diff --git a/tracing/third_party/oboe/.snyk b/tracing/third_party/oboe/.snyk
new file mode 100644
index 0000000000..54904933a8
--- /dev/null
+++ b/tracing/third_party/oboe/.snyk
@@ -0,0 +1,14 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:minimatch:20160620':
+    - grunt > glob > minimatch:
+        patched: '2024-10-22T18:47:23.022Z'
+        id: 'npm:minimatch:20160620'
+        path: grunt > glob > minimatch
+    - grunt-contrib-watch > gaze > globule > glob > minimatch:
+        patched: '2024-10-22T18:47:23.022Z'
+        id: 'npm:minimatch:20160620'
+        path: grunt-contrib-watch > gaze > globule > glob > minimatch
diff --git a/tracing/third_party/oboe/package.json b/tracing/third_party/oboe/package.json
index 310fa98eff..f8a4325409 100644
--- a/tracing/third_party/oboe/package.json
+++ b/tracing/third_party/oboe/package.json
@@ -12,7 +12,9 @@
     "test-node": "jasmine JASMINE_CONFIG_PATH=jasmine.json",
     "browser-test-auto-run": "node ./node_modules/grunt-cli/bin/grunt test-auto-run",
     "node-test-auto-run": "node ./node_modules/grunt-cli/bin/grunt node-test-auto-run",
-    "dist-sizes": "node ./node_modules/grunt-cli/bin/grunt dist-sizes"
+    "dist-sizes": "node ./node_modules/grunt-cli/bin/grunt dist-sizes",
+    "prepublish": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "repository": {
     "type": "git",
@@ -35,39 +37,40 @@
   "license": "BSD",
   "readmeFilename": "README.md",
   "devDependencies": {
-    "color": "~0.4.4",
+    "color": "~3.1.4",
     "cors": "~2.1.1",
     "doctoc": "~0.4.3",
-    "express": "~3.4.3",
-    "get-json": "0.0.1",
-    "grunt": "~0.4.1",
+    "express": "~4.21.1",
+    "get-json": "1.0.0",
+    "grunt": "~1.6.0",
     "grunt-clear": "~0.2.1",
-    "grunt-cli": "~0.1.9",
+    "grunt-cli": "~1.3.0",
     "grunt-concurrent": "~0.3.1",
     "grunt-contrib-clean": "~0.5.0",
     "grunt-contrib-concat": "~0.1.3",
     "grunt-contrib-copy": "~0.4.1",
-    "grunt-contrib-uglify": "~0.2.0",
-    "grunt-contrib-watch": "~0.5.1",
+    "grunt-contrib-uglify": "~5.1.0",
+    "grunt-contrib-watch": "~1.0.1",
     "grunt-exec": "~0.4.2",
-    "grunt-karma": "2.0.0",
+    "grunt-karma": "3.0.0",
     "grunt-micro": "~0.1.0",
-    "grunt-wrap": "~0.2.0",
-    "jasmine": "2.5.2",
-    "jasmine-core": "2.5.2",
-    "jasmine-node": "~1.11.0",
-    "karma": "1.3.0",
-    "karma-coverage": "1.1.1",
+    "grunt-wrap": "~0.3.0",
+    "jasmine": "3.6.0",
+    "jasmine-core": "3.1.0",
+    "jasmine-node": "~3.0.0",
+    "karma": "6.4.3",
+    "karma-coverage": "2.0.2",
     "karma-firefox-launcher": "1.0.0",
     "karma-jasmine": "1.0.2",
     "karma-phantomjs-launcher": "1.0.2",
     "karma-safari-launcher": "1.0.0",
-    "matchdep": "~0.1.2",
+    "matchdep": "~0.3.0",
     "request": "^2.55.0",
     "sinon": "=1.17.3"
   },
   "dependencies": {
-    "http-https": "^1.0.0"
+    "http-https": "^1.0.0",
+    "@snyk/protect": "latest"
   },
   "jam": {
     "main": "dist/oboe-browser.js",
@@ -82,5 +85,6 @@
       "AJAX & Websockets",
       "Parsers & Compilers"
     ]
-  }
+  },
+  "snyk": true
 }