diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9462db2..15757fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@
 - Add offline SDK throughput and signed memory benchmarks with raw artifacts and explicitly configured named OTLP log result export.
 - Consolidate Dependabot updates for Vitest 4.1.11, Hono 4.13.7, qs 6.16.0, fast-uri 3.1.7, actions/deploy-pages 5.0.1, and actions/checkout 7.0.1.
 - Document local npm lockfile regeneration for contributors who cannot access the Microsoft package proxy, while retaining the proxy-generated lockfile. [#245](https://github.com/microsoft/opentelemetry-distro-javascript/pull/245)
+- Bump the samples' `ip-address` dependency from `10.4.0` to `10.7.2`. [#248](https://github.com/microsoft/opentelemetry-distro-javascript/pull/248)
 
 ## [1.4.0] - 2026-09-08
 
diff --git a/samples/package-lock.json b/samples/package-lock.json
index ba2b33e..033947f 100644
--- a/samples/package-lock.json
+++ b/samples/package-lock.json
@@ -1192,9 +1192,9 @@
       "optional": true
     },
     "node_modules/ip-address": {
-      "version": "10.4.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
-      "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
+      "version": "10.7.2",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
+      "integrity": "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==",
       "license": "MIT",
       "optional": true,
       "engines": {