diff --git a/.github/actions/eng-metrics/package-lock.json b/.github/actions/eng-metrics/package-lock.json
index ba9adfafe8..9542de57c8 100644
--- a/.github/actions/eng-metrics/package-lock.json
+++ b/.github/actions/eng-metrics/package-lock.json
@@ -7,7 +7,6 @@
     "": {
       "name": "engineering-metrics-collector",
       "version": "1.0.0",
-      "license": "ISC",
       "dependencies": {
         "@google-cloud/bigquery": "^8.1.0",
         "dotenv": "^17.0.0",
@@ -3542,14 +3541,15 @@
       }
     },
     "node_modules/form-data": {
-      "version": "2.5.3",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.3.tgz",
-      "integrity": "sha512-XHIrMD0NpDrNM/Ckf7XJiBbLl57KEhT3+i3yY+eWm+cqYZJQTZrKo8Y8AWKnuV5GT4scfuUGt9LzNoIx3dU1nQ==",
+      "version": "2.5.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.5.tgz",
+      "integrity": "sha512-jqdObeR2rxZZbPSGL+3VckHMYtu+f9//KXBsVny6JSX/pa38Fy+bGjuG8eW/H6USNQWhLi8Num++cU2yOCNz4A==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
         "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
         "mime-types": "^2.1.35",
         "safe-buffer": "^5.2.1"
       },