diff --git a/packages/core/package.json b/packages/core/package.json
index 1950f5cde9..6a72e6cd2b 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -75,7 +75,7 @@
     "dotenv-expand": "11.0.7",
     "html-rspack-plugin": "6.0.2",
     "http-proxy-middleware": "^2.0.6",
-    "jiti": "^1.21.6",
+    "jiti": "^2.4.2",
     "launch-editor-middleware": "^2.9.1",
     "mrmime": "^2.0.0",
     "on-finished": "2.4.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index cd169a96a7..1e08998cca 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -647,8 +647,8 @@ importers:
         specifier: ^2.0.6
         version: 2.0.7
       jiti:
-        specifier: ^1.21.6
-        version: 1.21.6
+        specifier: ^2.4.2
+        version: 2.4.2
       launch-editor-middleware:
         specifier: ^2.9.1
         version: 2.9.1
@@ -669,7 +669,7 @@ importers:
         version: 8.4.49
       postcss-load-config:
         specifier: 6.0.1
-        version: 6.0.1(jiti@1.21.6)(postcss@8.4.49)(yaml@2.6.0)
+        version: 6.0.1(jiti@2.4.2)(postcss@8.4.49)(yaml@2.6.0)
       postcss-loader:
         specifier: 8.1.1
         version: 8.1.1(@rspack/core@1.1.6(@swc/helpers@0.5.15))(postcss@8.4.49)(typescript@5.7.2)(webpack@5.97.1)
@@ -1013,7 +1013,7 @@ importers:
         version: 3.2.4(svelte@5.14.0)
       svelte-preprocess:
         specifier: ^6.0.3
-        version: 6.0.3(@babel/core@7.26.0)(less@4.2.1)(postcss-load-config@6.0.1(jiti@1.21.6)(postcss@8.4.49)(yaml@2.6.0))(postcss@8.4.49)(sass@1.83.0)(stylus@0.64.0)(svelte@5.14.0)(typescript@5.7.2)
+        version: 6.0.3(@babel/core@7.26.0)(less@4.2.1)(postcss-load-config@6.0.1(jiti@2.4.2)(postcss@8.4.49)(yaml@2.6.0))(postcss@8.4.49)(sass@1.83.0)(stylus@0.64.0)(svelte@5.14.0)(typescript@5.7.2)
     devDependencies:
       '@rsbuild/core':
         specifier: workspace:*
@@ -4536,6 +4536,10 @@ packages:
     resolution: {integrity: sha512-2yTgeWTWzMWkHu6Jp9NKgePDaYHbntiwvYuuJLbbN9vl7DC9DvXKOB2BC3ZZ92D3cvV/aflH0osDfwpHepQ53w==}
     hasBin: true
 
+  jiti@2.4.2:
+    resolution: {integrity: sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A==}
+    hasBin: true
+
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
@@ -10335,6 +10339,8 @@ snapshots:
 
   jiti@1.21.6: {}
 
+  jiti@2.4.2: {}
+
   js-tokens@4.0.0: {}
 
   js-yaml@3.14.1:
@@ -11359,11 +11365,11 @@ snapshots:
     optionalDependencies:
       postcss: 8.4.49
 
-  postcss-load-config@6.0.1(jiti@1.21.6)(postcss@8.4.49)(yaml@2.6.0):
+  postcss-load-config@6.0.1(jiti@2.4.2)(postcss@8.4.49)(yaml@2.6.0):
     dependencies:
       lilconfig: 3.1.2
     optionalDependencies:
-      jiti: 1.21.6
+      jiti: 2.4.2
       postcss: 8.4.49
       yaml: 2.6.0
 
@@ -12182,14 +12188,14 @@ snapshots:
       svelte-dev-helper: 1.1.9
       svelte-hmr: 0.14.12(svelte@5.14.0)
 
-  svelte-preprocess@6.0.3(@babel/core@7.26.0)(less@4.2.1)(postcss-load-config@6.0.1(jiti@1.21.6)(postcss@8.4.49)(yaml@2.6.0))(postcss@8.4.49)(sass@1.83.0)(stylus@0.64.0)(svelte@5.14.0)(typescript@5.7.2):
+  svelte-preprocess@6.0.3(@babel/core@7.26.0)(less@4.2.1)(postcss-load-config@6.0.1(jiti@2.4.2)(postcss@8.4.49)(yaml@2.6.0))(postcss@8.4.49)(sass@1.83.0)(stylus@0.64.0)(svelte@5.14.0)(typescript@5.7.2):
     dependencies:
       svelte: 5.14.0
     optionalDependencies:
       '@babel/core': 7.26.0
       less: 4.2.1
       postcss: 8.4.49
-      postcss-load-config: 6.0.1(jiti@1.21.6)(postcss@8.4.49)(yaml@2.6.0)
+      postcss-load-config: 6.0.1(jiti@2.4.2)(postcss@8.4.49)(yaml@2.6.0)
       sass: 1.83.0
       stylus: 0.64.0
       typescript: 5.7.2