diff --git a/package-lock.json b/package-lock.json
index e2147af6b5..5c573a0f90 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "nativescript",
-  "version": "9.0.3",
+  "version": "9.0.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "nativescript",
-      "version": "9.0.3",
+      "version": "9.0.4",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -41,7 +41,7 @@
         "nativescript-dev-xcode": "0.8.1",
         "open": "8.4.2",
         "ora": "5.4.1",
-        "pacote": "21.0.4",
+        "pacote": "21.4.0",
         "pbxproj-dom": "1.2.0",
         "plist": "3.1.0",
         "plist-merge-patch": "0.2.0",
@@ -9387,11 +9387,12 @@
       "license": "BlueOak-1.0.0"
     },
     "node_modules/pacote": {
-      "version": "21.0.4",
-      "resolved": "https://registry.npmjs.org/pacote/-/pacote-21.0.4.tgz",
-      "integrity": "sha512-RplP/pDW0NNNDh3pnaoIWYPvNenS7UqMbXyvMqJczosiFWTeGGwJC2NQBLqKf4rGLFfwCOnntw1aEp9Jiqm1MA==",
+      "version": "21.4.0",
+      "resolved": "https://registry.npmjs.org/pacote/-/pacote-21.4.0.tgz",
+      "integrity": "sha512-DR7mn7HUOomAX1BORnpYy678qVIidbvOojkBscqy27dRKN+s/hLeQT1MeYYrx1Cxh62jyKjiWiDV7RTTqB+ZEQ==",
       "license": "ISC",
       "dependencies": {
+        "@gar/promise-retry": "^1.0.0",
         "@npmcli/git": "^7.0.0",
         "@npmcli/installed-package-contents": "^4.0.0",
         "@npmcli/package-json": "^7.0.0",
@@ -9405,7 +9406,6 @@
         "npm-pick-manifest": "^11.0.1",
         "npm-registry-fetch": "^19.0.0",
         "proc-log": "^6.0.0",
-        "promise-retry": "^2.0.1",
         "sigstore": "^4.0.0",
         "ssri": "^13.0.0",
         "tar": "^7.4.3"
diff --git a/package.json b/package.json
index fd36d3b581..b1784f8991 100644
--- a/package.json
+++ b/package.json
@@ -85,7 +85,7 @@
     "nativescript-dev-xcode": "0.8.1",
     "open": "8.4.2",
     "ora": "5.4.1",
-    "pacote": "21.0.4",
+    "pacote": "21.4.0",
     "pbxproj-dom": "1.2.0",
     "plist": "3.1.0",
     "plist-merge-patch": "0.2.0",