diff --git a/cdk/package.json b/cdk/package.json
index 8c6709a..101f795 100644
--- a/cdk/package.json
+++ b/cdk/package.json
@@ -14,7 +14,7 @@
     "@types/node": "^24.0.0",
     "@vitest/ui": "^4.0.18",
     "aws-cdk": "2.1118.0",
-    "aws-cdk-github-oidc": "^2.4.1",
+    "aws-cdk-github-oidc": "^4.0.0",
     "ts-node": "^10.9.2",
     "typescript": "~5.9.3",
     "vitest": "^4.0.18"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 00ffcf8..e5dfbeb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -39,8 +39,8 @@ importers:
         specifier: 2.1118.0
         version: 2.1118.0
       aws-cdk-github-oidc:
-        specifier: ^2.4.1
-        version: 2.4.1(aws-cdk-lib@2.248.0(constructs@10.6.0))(constructs@10.6.0)
+        specifier: ^4.0.0
+        version: 4.1.0(aws-cdk-lib@2.248.0(constructs@10.6.0))(constructs@10.6.0)
       ts-node:
         specifier: ^10.9.2
         version: 10.9.2(@types/node@24.12.2)(typescript@5.9.3)
@@ -287,12 +287,12 @@ packages:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
 
-  aws-cdk-github-oidc@2.4.1:
-    resolution: {integrity: sha512-zKQYPGyf5f6APG76OpOxW6P7KGY/fC6VhN1ZullxySSu6RroUH9VtVl+cJ8hYes5XvEE/ZDpx2h2fPtNwZrcVQ==}
-    engines: {node: '>= 16.20.0'}
+  aws-cdk-github-oidc@4.1.0:
+    resolution: {integrity: sha512-+JluBwHo5JKqvx2wVZeNHgNQuc/8+t8ZcbneTr6bvFrStYHrApqXiYeA4B99xvz7EvYnFN8NY4gQQxGuhVA0xA==}
+    engines: {node: '>= 20 <= 24'}
     peerDependencies:
-      aws-cdk-lib: ^2.89.0
-      constructs: ^10.0.0
+      aws-cdk-lib: ^2.220.0
+      constructs: ^10.3.0
 
   aws-cdk-lib@2.248.0:
     resolution: {integrity: sha512-PGQycx/OdyX+t0o6QUFI1KJAOLoyIVj2WwrN0syrwCi8lYxW2KzldZsW0X+/UN/ALNQwcjSr927ImTpuDOh+bg==}
@@ -867,7 +867,7 @@ snapshots:
 
   assertion-error@2.0.1: {}
 
-  aws-cdk-github-oidc@2.4.1(aws-cdk-lib@2.248.0(constructs@10.6.0))(constructs@10.6.0):
+  aws-cdk-github-oidc@4.1.0(aws-cdk-lib@2.248.0(constructs@10.6.0))(constructs@10.6.0):
     dependencies:
       aws-cdk-lib: 2.248.0(constructs@10.6.0)
       constructs: 10.6.0