diff --git a/packages/cli/package.json b/packages/cli/package.json
index 16ceacd..124d94d 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -54,7 +54,7 @@
     "@sourcegraph/scip-python": "0.6.6",
     "@sourcegraph/scip-typescript": "0.4.0",
     "cli-table3": "0.6.5",
-    "commander": "14.0.3",
+    "commander": "15.0.0",
     "fast-xml-parser": "5.8.0",
     "listr2": "10.2.1",
     "lru-cache": "11.5.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2f9caf3..edf4953 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -133,8 +133,8 @@ importers:
         specifier: 0.6.5
         version: 0.6.5
       commander:
-        specifier: 14.0.3
-        version: 14.0.3
+        specifier: 15.0.0
+        version: 15.0.0
       fast-xml-parser:
         specifier: 5.8.0
         version: 5.8.0
@@ -2659,9 +2659,9 @@ packages:
     resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
     engines: {node: '>=18'}
 
-  commander@14.0.3:
-    resolution: {integrity: sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==}
-    engines: {node: '>=20'}
+  commander@15.0.0:
+    resolution: {integrity: sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==}
+    engines: {node: '>=22.12.0'}
 
   commander@2.20.3:
     resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==}
@@ -7798,7 +7798,7 @@ snapshots:
 
   commander@12.1.0: {}
 
-  commander@14.0.3: {}
+  commander@15.0.0: {}
 
   commander@2.20.3: {}
 
@@ -11425,7 +11425,7 @@ time:
   ajv@8.20.0: '2026-04-24T15:22:16.529Z'
   astro@6.3.8: '2026-05-26T14:23:50.994Z'
   cli-table3@0.6.5: '2024-05-12T16:36:50.079Z'
-  commander@14.0.3: '2026-01-31T01:47:17.592Z'
+  commander@15.0.0: '2026-05-29T09:16:23.076Z'
   commitizen@4.3.1: '2024-09-27T04:18:48.788Z'
   cz-conventional-changelog@3.3.0: '2020-08-26T18:43:16.534Z'
   fast-xml-parser@5.8.0: '2026-05-12T03:39:29.203Z'