diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 7ee98eee2d..7320139bd9 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -74,7 +74,7 @@
 				"windmill-parser-wasm-ts": "^1.382.2",
 				"windmill-sql-datatype-parser-wasm": "^1.318.0",
 				"y-monaco": "^0.1.4",
-				"y-websocket": "^1.5.0",
+				"y-websocket": "^1.5.4",
 				"yaml": "^2.3.4",
 				"yjs": "^13.6.7"
 			},
@@ -13563,9 +13563,10 @@
 			}
 		},
 		"node_modules/y-websocket": {
-			"version": "1.5.0",
-			"resolved": "https://registry.npmjs.org/y-websocket/-/y-websocket-1.5.0.tgz",
-			"integrity": "sha512-A8AO6XtnQlYwWFytWdkDCeXg4l8ghRTIw5h2YUgUYDmEC9ugWGIwYNW80yadhSFAF7CvuWTEkQNEpevnH6EiZw==",
+			"version": "1.5.4",
+			"resolved": "https://registry.npmjs.org/y-websocket/-/y-websocket-1.5.4.tgz",
+			"integrity": "sha512-Y3021uy0anOIHqAPyAZbNDoR05JuMEGjRNI8c+K9MHzVS8dWoImdJUjccljAznc8H2L7WkIXhRHZ1igWNRSgPw==",
+			"license": "MIT",
 			"dependencies": {
 				"lib0": "^0.2.52",
 				"lodash.debounce": "^4.0.8",
@@ -13575,6 +13576,10 @@
 				"y-websocket": "bin/server.js",
 				"y-websocket-server": "bin/server.js"
 			},
+			"engines": {
+				"node": ">=16.0.0",
+				"npm": ">=8.0.0"
+			},
 			"funding": {
 				"type": "GitHub Sponsors ❤",
 				"url": "https://github.com/sponsors/dmonad"
diff --git a/frontend/package.json b/frontend/package.json
index eefebf6099..d40bf226f0 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -147,7 +147,7 @@
 		"windmill-parser-wasm-ts": "^1.382.2",
 		"windmill-sql-datatype-parser-wasm": "^1.318.0",
 		"y-monaco": "^0.1.4",
-		"y-websocket": "^1.5.0",
+		"y-websocket": "^1.5.4",
 		"yaml": "^2.3.4",
 		"yjs": "^13.6.7"
 	},