diff --git a/pkgs/by-name/da/dataform/package-lock.json b/pkgs/by-name/da/dataform/package-lock.json
index 04a03cc2f8f4..88604564ed58 100644
--- a/pkgs/by-name/da/dataform/package-lock.json
+++ b/pkgs/by-name/da/dataform/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@dataform/cli",
-    "version": "3.0.70",
+    "version": "3.0.71",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@dataform/cli",
-            "version": "3.0.70",
+            "version": "3.0.71",
             "license": "Apache-2.0",
             "dependencies": {
                 "@google-cloud/bigquery": "~8.3.0",
@@ -16,11 +16,11 @@
                 "fs-extra": "^9.0.0",
                 "glob": "13.0.6",
                 "google-sql-syntax-ts": "^1.0.3",
-                "js-beautify": "^1.10.2",
+                "js-beautify": "1.15.4",
                 "js-yaml": "^4.3.2",
                 "moo": "^0.5.0",
                 "object-sizeof": "^1.6.1",
-                "parse-duration": "^1.0.0",
+                "parse-duration": "2.1.6",
                 "promise-pool-executor": "^1.1.1",
                 "protobufjs": "^7.6.5",
                 "readline-sync": "^1.4.9",
@@ -236,9 +236,9 @@
             }
         },
         "node_modules/@isaacs/cliui/node_modules/ansi-regex": {
-            "version": "6.3.0",
-            "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.3.0.tgz",
-            "integrity": "sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==",
+            "version": "6.4.0",
+            "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.4.0.tgz",
+            "integrity": "sha512-KzTVk2tCWAHtYrvvvaP8bJKJq2pVinhLcGEQdtLIYPbmNGNyYe8QwNaTUYQp2J7/vIsUKt5QCqAfUkYyG9DkOw==",
             "license": "MIT",
             "engines": {
                 "node": ">=12"
@@ -398,9 +398,9 @@
             "license": "BSD-3-Clause"
         },
         "node_modules/@types/node": {
-            "version": "26.6.2",
-            "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.2.tgz",
-            "integrity": "sha512-X1P21scMv4zGKLYqjdGjaKa7COa0RKVYYZZN/NfvLQ1JegxFhdhpZG/Lyn8AXx6CDUavKAd11v6BvfpkDByK8g==",
+            "version": "26.6.4",
+            "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.4.tgz",
+            "integrity": "sha512-ldVPDCzj7fsaGZrLB0NuHuTvJcsNasysBAqMolr/cgxrLd1xbqxIr3XJiPnHHJUCxj5sNF1vnRj9aWnrVh5Jcg==",
             "license": "MIT",
             "dependencies": {
                 "undici-types": "~8.9.0"
@@ -1594,9 +1594,9 @@
             "license": "BlueOak-1.0.0"
         },
         "node_modules/parse-duration": {
-            "version": "1.1.2",
-            "resolved": "https://registry.npmjs.org/parse-duration/-/parse-duration-1.1.2.tgz",
-            "integrity": "sha512-p8EIONG8L0u7f8GFgfVlL4n8rnChTt8O5FSxgxMz2tjc9FMP199wxVKVB6IbKx11uTbKHACSvaLVIKNnoeNR/A==",
+            "version": "2.1.6",
+            "resolved": "https://registry.npmjs.org/parse-duration/-/parse-duration-2.1.6.tgz",
+            "integrity": "sha512-1/A2Exg3NcJGcYdgV/dn4frR7vO2hOW/ohQ4KIgbT4W3raVcpYSszPWiL6I6cKufi4jQM5NbGRXLBj8AoLM4iQ==",
             "license": "MIT"
         },
         "node_modules/path-key": {
diff --git a/pkgs/by-name/da/dataform/package.nix b/pkgs/by-name/da/dataform/package.nix
index 8f0159919945..a7c190baa754 100644
--- a/pkgs/by-name/da/dataform/package.nix
+++ b/pkgs/by-name/da/dataform/package.nix
@@ -13,7 +13,7 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "dataform";
-  version = "3.0.70";
+  version = "3.0.71";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -22,7 +22,7 @@ buildNpmPackage (finalAttrs: {
 
   src = fetchurl {
     url = "https://registry.npmjs.org/@dataform/cli/-/cli-${finalAttrs.version}.tgz";
-    hash = "sha256-wNw+D8oZwR9Zn7wXvZxtA5HPLsfaO+pdHo7D/ZCrSUU=";
+    hash = "sha256-kqwLREOvZaMFy1bbkLB6dNJP/Hml+aET8gsnUb26hBg=";
   };
 
   # Inject the locally committed lockfile into the extracted source
@@ -30,7 +30,7 @@ buildNpmPackage (finalAttrs: {
     cp ${./package-lock.json} package-lock.json
   '';
 
-  npmDepsHash = "sha256-cPBhKHy16ZB8a9U4Nad7/0wguIvJgIYlxFEhbsjY9FY=";
+  npmDepsHash = "sha256-1V8f9jFUQ5eA7nimIZUnJQzX5EZfawdOyAXsqoFZHUk=";
 
   dontNpmBuild = true;