diff --git a/package-lock.json b/package-lock.json
index f98dae5d..1e7e1d15 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "@octokit/rest": "^22.0.0",
         "ajv": "^8.17.1",
         "ajv-formats": "^3.0.1",
-        "commander": "^14.0.0",
+        "commander": "^14.0.1",
         "puppeteer": "^24.23.0",
         "reffy": "^19.2.0",
         "rimraf": "^6.0.1",
@@ -849,11 +849,10 @@
       }
     },
     "node_modules/commander": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.0.tgz",
-      "integrity": "sha512-2uM9rYjPvyq39NwLRqaiLtWHyDC1FvryJDa2ATTVims5YAS4PupsEQsDvP14FqhFr0P49CYDugi59xaxJlTXRA==",
+      "version": "14.0.1",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.1.tgz",
+      "integrity": "sha512-2JkV3gUZUVrbNA+1sjBOYLsMZ5cEEl8GTFP2a4AVz5hvasAMCQ1D2l2le/cX+pV4N6ZU17zjUahLpIXRrnWL8A==",
       "dev": true,
-      "license": "MIT",
       "engines": {
         "node": ">=20"
       }
@@ -1853,6 +1852,15 @@
         "node": ">=20.18.1"
       }
     },
+    "node_modules/reffy/node_modules/commander": {
+      "version": "14.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.0.tgz",
+      "integrity": "sha512-2uM9rYjPvyq39NwLRqaiLtWHyDC1FvryJDa2ATTVims5YAS4PupsEQsDvP14FqhFr0P49CYDugi59xaxJlTXRA==",
+      "dev": true,
+      "engines": {
+        "node": ">=20"
+      }
+    },
     "node_modules/reffy/node_modules/puppeteer": {
       "version": "24.17.1",
       "resolved": "https://registry.npmjs.org/puppeteer/-/puppeteer-24.17.1.tgz",
@@ -3054,9 +3062,9 @@
       }
     },
     "commander": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.0.tgz",
-      "integrity": "sha512-2uM9rYjPvyq39NwLRqaiLtWHyDC1FvryJDa2ATTVims5YAS4PupsEQsDvP14FqhFr0P49CYDugi59xaxJlTXRA==",
+      "version": "14.0.1",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.1.tgz",
+      "integrity": "sha512-2JkV3gUZUVrbNA+1sjBOYLsMZ5cEEl8GTFP2a4AVz5hvasAMCQ1D2l2le/cX+pV4N6ZU17zjUahLpIXRrnWL8A==",
       "dev": true
     },
     "cosmiconfig": {
@@ -3789,6 +3797,12 @@
         "webidl2": "24.5.0"
       },
       "dependencies": {
+        "commander": {
+          "version": "14.0.0",
+          "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.0.tgz",
+          "integrity": "sha512-2uM9rYjPvyq39NwLRqaiLtWHyDC1FvryJDa2ATTVims5YAS4PupsEQsDvP14FqhFr0P49CYDugi59xaxJlTXRA==",
+          "dev": true
+        },
         "puppeteer": {
           "version": "24.17.1",
           "resolved": "https://registry.npmjs.org/puppeteer/-/puppeteer-24.17.1.tgz",
diff --git a/package.json b/package.json
index f9c39907..1c401591 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "@octokit/rest": "^22.0.0",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
-    "commander": "^14.0.0",
+    "commander": "^14.0.1",
     "puppeteer": "^24.23.0",
     "reffy": "^19.2.0",
     "rimraf": "^6.0.1",