diff --git a/Cargo.lock b/Cargo.lock
index 8bed4fb..39833cc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -439,9 +439,9 @@ dependencies = [
 
 [[package]]
 name = "regex-automata"
-version = "0.4.14"
+version = "0.4.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+checksum = "1f388202e4b80542a0921078cc23b6333bcf1409c1e3f86404cae4766a6131db"
 dependencies = [
  "aho-corasick",
  "memchr",
diff --git a/provenance/THIRD-PARTY-NOTICES.txt b/provenance/THIRD-PARTY-NOTICES.txt
index 03b7b00..9cb881c 100644
--- a/provenance/THIRD-PARTY-NOTICES.txt
+++ b/provenance/THIRD-PARTY-NOTICES.txt
@@ -57,7 +57,7 @@ Project: root
 - rand_core 0.9.5 — Apache-2.0 OR MIT
 - rand_xorshift 0.4.0 — Apache-2.0 OR MIT
 - regex 1.12.4 — Apache-2.0 OR MIT
-- regex-automata 0.4.14 — Apache-2.0 OR MIT
+- regex-automata 0.4.15 — Apache-2.0 OR MIT
 - regex-syntax 0.8.11 — Apache-2.0 OR MIT
 - rustc-hash 2.1.2 — Apache-2.0 OR MIT
 - rustix 1.1.4 — Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
diff --git a/provenance/sbom.cdx.json b/provenance/sbom.cdx.json
index 980c0ce..c166d2a 100644
--- a/provenance/sbom.cdx.json
+++ b/provenance/sbom.cdx.json
@@ -2259,7 +2259,7 @@
       "version": "0.4.0"
     },
     {
-      "bom-ref": "pkg:cargo/regex-automata@0.4.14",
+      "bom-ref": "pkg:cargo/regex-automata@0.4.15",
       "evidence": {
         "identity": [
           {
@@ -2280,7 +2280,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+          "content": "1f388202e4b80542a0921078cc23b6333bcf1409c1e3f86404cae4766a6131db"
         }
       ],
       "licenses": [
@@ -2302,9 +2302,9 @@
           "value": "Cargo.lock"
         }
       ],
-      "purl": "pkg:cargo/regex-automata@0.4.14",
+      "purl": "pkg:cargo/regex-automata@0.4.15",
       "type": "library",
-      "version": "0.4.14"
+      "version": "0.4.15"
     },
     {
       "bom-ref": "pkg:cargo/regex-syntax@0.8.11",
@@ -3657,7 +3657,7 @@
     {
       "dependsOn": [
         "pkg:cargo/bit-set@0.8.0",
-        "pkg:cargo/regex-automata@0.4.14",
+        "pkg:cargo/regex-automata@0.4.15",
         "pkg:cargo/regex-syntax@0.8.11"
       ],
       "ref": "pkg:cargo/fancy-regex@0.18.0"
@@ -3901,7 +3901,7 @@
       "dependsOn": [
         "pkg:cargo/aho-corasick@1.1.4",
         "pkg:cargo/memchr@2.8.2",
-        "pkg:cargo/regex-automata@0.4.14",
+        "pkg:cargo/regex-automata@0.4.15",
         "pkg:cargo/regex-syntax@0.8.11"
       ],
       "ref": "pkg:cargo/regex@1.12.4"
@@ -3912,7 +3912,7 @@
         "pkg:cargo/memchr@2.8.2",
         "pkg:cargo/regex-syntax@0.8.11"
       ],
-      "ref": "pkg:cargo/regex-automata@0.4.14"
+      "ref": "pkg:cargo/regex-automata@0.4.15"
     },
     {
       "dependsOn": [],
@@ -3992,7 +3992,7 @@
       "dependsOn": [
         "pkg:cargo/fancy-regex@0.18.0",
         "pkg:cargo/proptest@1.11.0",
-        "pkg:cargo/regex-automata@0.4.14",
+        "pkg:cargo/regex-automata@0.4.15",
         "pkg:cargo/regex-syntax@0.8.11",
         "pkg:cargo/regex@1.12.4",
         "pkg:cargo/unicode-segmentation@1.13.3"