diff --git a/package.json b/package.json
index 114537ef..aaf55c4c 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "@babel/register": "^7.24.6",
     "flow-parser": "0.*",
     "graceful-fs": "^4.2.4",
-    "micromatch": "^4.0.7",
+    "picomatch": "^4.0.2",
     "neo-async": "^2.5.0",
     "picocolors": "^1.0.1",
     "recast": "^0.23.11",
diff --git a/src/ignoreFiles.js b/src/ignoreFiles.js
index 36f1645e..bdac5a69 100644
--- a/src/ignoreFiles.js
+++ b/src/ignoreFiles.js
@@ -1,7 +1,7 @@
 'use strict';
 
 const fs = require('fs');
-const mm = require('micromatch');
+const picomatch = require('picomatch');
 
 const matchers = [];
 
@@ -59,7 +59,7 @@ function addIgnoreFromFile(input) {
 }
 
 function shouldIgnore(path) {
-  const matched = matchers.length ? mm.isMatch(path, matchers, { dot:true }) : false;
+  const matched = matchers.length ? picomatch.isMatch(path, matchers, { dot:true }) : false;
   return matched;
 }
 
diff --git a/yarn.lock b/yarn.lock
index adff72a2..e7babce8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2851,7 +2851,7 @@ merge2@^1.3.0, merge2@^1.4.1:
   resolved "https://registry.yarnpkg.com/merge2/-/merge2-1.4.1.tgz#4368892f885e907455a6fd7dc55c0c9d404990ae"
   integrity sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==
 
-micromatch@^4.0.2, micromatch@^4.0.4, micromatch@^4.0.7:
+micromatch@^4.0.2, micromatch@^4.0.4:
   version "4.0.8"
   resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.8.tgz#d66fa18f3a47076789320b9b1af32bd86d9fa202"
   integrity sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==
@@ -3073,6 +3073,11 @@ picomatch@^2.0.4, picomatch@^2.2.3, picomatch@^2.3.1:
   resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.1.tgz#3ba3833733646d9d3e4995946c1365a67fb07a42"
   integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==
 
+picomatch@^4.0.2:
+  version "4.0.3"
+  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-4.0.3.tgz#796c76136d1eead715db1e7bad785dedd695a042"
+  integrity sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==
+
 pify@^4.0.1:
   version "4.0.1"
   resolved "https://registry.yarnpkg.com/pify/-/pify-4.0.1.tgz#4b2cd25c50d598735c50292224fd8c6df41e3231"