diff --git a/History.md b/History.md
index d8306a5d5b..05730e259e 100644
--- a/History.md
+++ b/History.md
@@ -10,6 +10,7 @@ unreleased
 * change:
   - `res.clearCookie` will ignore user provided `maxAge` and `expires` options
 * deps: debug@4.3.6
+* deps: merge-descriptors@^2.0.0
 
 5.0.0-beta.3 / 2024-03-25
 =========================
diff --git a/package.json b/package.json
index 30c9597269..e5c8d03d1b 100644
--- a/package.json
+++ b/package.json
@@ -42,7 +42,7 @@
     "finalhandler": "1.2.0",
     "fresh": "0.5.2",
     "http-errors": "2.0.0",
-    "merge-descriptors": "1.0.1",
+    "merge-descriptors": "^2.0.0",
     "methods": "~1.1.2",
     "mime-types": "~2.1.34",
     "on-finished": "2.4.1",