diff --git a/cluster/pulumi/package-lock.json b/cluster/pulumi/package-lock.json
index a79a914f8a..e487e0eedc 100644
--- a/cluster/pulumi/package-lock.json
+++ b/cluster/pulumi/package-lock.json
@@ -1099,6 +1099,15 @@
                 "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
             }
         },
+        "node_modules/@gar/promise-retry": {
+            "version": "1.0.3",
+            "resolved": "https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.3.tgz",
+            "integrity": "sha512-GmzA9ckNokPypTg10pgpeHNQe7ph+iIKKmhKu3Ob9ANkswreCx7R3cKmY781K8QK3AqVL3xVh9A42JvIAbkkSA==",
+            "license": "MIT",
+            "engines": {
+                "node": "^20.17.0 || >=22.9.0"
+            }
+        },
         "node_modules/@google-cloud/paginator": {
             "version": "5.0.2",
             "resolved": "https://registry.npmjs.org/@google-cloud/paginator/-/paginator-5.0.2.tgz",
@@ -9913,11 +9922,12 @@
             "license": "BlueOak-1.0.0"
         },
         "node_modules/pacote": {
-            "version": "21.3.1",
-            "resolved": "https://registry.npmjs.org/pacote/-/pacote-21.3.1.tgz",
-            "integrity": "sha512-O0EDXi85LF4AzdjG74GUwEArhdvawi/YOHcsW6IijKNj7wm8IvEWNF5GnfuxNpQ/ZpO3L37+v8hqdVh8GgWYhg==",
+            "version": "21.5.1",
+            "resolved": "https://registry.npmjs.org/pacote/-/pacote-21.5.1.tgz",
+            "integrity": "sha512-KvcJ9iy3crysCsgqc4+PknH/w6jkrp8JN36mpZBPwNaDRwTfMZD37YzRazNstiZUOhuF5pno9f78n9mEJBavwg==",
             "license": "ISC",
             "dependencies": {
+                "@gar/promise-retry": "^1.0.0",
                 "@npmcli/git": "^7.0.0",
                 "@npmcli/installed-package-contents": "^4.0.0",
                 "@npmcli/package-json": "^7.0.0",
@@ -9931,7 +9941,6 @@
                 "npm-pick-manifest": "^11.0.1",
                 "npm-registry-fetch": "^19.0.0",
                 "proc-log": "^6.0.0",
-                "promise-retry": "^2.0.1",
                 "sigstore": "^4.0.0",
                 "ssri": "^13.0.0",
                 "tar": "^7.4.3"