0.0",
     "promise-call-limit": "^1.0.1",
     "read-package-json-fast": "^2.0.2",
     "readdir-scoped-modules": "^1.1.0",
-    "rimraf": "^3.0.2",
+    "rimraf": "^4.0.0",
     "semver": "^7.3.5",
     "ssri": "^9.0.0",
     "treeverse": "^2.0.0",