diff --git a/package-lock.json b/package-lock.json
index 5208287681..dc2742c4b4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MPL-2.0",
       "dependencies": {
         "blueimp-md5": "2.19.0",
-        "devbridge-autocomplete": "1.5.0",
+        "devbridge-autocomplete": "2.0.1",
         "jquery": "3.7.1",
         "jquery-contextmenu": "2.10.2",
         "jquery-datetimepicker": "2.5.21",
@@ -644,12 +644,15 @@
       }
     },
     "node_modules/devbridge-autocomplete": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/devbridge-autocomplete/-/devbridge-autocomplete-1.5.0.tgz",
-      "integrity": "sha512-yz6W76PyXS9DtuyYbQtVcpxtkI8pQ02EQwZeNWnqUJXmM5jSmsPFKmpFEBneImcHwYJrMf3+6m86Hj2MRPELGQ==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/devbridge-autocomplete/-/devbridge-autocomplete-2.0.1.tgz",
+      "integrity": "sha512-Y4ftxTnLVjfDfGXbhaIh3l6jrYQJuTQDLH1WoPkzd3XMKJo5eYFv83I53wXRxeuO3L2WWAYZA+oa0t5eiSMx0A==",
       "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      },
       "peerDependencies": {
-        "jquery": ">=1.9"
+        "jquery": ">=3.0"
       }
     },
     "node_modules/diff": {
diff --git a/package.json b/package.json
index a6b15eb8c1..705f43308a 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
   "//": "The generated files are not committed; the Docker assets stage builds them from this lockfile. Dependabot proposes upgrades and CI tests them with no regeneration step needed; treat majors (jquery 4.x, mermaid 11.x, devbridge 2.x) as manual, tested reviews. A bump now moves a library's stylesheet along with its script, so review upgrades for visual changes too. bpopup is not published to npm and remains vendored under js/jquery/plugins/bPopup/.",
   "dependencies": {
     "blueimp-md5": "2.19.0",
-    "devbridge-autocomplete": "1.5.0",
+    "devbridge-autocomplete": "2.0.1",
     "jquery": "3.7.1",
     "jquery-contextmenu": "2.10.2",
     "jquery-datetimepicker": "2.5.21",