diff --git a/bpmn/package-lock.json b/bpmn/package-lock.json
index b2ad5a10e..dc6af7d25 100644
--- a/bpmn/package-lock.json
+++ b/bpmn/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "MIT",
       "dependencies": {
-        "bpmn-js": "18.0.0",
+        "bpmn-js": "18.1.1",
         "micro": "10.0.1",
         "pino": "9.5.0",
         "pino-debug": "^2.0.0",
@@ -613,12 +613,12 @@
       }
     },
     "node_modules/bpmn-js": {
-      "version": "18.0.0",
-      "resolved": "https://registry.npmjs.org/bpmn-js/-/bpmn-js-18.0.0.tgz",
-      "integrity": "sha512-eZR4hqk2BT0m9jAGGtp/f1TD0m7LXXKfYle99q75d+NjSmxetIuvxGn48S9W+H8arJ7vgsls2GELzXoDuEE0eg==",
+      "version": "18.1.1",
+      "resolved": "https://registry.npmjs.org/bpmn-js/-/bpmn-js-18.1.1.tgz",
+      "integrity": "sha512-7LN+f7y1u4FtbI/6lI3Elf2phEBa0RVr0YJZrSG46RyiHU9wY5NR2n9OIqKeuGJq1RJ/YMowMoUNDIBdmb9zbg==",
       "dependencies": {
         "bpmn-moddle": "^9.0.1",
-        "diagram-js": "^15.1.0",
+        "diagram-js": "^15.2.3",
         "diagram-js-direct-editing": "^3.2.0",
         "ids": "^1.0.5",
         "inherits-browser": "^0.1.0",
@@ -1023,9 +1023,9 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/diagram-js": {
-      "version": "15.1.0",
-      "resolved": "https://registry.npmjs.org/diagram-js/-/diagram-js-15.1.0.tgz",
-      "integrity": "sha512-Lrixuc4as/PGrkhf23k8yss+rLhyH2Zrln/CJxex0nOfC2P0ODb5lsDY0+MdDgjP2ADFFINqUXAGFcSSL8tw4g==",
+      "version": "15.2.3",
+      "resolved": "https://registry.npmjs.org/diagram-js/-/diagram-js-15.2.3.tgz",
+      "integrity": "sha512-C7MM5D7D0x6F5KsPzGmIPL/O9VoglTFSGrDnQNiFIA0SldC6WCwx/0nG9nS4Pwjtf7QeccaozF7FD1NAMHFs5Q==",
       "dependencies": {
         "@bpmn-io/diagram-js-ui": "^0.2.3",
         "clsx": "^2.1.0",
diff --git a/bpmn/package.json b/bpmn/package.json
index 621b9fec8..ee0543560 100644
--- a/bpmn/package.json
+++ b/bpmn/package.json
@@ -19,7 +19,7 @@
     "url": "https://github.com/yuzutech/kroki.git"
   },
   "dependencies": {
-    "bpmn-js": "18.0.0",
+    "bpmn-js": "18.1.1",
     "micro": "10.0.1",
     "pino": "9.5.0",
     "pino-debug": "^2.0.0",