diff --git a/README.md b/README.md
index 57ff1f5d..a7c34361 100644
--- a/README.md
+++ b/README.md
@@ -25,7 +25,7 @@ $ npm install -g @salesforce/cli
 $ sf COMMAND
 running command...
 $ sf (--version|-v)
-@salesforce/cli/2.140.0 linux-x64 node-v22.22.3
+@salesforce/cli/2.140.1 linux-x64 node-v22.22.3
 $ sf --help [COMMAND]
 USAGE
   $ sf COMMAND
@@ -8745,7 +8745,7 @@ EXAMPLES
     $ sf plugins trust allowlist add --name @scope/my-plugin --name another-plugin
 ```
 
-_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.15/src/commands/plugins/trust/allowlist/add.ts)_
+_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.16/src/commands/plugins/trust/allowlist/add.ts)_
 
 ## `sf plugins trust allowlist list`
 
@@ -8773,7 +8773,7 @@ EXAMPLES
     $ sf plugins trust allowlist list
 ```
 
-_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.15/src/commands/plugins/trust/allowlist/list.ts)_
+_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.16/src/commands/plugins/trust/allowlist/list.ts)_
 
 ## `sf plugins trust allowlist remove`
 
@@ -8810,7 +8810,7 @@ EXAMPLES
     $ sf plugins trust allowlist remove --name @scope/my-plugin --name another-plugin
 ```
 
-_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.15/src/commands/plugins/trust/allowlist/remove.ts)_
+_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.16/src/commands/plugins/trust/allowlist/remove.ts)_
 
 ## `sf plugins trust verify`
 
@@ -8839,7 +8839,7 @@ EXAMPLES
   $ sf plugins trust verify --npm @scope/npmName
 ```
 
-_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.15/src/commands/plugins/trust/verify.ts)_
+_See code: [@salesforce/plugin-trust](https://github.com/salesforcecli/plugin-trust/blob/3.8.16/src/commands/plugins/trust/verify.ts)_
 
 ## `sf plugins uninstall [PLUGIN]`
 
diff --git a/package.json b/package.json
index a40aff41..37ffa32a 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/cli",
   "description": "The Salesforce CLI",
-  "version": "2.140.0",
+  "version": "2.140.1",
   "author": "Salesforce",
   "bin": {
     "sf": "./bin/run.js",
@@ -175,7 +175,7 @@
     "@salesforce/plugin-sobject": "1.4.112",
     "@salesforce/plugin-telemetry": "3.8.24",
     "@salesforce/plugin-templates": "56.18.2",
-    "@salesforce/plugin-trust": "3.8.15",
+    "@salesforce/plugin-trust": "3.8.16",
     "@salesforce/plugin-user": "3.10.1",
     "@salesforce/sf-plugins-core": "12.2.24",
     "ansis": "^3.12.0"
diff --git a/yarn.lock b/yarn.lock
index 66b57f80..0e2d8b3f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2337,22 +2337,24 @@
     "@salesforce/sf-plugins-core" "^12"
     "@salesforce/templates" "^66.9.3"
 
-"@salesforce/plugin-trust@3.8.15", "@salesforce/plugin-trust@^3.7.89":
-  version "3.8.15"
-  resolved "https://registry.yarnpkg.com/@salesforce/plugin-trust/-/plugin-trust-3.8.15.tgz#6f6e2f20f4621eb453f3d12b6fca4fce51b83b03"
-  integrity sha512-dPQvdb0qdTQFTkCe63o4zmk0/28gFpSqj7GnDWDaHqMIi0WHWdu+w3G7GX8JfsRxKVrMkwfezN27mDPy5g0l3Q==
+"@salesforce/plugin-trust@3.8.16", "@salesforce/plugin-trust@^3.7.89":
+  version "3.8.16"
+  resolved "https://registry.yarnpkg.com/@salesforce/plugin-trust/-/plugin-trust-3.8.16.tgz#876122416fabee5a5474812782fc90aef7408aed"
+  integrity sha512-2cVe/4+acxyC57679mO59rzZsr4CPzn7X+fiOW46+Ndy4l9bzoG77/N5PnHEEZHIvPJXPlq1zvLenzFqo8mNVg==
   dependencies:
     "@oclif/core" "^4"
     "@salesforce/core" "^8.29.1"
     "@salesforce/kit" "^3.2.6"
     "@salesforce/plugin-info" "^3.4.131"
     "@salesforce/sf-plugins-core" "^12"
+    cross-spawn "^7.0.6"
     got "^13.0.0"
     npm "^11.16.0"
     npm-run-path "^4.0.1"
     proxy-agent "^6.5.0"
     semver "^7.8.2"
     shelljs "0.10.0"
+    which "^5"
 
 "@salesforce/plugin-user@3.10.1":
   version "3.10.1"
@@ -10615,6 +10617,13 @@ which@^4.0.0:
   dependencies:
     isexe "^3.1.1"
 
+which@^5:
+  version "5.0.0"
+  resolved "https://registry.yarnpkg.com/which/-/which-5.0.0.tgz#d93f2d93f79834d4363c7d0c23e00d07c466c8d6"
+  integrity sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ==
+  dependencies:
+    isexe "^3.1.1"
+
 which@^6.0.0, which@^6.0.1:
   version "6.0.1"
   resolved "https://registry.yarnpkg.com/which/-/which-6.0.1.tgz#021642443a198fb93b784a5606721cb18cfcbfce"