diff --git a/package-lock.json b/package-lock.json
index a88dae9904fb..8cfb0a98a538 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -139,7 +139,7 @@
         "eslint-plugin-jsx-a11y": "^6.8.0",
         "eslint-plugin-primer-react": "^5.3.0",
         "event-to-promise": "^0.8.0",
-        "graphql": "^16.8.1",
+        "graphql": "^16.9.0",
         "http-status-code": "^2.1.0",
         "husky": "^9.0.8",
         "json-schema-merge-allof": "^0.8.1",
@@ -7067,9 +7067,9 @@
       "dev": true
     },
     "node_modules/graphql": {
-      "version": "16.8.1",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.8.1.tgz",
-      "integrity": "sha512-59LZHPdGZVh695Ud9lRzPBVTtlX9ZCV150Er2W43ro37wVof0ctenSaskPPjN7lVTIN8mSZt8PHUNKZuNQUuxw==",
+      "version": "16.9.0",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.9.0.tgz",
+      "integrity": "sha512-GGTKBX4SD7Wdb8mqeDLni2oaRGYQWjWHGKPQ24ZMnUtKfcsVoiv4uX8+LJr1K6U5VW2Lu1BwJnj7uiori0YtRw==",
       "dev": true,
       "engines": {
         "node": "^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0"
diff --git a/package.json b/package.json
index 447a9fa4ffe7..8252803afcdd 100644
--- a/package.json
+++ b/package.json
@@ -355,7 +355,7 @@
     "eslint-plugin-jsx-a11y": "^6.8.0",
     "eslint-plugin-primer-react": "^5.3.0",
     "event-to-promise": "^0.8.0",
-    "graphql": "^16.8.1",
+    "graphql": "^16.9.0",
     "http-status-code": "^2.1.0",
     "husky": "^9.0.8",
     "json-schema-merge-allof": "^0.8.1",