diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 48d580b0..130f19af 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1231,8 +1231,8 @@ importers:
         specifier: ^0.17.0
         version: 0.17.0
       web-vitals:
-        specifier: ^2.1.4
-        version: 2.1.4
+        specifier: ^5.1.0
+        version: 5.1.0
 
   rspack/cra-ts:
     dependencies:
@@ -1259,8 +1259,8 @@ importers:
         specifier: ^0.17.0
         version: 0.17.0
       web-vitals:
-        specifier: ^2.1.4
-        version: 2.1.4
+        specifier: ^5.1.0
+        version: 5.1.0
 
   rspack/css-chunking-plugin:
     devDependencies:
@@ -8173,10 +8173,6 @@ packages:
   ccount@2.0.1:
     resolution: {integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==}
 
-  chai@5.2.1:
-    resolution: {integrity: sha512-5nFxhUrX0PqtyogoYOA8IPswy5sZFTOsBFl/9bNsmDLgsxYTzSZQJDPppDnZPTQbzSEm0hqGjWPzRemQCYbD6A==}
-    engines: {node: '>=18'}
-
   chai@5.3.3:
     resolution: {integrity: sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==}
     engines: {node: '>=18'}
@@ -14439,8 +14435,8 @@ packages:
   web-namespaces@2.0.1:
     resolution: {integrity: sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==}
 
-  web-vitals@2.1.4:
-    resolution: {integrity: sha512-sVWcwhU5mX6crfI5Vd2dC4qchyTqxV8URinzt25XqVh+bHEPGH4C3NPrNionCP7Obx59wrYEbNlw4Z8sjALzZg==}
+  web-vitals@5.1.0:
+    resolution: {integrity: sha512-ArI3kx5jI0atlTtmV0fWU3fjpLmq/nD3Zr1iFFlJLaqa5wLBkUSzINwBPySCX/8jRyjlmy1Volw1kz1g9XE4Jg==}
 
   webidl-conversions@3.0.1:
     resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
@@ -20271,7 +20267,7 @@ snapshots:
       '@types/chai': 5.2.2
       '@vitest/spy': 3.2.4
       '@vitest/utils': 3.2.4
-      chai: 5.2.1
+      chai: 5.3.3
       tinyrainbow: 2.0.0
 
   '@vitest/mocker@3.2.4(vite@7.1.1(@types/node@24.2.1)(jiti@2.5.1)(less@4.4.1)(lightningcss@1.30.1)(sass-embedded@1.88.0)(sass@1.92.1)(stylus@0.64.0)(terser@5.37.0)(tsx@4.19.2)(yaml@2.8.1))':
@@ -21239,7 +21235,7 @@ snapshots:
 
   babel-walk@3.0.0-canary-5:
     dependencies:
-      '@babel/types': 7.28.2
+      '@babel/types': 7.28.4
     optional: true
 
   bail@2.0.2: {}
@@ -21533,14 +21529,6 @@ snapshots:
 
   ccount@2.0.1: {}
 
-  chai@5.2.1:
-    dependencies:
-      assertion-error: 2.0.1
-      check-error: 2.1.1
-      deep-eql: 5.0.2
-      loupe: 3.2.0
-      pathval: 2.0.1
-
   chai@5.3.3:
     dependencies:
       assertion-error: 2.0.1
@@ -21807,8 +21795,8 @@ snapshots:
 
   constantinople@4.0.1:
     dependencies:
-      '@babel/parser': 7.28.3
-      '@babel/types': 7.28.2
+      '@babel/parser': 7.28.4
+      '@babel/types': 7.28.4
     optional: true
 
   constants-browserify@1.0.0: {}
@@ -29148,7 +29136,7 @@ snapshots:
       '@vitest/snapshot': 3.2.4
       '@vitest/spy': 3.2.4
       '@vitest/utils': 3.2.4
-      chai: 5.2.1
+      chai: 5.3.3
       debug: 4.4.1
       expect-type: 1.2.2
       magic-string: 0.30.17
@@ -29440,7 +29428,7 @@ snapshots:
 
   web-namespaces@2.0.1: {}
 
-  web-vitals@2.1.4: {}
+  web-vitals@5.1.0: {}
 
   webidl-conversions@3.0.1: {}
 
@@ -29843,8 +29831,8 @@ snapshots:
 
   with@7.0.2:
     dependencies:
-      '@babel/parser': 7.28.3
-      '@babel/types': 7.28.2
+      '@babel/parser': 7.28.4
+      '@babel/types': 7.28.4
       assert-never: 1.4.0
       babel-walk: 3.0.0-canary-5
     optional: true
diff --git a/rspack/cra-ts/package.json b/rspack/cra-ts/package.json
index c2efc403..26a4088a 100644
--- a/rspack/cra-ts/package.json
+++ b/rspack/cra-ts/package.json
@@ -28,6 +28,6 @@
     "@rspack/core": "1.5.2",
     "@rspack/plugin-react-refresh": "^1.5.0",
     "react-refresh": "^0.17.0",
-    "web-vitals": "^2.1.4"
+    "web-vitals": "^5.1.0"
   }
 }
diff --git a/rspack/cra/package.json b/rspack/cra/package.json
index 73de6dac..851698a9 100644
--- a/rspack/cra/package.json
+++ b/rspack/cra/package.json
@@ -28,6 +28,6 @@
     "@rspack/core": "1.5.2",
     "@rspack/plugin-react-refresh": "^1.5.0",
     "react-refresh": "^0.17.0",
-    "web-vitals": "^2.1.4"
+    "web-vitals": "^5.1.0"
   }
 }