diff --git a/package-lock.json b/package-lock.json
index f482af21..0a25f169 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11660,7 +11660,7 @@
         "@types/mocha": "^10.0.10",
         "@types/sinon": "^22.0.0",
         "chai": "^6.2.2",
-        "graphql": "^16.14.2",
+        "graphql": "^17.0.0",
         "mocha": "^12.0.0",
         "nock": "^14.0.17",
         "nodemon": "^3.1.14",
@@ -11673,6 +11673,16 @@
         "node": ">= 24"
       }
     },
+    "packages/app/node_modules/graphql": {
+      "version": "17.0.2",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-17.0.2.tgz",
+      "integrity": "sha512-FRWbddMxfkjiB7z+aQDWIR+E34xo9I8c9mtK2RPv8PmMzKRvrdsreHL/Ui/TmwHJfhHChEtsFPyMHKI+xuarQQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^22.0.0 || ^24.0.0 || ^25.0.0 || >=26.0.0"
+      }
+    },
     "packages/app/node_modules/yaml": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
diff --git a/packages/app/package.json b/packages/app/package.json
index 4a6a5595..1dd10a7d 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -69,7 +69,7 @@
     "@types/mocha": "^10.0.10",
     "@types/sinon": "^22.0.0",
     "chai": "^6.2.2",
-    "graphql": "^16.14.2",
+    "graphql": "^17.0.0",
     "mocha": "^12.0.0",
     "nock": "^14.0.17",
     "nodemon": "^3.1.14",