diff --git a/extensions/ql-vscode/package-lock.json b/extensions/ql-vscode/package-lock.json
index 90893140516..874c5a8df99 100644
--- a/extensions/ql-vscode/package-lock.json
+++ b/extensions/ql-vscode/package-lock.json
@@ -53,7 +53,7 @@
         "@babel/preset-typescript": "^7.26.0",
         "@eslint/js": "^9.28.0",
         "@faker-js/faker": "^9.0.3",
-        "@github/markdownlint-github": "^0.6.3",
+        "@github/markdownlint-github": "^0.8.0",
         "@jest/environment": "^30.0.0-alpha.7",
         "@jest/environment-jsdom-abstract": "^30.0.0-alpha.7",
         "@microsoft/eslint-formatter-sarif": "^3.1.0",
@@ -3337,12 +3337,16 @@
       "dev": true
     },
     "node_modules/@github/markdownlint-github": {
-      "version": "0.6.3",
-      "resolved": "https://registry.npmjs.org/@github/markdownlint-github/-/markdownlint-github-0.6.3.tgz",
-      "integrity": "sha512-3kneJRtM7istp9kxMZCbYTNaTrdJ+pR5Pox449Tb911gRcRhoy9I1G6D0/aZ2c/iD25mSC3X64qleOqEYukOKA==",
+      "version": "0.8.0",
+      "resolved": "https://registry.npmjs.org/@github/markdownlint-github/-/markdownlint-github-0.8.0.tgz",
+      "integrity": "sha512-079sWT/2Z8EI5v02GTtSfvG06E1m8Q6xjYoQiGdPg6rSKVntpfBw6in79fGs+vc9cYihBHl73vkOoDcyH/Jl8g==",
       "dev": true,
+      "license": "ISC",
       "dependencies": {
-        "lodash": "^4.17.15"
+        "lodash-es": "^4.17.15"
+      },
+      "engines": {
+        "node": ">=18"
       }
     },
     "node_modules/@gulpjs/messages": {
@@ -20683,6 +20687,13 @@
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
+    "node_modules/lodash-es": {
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz",
+      "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/lodash.camelcase": {
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
diff --git a/extensions/ql-vscode/package.json b/extensions/ql-vscode/package.json
index 79a1e0a1149..f62af896ad2 100644
--- a/extensions/ql-vscode/package.json
+++ b/extensions/ql-vscode/package.json
@@ -2045,7 +2045,7 @@
     "@babel/preset-typescript": "^7.26.0",
     "@eslint/js": "^9.28.0",
     "@faker-js/faker": "^9.0.3",
-    "@github/markdownlint-github": "^0.6.3",
+    "@github/markdownlint-github": "^0.8.0",
     "@jest/environment": "^30.0.0-alpha.7",
     "@jest/environment-jsdom-abstract": "^30.0.0-alpha.7",
     "@microsoft/eslint-formatter-sarif": "^3.1.0",