diff --git a/package-lock.json b/package-lock.json
index d8d8f63bb2..b58bb991aa 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MPL-2.0",
       "dependencies": {
         "blueimp-md5": "2.19.0",
-        "devbridge-autocomplete": "1.2.24",
+        "devbridge-autocomplete": "1.5.0",
         "jquery": "3.7.1",
         "jquery-contextmenu": "2.10.2",
         "jquery-datetimepicker": "2.5.21",
@@ -644,12 +644,12 @@
       }
     },
     "node_modules/devbridge-autocomplete": {
-      "version": "1.2.24",
-      "resolved": "https://registry.npmjs.org/devbridge-autocomplete/-/devbridge-autocomplete-1.2.24.tgz",
-      "integrity": "sha512-6M4H8B0V128HtLtW7v0k9bHnfy068EwttJyLRhZATRDZGoUFO0TsH8tZZcuasMinqtKvSvWZjUxfD7ayOQJSRg==",
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/devbridge-autocomplete/-/devbridge-autocomplete-1.5.0.tgz",
+      "integrity": "sha512-yz6W76PyXS9DtuyYbQtVcpxtkI8pQ02EQwZeNWnqUJXmM5jSmsPFKmpFEBneImcHwYJrMf3+6m86Hj2MRPELGQ==",
       "license": "MIT",
-      "dependencies": {
-        "jquery": ">=1.7"
+      "peerDependencies": {
+        "jquery": ">=1.9"
       }
     },
     "node_modules/diff": {
diff --git a/package.json b/package.json
index a2897a3efd..a6b15eb8c1 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
   "//": "The generated files are not committed; the Docker assets stage builds them from this lockfile. Dependabot proposes upgrades and CI tests them with no regeneration step needed; treat majors (jquery 4.x, mermaid 11.x, devbridge 2.x) as manual, tested reviews. A bump now moves a library's stylesheet along with its script, so review upgrades for visual changes too. bpopup is not published to npm and remains vendored under js/jquery/plugins/bPopup/.",
   "dependencies": {
     "blueimp-md5": "2.19.0",
-    "devbridge-autocomplete": "1.2.24",
+    "devbridge-autocomplete": "1.5.0",
     "jquery": "3.7.1",
     "jquery-contextmenu": "2.10.2",
     "jquery-datetimepicker": "2.5.21",