diff --git a/.changeset/dependabot-3859.md b/.changeset/dependabot-3859.md
new file mode 100644
index 0000000000..acf142fe57
--- /dev/null
+++ b/.changeset/dependabot-3859.md
@@ -0,0 +1,5 @@
+---
+"@prosopo/user-access-policy": patch
+---
+
+Bump mongoose from 9.11.2 to 9.11.4 in /packages/user-access-policy
diff --git a/packages/user-access-policy/package.json b/packages/user-access-policy/package.json
index 42d3187d8f..a87224b66a 100644
--- a/packages/user-access-policy/package.json
+++ b/packages/user-access-policy/package.json
@@ -65,7 +65,7 @@
 		"@types/yargs": "17.0.35",
 		"del-cli": "6.0.0",
 		"fast-glob": "3.3.3",
-		"mongoose": "9.11.2",
+		"mongoose": "9.11.4",
 		"typescript": "5.6.2",
 		"vite": "8.1.6",
 		"vitest": "5.0.4",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e95b09dc11..905d0c8c8a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -3327,8 +3327,8 @@ importers:
         specifier: 3.3.3
         version: 3.3.3
       mongoose:
-        specifier: 9.11.2
-        version: 9.11.2
+        specifier: 9.11.4
+        version: 9.11.4
       typescript:
         specifier: 5.6.2
         version: 5.6.2
@@ -9407,6 +9407,10 @@ packages:
     resolution: {integrity: sha512-hFkl/2dccpD58coRAya3a/ht8ooAx9YPLzBfxVX9bEsgcrjsNkvuWQe8gplGfDdmzpw2RfFX1IB/G8PiFwyvwg==}
     engines: {node: '>=20.19.0'}
 
+  mongoose@9.11.4:
+    resolution: {integrity: sha512-+xME0fduXl1sWF+NZpJHZaNcwQSt+X2vbJ/h7GRSZ/ltLycAkGZSEABhzic0+q3IMF66KqF0viEE5+frchKCAQ==}
+    engines: {node: '>=20.19.0'}
+
   mpath@0.9.0:
     resolution: {integrity: sha512-ikJRQTk8hw5DEoFVxHG1Gn9T/xcjtdnOKIU1JTmGjZZlg9LST2mBLmcX3/ICIbgJydT2GOc15RnNy5mHmzfSew==}
     engines: {node: '>=4.0.0'}
@@ -9415,6 +9419,10 @@ packages:
     resolution: {integrity: sha512-b2KQNsmgtkscfeDgkYMcWGn9vZI9YoXh802VDEwE6qc50zxBFQ0Oo8ROkawbPAsXCY1/Z1yp0MagqsZStPWJjw==}
     engines: {node: '>=20.19.0'}
 
+  mquery@6.0.1:
+    resolution: {integrity: sha512-/Nijmq3JcpHwDM+5CwBp5yEl6fUa6jLsIhPsoQywlGXU/ZrKIvSpBzfaGnW9BLqcne/CoUwd1ch7MRqptDgFTA==}
+    engines: {node: '>=20.19.0'}
+
   mri@1.2.0:
     resolution: {integrity: sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==}
     engines: {node: '>=4'}
@@ -17955,10 +17963,30 @@ snapshots:
       - snappy
       - socks
 
+  mongoose@9.11.4:
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      kareem: 3.4.1
+      mongodb: 7.7.0
+      mpath: 0.9.0
+      mquery: 6.0.1
+      ms: 2.1.3
+      sift: 17.1.3
+    transitivePeerDependencies:
+      - '@aws-sdk/credential-providers'
+      - '@mongodb-js/zstd'
+      - gcp-metadata
+      - kerberos
+      - mongodb-client-encryption
+      - snappy
+      - socks
+
   mpath@0.9.0: {}
 
   mquery@6.0.0: {}
 
+  mquery@6.0.1: {}
+
   mri@1.2.0: {}
 
   mrmime@2.0.1: {}