diff --git a/pkgs/by-name/da/dataform/package-lock.json b/pkgs/by-name/da/dataform/package-lock.json
index c89d0faa0138..d0ead8fcf7d7 100644
--- a/pkgs/by-name/da/dataform/package-lock.json
+++ b/pkgs/by-name/da/dataform/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@dataform/cli",
-    "version": "3.0.63",
+    "version": "3.0.64",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@dataform/cli",
-            "version": "3.0.63",
+            "version": "3.0.64",
             "license": "Apache-2.0",
             "dependencies": {
                 "@google-cloud/bigquery": "~8.3.0",
@@ -21,7 +21,7 @@
                 "object-sizeof": "^1.6.1",
                 "parse-duration": "^1.0.0",
                 "promise-pool-executor": "^1.1.1",
-                "protobufjs": "^7.6.3",
+                "protobufjs": "^7.6.5",
                 "readline-sync": "^1.4.9",
                 "semver": "^7.5.2",
                 "tarjan-graph": "^2.0.0",
@@ -151,9 +151,9 @@
             }
         },
         "node_modules/@isaacs/cliui/node_modules/ansi-regex": {
-            "version": "6.2.2",
-            "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
-            "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
+            "version": "6.3.0",
+            "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.3.0.tgz",
+            "integrity": "sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==",
             "license": "MIT",
             "engines": {
                 "node": ">=12"
@@ -303,9 +303,9 @@
             "license": "BSD-3-Clause"
         },
         "node_modules/@types/node": {
-            "version": "26.1.2",
-            "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz",
-            "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==",
+            "version": "26.2.0",
+            "resolved": "https://registry.npmjs.org/@types/node/-/node-26.2.0.tgz",
+            "integrity": "sha512-5IviulTZeRNp2vAJ514cc/HUlY5nZ9fCbq9DMyC52BrhFZACo3nI0R7qBxhQmo/d27NFe96ur/b7Wwxklda+kg==",
             "license": "MIT",
             "dependencies": {
                 "undici-types": "~8.3.0"
@@ -853,9 +853,9 @@
             }
         },
         "node_modules/gaxios": {
-            "version": "7.3.0",
-            "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.3.0.tgz",
-            "integrity": "sha512-RB5vLV+vvQeoFPCX4QMK6/hjVkbIamPp1QSUD0CiZcnj12qbpiL+pLbYtgD+oZkWl0tl9z+o2Utp+MpM3QRhBA==",
+            "version": "7.3.1",
+            "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.3.1.tgz",
+            "integrity": "sha512-kB3rzJV7d9juLZh8/56QTXCwQfxyhdOMdyYk1HdQKFtF8TJTDTZQJtixWIwXdE9Jji91mC41DUNpjleo4L4eAQ==",
             "license": "Apache-2.0",
             "dependencies": {
                 "extend": "^3.0.2",
diff --git a/pkgs/by-name/da/dataform/package.nix b/pkgs/by-name/da/dataform/package.nix
index 7d969162fee2..f1a5735d8ea1 100644
--- a/pkgs/by-name/da/dataform/package.nix
+++ b/pkgs/by-name/da/dataform/package.nix
@@ -13,7 +13,7 @@
 
 buildNpmPackage (finalAttrs: {
   pname = "dataform";
-  version = "3.0.63";
+  version = "3.0.64";
 
   __structuredAttrs = true;
   strictDeps = true;
@@ -22,7 +22,7 @@ buildNpmPackage (finalAttrs: {
 
   src = fetchurl {
     url = "https://registry.npmjs.org/@dataform/cli/-/cli-${finalAttrs.version}.tgz";
-    hash = "sha256-WAVTcWCZ99y+i7KTKWaqE5oMG+Uc/4d5h3Y6k9Bqhuo=";
+    hash = "sha256-ump4LsQzxkSsRzbBbJA4XxHW0C2abhfG+Wf10EZLt5g=";
   };
 
   # Inject the locally committed lockfile into the extracted source
@@ -30,7 +30,7 @@ buildNpmPackage (finalAttrs: {
     cp ${./package-lock.json} package-lock.json
   '';
 
-  npmDepsHash = "sha256-GLzkgs8ohGcWlNf55ktW4N1Q6HRJ+rse7wzBXC/xBno=";
+  npmDepsHash = "sha256-2Uzh78D9KQzJSpDYOSi2DmJBeKqXbZpLYXlSy+a3Bs4=";
 
   dontNpmBuild = true;