diff --git a/Cargo.lock b/Cargo.lock
index ba141f6fa1..244c8c4fbc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1817,7 +1817,7 @@ dependencies = [
  "anyhow",
  "clap",
  "dircpy",
- "git2",
+ "git2 0.21.0",
  "tempfile",
  "tokio",
  "tracing",
@@ -5102,6 +5102,18 @@ dependencies = [
  "url",
 ]
 
+[[package]]
+name = "git2"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddddbf932745a6be37109b6112d3ee09696106f848449069d3a57bba937ab82e"
+dependencies = [
+ "bitflags 2.11.1",
+ "libc",
+ "libgit2-sys",
+ "log",
+]
+
 [[package]]
 name = "glob"
 version = "0.3.3"
@@ -13510,7 +13522,7 @@ checksum = "d51ab55ddf1188c8d679f349775362b0fa9e90bd7a4ac69838b2a087623f0d57"
 dependencies = [
  "anyhow",
  "derive_builder",
- "git2",
+ "git2 0.20.4",
  "rustversion",
  "time",
  "vergen",
diff --git a/Cargo.toml b/Cargo.toml
index fcaae3c4de..a0a1645308 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -160,7 +160,7 @@ futures = "0.3.32"
 futures-core = { version = "0.3.32", default-features = false }
 futures-util = "0.3.32"
 getrandom = { version = "0.4", features = ["wasm_js"] }
-git2 = { version = "0.20.4", default-features = false, features = ["vendored-libgit2"] }
+git2 = { version = "0.21.0", default-features = false, features = ["vendored-libgit2"] }
 gloo = "0.12"
 governor = "0.10.4"
 harness_derive = { path = "core/harness_derive" }