diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 969a516b6..0b8acffaf 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 0b05794f3..9ccb38a71 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -95,7 +95,7 @@ jobs:
       - name: Use Node.js 24.11 (LTS)
         uses: actions/setup-node@v6
         with:
-          node-version: '24.15.0'
+          node-version: '24.16.0'
       - run: npm i
       - name: Check npm version
         run: npm --version
diff --git a/package-lock.json b/package-lock.json
index b4703ea62..769875835 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -34,7 +34,7 @@
         "https-proxy-agent": "9.0.0",
         "ignore": "7.0.5",
         "ini": "7.0.0",
-        "isomorphic-git": "1.37.6",
+        "isomorphic-git": "1.38.3",
         "jose": "6.2.3",
         "livereload-js": "4.0.2",
         "mime": "4.1.0",
@@ -45,7 +45,7 @@
         "proxy-agent": "8.0.1",
         "proxy-from-env": "2.1.0",
         "rehype-parse": "9.0.1",
-        "semver": "7.8.0",
+        "semver": "7.8.1",
         "shelljs": "0.10.0",
         "unified": "11.0.5",
         "uuid": "14.0.0",
@@ -63,11 +63,11 @@
         "@semantic-release/git": "10.0.1",
         "c8": "11.0.0",
         "eslint": "9.4.0",
-        "esmock": "2.7.5",
+        "esmock": "2.7.6",
         "husky": "9.1.7",
         "junit-report-builder": "5.1.2",
-        "lint-staged": "17.0.4",
-        "mocha": "11.7.5",
+        "lint-staged": "17.0.7",
+        "mocha": "11.7.6",
         "mocha-multi-reporters": "1.5.1",
         "nock": "13.5.6",
         "semantic-release": "25.0.3",
@@ -4244,9 +4244,9 @@
       "license": "MIT"
     },
     "node_modules/esmock": {
-      "version": "2.7.5",
-      "resolved": "https://registry.npmjs.org/esmock/-/esmock-2.7.5.tgz",
-      "integrity": "sha512-jKwL7yYpVOERalCllSnPur59s9M0gV5BKijtmOKclqDMuhqdS7DT/a7cODjz6w1XusE0wAaHBTrK+zgab/ENgw==",
+      "version": "2.7.6",
+      "resolved": "https://registry.npmjs.org/esmock/-/esmock-2.7.6.tgz",
+      "integrity": "sha512-Moibxg8tl+wUeuDZZxHC9yVFi+rYITrPsu8/JDmO9AWVaXiWrFyvklruDv7pP7h3t0UqqPpZiCaZ51lzwVRK8A==",
       "dev": true,
       "license": "ISC",
       "engines": {
@@ -6504,9 +6504,9 @@
       "license": "ISC"
     },
     "node_modules/isomorphic-git": {
-      "version": "1.37.6",
-      "resolved": "https://registry.npmjs.org/isomorphic-git/-/isomorphic-git-1.37.6.tgz",
-      "integrity": "sha512-qr1NFCPsVTZ6YGqTXw0CzamnsHyH9QQ1OTEfeXIweSljRUMzuHFCJdUn0wc6OcjtTDns6knxjPb7N6LmJeftOA==",
+      "version": "1.38.3",
+      "resolved": "https://registry.npmjs.org/isomorphic-git/-/isomorphic-git-1.38.3.tgz",
+      "integrity": "sha512-rOpt0yIW9HD1o6mA4w2f4XP5Lj42QnccbFbhzkby6L+t9c2klQxf9seqyrw5x8JcWWnbuPuN7v7YJ7yvHj9OPA==",
       "license": "MIT",
       "dependencies": {
         "async-lock": "^1.4.1",
@@ -6803,16 +6803,16 @@
       "license": "MIT"
     },
     "node_modules/lint-staged": {
-      "version": "17.0.4",
-      "resolved": "https://registry.npmjs.org/lint-staged/-/lint-staged-17.0.4.tgz",
-      "integrity": "sha512-+rU9lSUyVOZ/hDUmRLVGzyS2v73cDdQjX+XQz1AaOdIE4RysLq0HoPW2HrrgeNCLklkhi904VBU1bmgWLHVnkA==",
+      "version": "17.0.7",
+      "resolved": "https://registry.npmjs.org/lint-staged/-/lint-staged-17.0.7.tgz",
+      "integrity": "sha512-JrSobt+tW3rH8IOMi8tDZd3foorM5yPEkLD/V2NxobgHrFfHWGee4MOLVuZeScgxftEwbHrPHIFA/ZL+nUJeuA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "listr2": "^10.2.1",
         "picomatch": "^4.0.4",
         "string-argv": "^0.3.2",
-        "tinyexec": "^1.1.2"
+        "tinyexec": "^1.2.4"
       },
       "bin": {
         "lint-staged": "bin/lint-staged.js"
@@ -6824,7 +6824,7 @@
         "url": "https://opencollective.com/lint-staged"
       },
       "optionalDependencies": {
-        "yaml": "^2.8.4"
+        "yaml": "^2.9.0"
       }
     },
     "node_modules/lint-staged/node_modules/picomatch": {
@@ -7818,9 +7818,9 @@
       }
     },
     "node_modules/mocha": {
-      "version": "11.7.5",
-      "resolved": "https://registry.npmjs.org/mocha/-/mocha-11.7.5.tgz",
-      "integrity": "sha512-mTT6RgopEYABzXWFx+GcJ+ZQ32kp4fMf0xvpZIIfSq9Z8lC/++MtcCnQ9t5FP2veYEP95FIYSvW+U9fV4xrlig==",
+      "version": "11.7.6",
+      "resolved": "https://registry.npmjs.org/mocha/-/mocha-11.7.6.tgz",
+      "integrity": "sha512-nS9xOGbw2I3cjCpxwZAEJ9xK9lmJ08vEkQvLtz4du9ZrF9UrjRpeJGiIgl2Z+Qs++pmB4ecDe48Fwsh+j+j7xA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -7888,9 +7888,9 @@
       }
     },
     "node_modules/mocha/node_modules/brace-expansion": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
-      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.1.tgz",
+      "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -11966,9 +11966,9 @@
       }
     },
     "node_modules/semver": {
-      "version": "7.8.0",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.0.tgz",
-      "integrity": "sha512-AcM7dV/5ul4EekoQ29Agm5vri8JNqRyj39o0qpX6vDF2GZrtutZl5RwgD1XnZjiTAfncsJhMI48QQH3sN87YNA==",
+      "version": "7.8.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.1.tgz",
+      "integrity": "sha512-rkVq3IXh+4FDGch+KwzX3aV9W3kO54GyEgpvBzSyctDA6Xtd7RJQV1xmXbeQp5v7+VzLOfVqiutSE6GICgPFvg==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -13249,9 +13249,9 @@
       }
     },
     "node_modules/tinyexec": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.1.2.tgz",
-      "integrity": "sha512-dAqSqE/RabpBKI8+h26GfLq6Vb3JVXs30XYQjdMjaj/c2tS8IYYMbIzP599KtRj7c57/wYApb3QjgRgXmrCukA==",
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.2.4.tgz",
+      "integrity": "sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/package.json b/package.json
index 204f66305..acb9ca972 100644
--- a/package.json
+++ b/package.json
@@ -68,7 +68,7 @@
     "https-proxy-agent": "9.0.0",
     "ignore": "7.0.5",
     "ini": "7.0.0",
-    "isomorphic-git": "1.37.6",
+    "isomorphic-git": "1.38.3",
     "jose": "6.2.3",
     "mime": "4.1.0",
     "livereload-js": "4.0.2",
@@ -79,7 +79,7 @@
     "proxy-agent": "8.0.1",
     "proxy-from-env": "2.1.0",
     "rehype-parse": "9.0.1",
-    "semver": "7.8.0",
+    "semver": "7.8.1",
     "shelljs": "0.10.0",
     "unified": "11.0.5",
     "uuid": "14.0.0",
@@ -93,11 +93,11 @@
     "@semantic-release/git": "10.0.1",
     "c8": "11.0.0",
     "eslint": "9.4.0",
-    "esmock": "2.7.5",
+    "esmock": "2.7.6",
     "husky": "9.1.7",
     "junit-report-builder": "5.1.2",
-    "lint-staged": "17.0.4",
-    "mocha": "11.7.5",
+    "lint-staged": "17.0.7",
+    "mocha": "11.7.6",
     "mocha-multi-reporters": "1.5.1",
     "nock": "13.5.6",
     "semantic-release": "25.0.3",