diff --git a/frontend/README.md b/frontend/README.md
index 64a720f1e..4e43dcbb0 100644
--- a/frontend/README.md
+++ b/frontend/README.md
@@ -40,10 +40,9 @@ Other frontend documentation lives next to this file:
 
 `frontend/package.json` and root `package.json` declare matching `overrides`. Mirroring them keeps the npm workspace lockfile resolution consistent.
 
-| Override                           | Reason                                                                                                                                                                        |
-|------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| `"minimatch@~3.0": "^3.1.3"`       | Forces transitive `minimatch` resolutions onto the patched 3.1.x line. Defends against the ReDoS chain (`GHSA-3ppc-4f35-3m26`, `GHSA-7r86-cg39-jmmj`, `GHSA-23c5-xmqv-rm74`). |
-| `"serialize-javascript": "^7.0.5"` | Closes the `workbox-build` → `@rollup/plugin-terser` → `serialize-javascript` RCE advisory (`GHSA-5c6j-r48x-rmvq`, `GHSA-qj8w-gfj5-8c6v`).                                    |
+| Override                           | Reason                                                                                                                                     |
+|------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------|
+| `"serialize-javascript": "^7.0.5"` | Closes the `workbox-build` → `@rollup/plugin-terser` → `serialize-javascript` RCE advisory (`GHSA-5c6j-r48x-rmvq`, `GHSA-qj8w-gfj5-8c6v`). |
 
 When an upstream advisory is fully resolved, retire the override and rerun `make audit` plus a focused build/test pass before committing the cleanup.
 
diff --git a/frontend/package.json b/frontend/package.json
index d416f4e49..70c15ce4a 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -137,7 +137,6 @@
     "yarn": "please use npm"
   },
   "overrides": {
-    "minimatch@~3.0": "^3.1.3",
     "serialize-javascript": "^7.0.5"
   }
 }
diff --git a/package.json b/package.json
index 4f9faceb5..24afcd56e 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,6 @@
   "name": "photoprism",
   "private": true,
   "overrides": {
-    "minimatch@~3.0": "^3.1.3",
     "serialize-javascript": "^7.0.5"
   },
   "workspaces": [